Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
File: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json)
Hash identifier: GN8bZ+1gUXAAASMJ+YtQias32ZXUOT1f6M4zozJHPo0=
Subject key identifier: 20:D1:51:D2:64:55:98:EE:0A:AE:D2:07:F3:2B:A1:A9:83:D5:E5:EC
Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
Certificate issuer: /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Certificate serial: 019677FB274E520E06C1B17E0A1474C164B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 16:01:10 +0000
Manifest this update: Sun 27 Apr 2025 16:01:10 +0000
Manifest next update: Mon 28 Apr 2025 16:01:10 +0000
Files and hashes: 1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: PA7xtF+rxcUQwwmFskFann+PliR+sdK72MqcfLtQs9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:27:4e:52:0e:06:c1:b1:7e:0a:14:74:c1:64:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Validity
Not Before: Apr 27 16:01:10 2025 GMT
Not After : Apr 28 16:01:10 2025 GMT
Subject: CN=20d151d2645598ee0aaed207f32ba1a983d5e5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:85:45:cb:74:00:fb:80:ee:90:d6:7d:23:
5f:9b:16:de:99:46:ef:98:76:73:5f:44:a1:9c:9c:
74:1c:61:2f:b7:f9:f2:2d:c0:2e:e3:44:4d:e7:d8:
d8:6b:52:f3:27:26:a1:17:be:a3:07:79:d0:0c:76:
d7:ea:88:65:66:df:ea:6f:54:5e:b3:b8:bf:d4:81:
f6:ac:01:3d:47:c7:7f:cd:17:94:0b:df:ef:2b:a4:
5d:51:a4:95:7f:6f:17:b5:ba:b0:50:23:fb:3f:50:
14:8e:6c:68:eb:0c:72:0a:25:79:a5:53:cb:67:59:
31:5f:d5:46:45:18:0e:65:0d:a6:8d:0d:9f:2b:3d:
a6:e1:a8:6f:8d:32:ed:2b:43:90:85:3d:42:56:24:
62:b0:ea:8c:70:53:ca:e2:7c:97:3a:52:a6:8b:39:
40:d0:25:15:b6:7f:93:bc:0a:ab:ae:ff:21:8d:c7:
ab:7f:56:46:bc:6d:b0:a4:63:5f:32:fe:ca:23:e5:
84:d6:c4:ca:23:36:5f:be:a7:95:2a:47:f6:1c:1e:
ed:ff:62:4a:bc:96:ca:1d:b7:7c:68:35:8d:7a:f0:
af:ce:82:9e:1c:f2:80:33:61:fc:25:9d:fb:b2:40:
e0:89:79:ce:3b:a7:35:42:08:bb:1f:9b:02:d1:a8:
d8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D1:51:D2:64:55:98:EE:0A:AE:D2:07:F3:2B:A1:A9:83:D5:E5:EC
X509v3 Authority Key Identifier:
keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:af:ce:90:b1:eb:b8:64:1a:d1:65:e4:b0:28:50:33:e6:10:
6b:6a:8c:3a:0b:0d:c1:39:bd:e3:59:8e:6e:e3:53:f3:96:3e:
39:50:31:0a:a5:94:7d:67:6f:bb:97:b0:67:3c:69:22:ca:bb:
bf:8f:c3:10:99:ca:4c:4e:5d:ce:77:dc:ce:8f:b7:79:09:b2:
78:2b:a5:17:f9:e9:4b:58:83:68:bc:69:74:07:b1:fc:54:c9:
74:d6:af:f9:d1:e4:c4:b2:10:5a:62:9d:99:ed:d3:79:91:f3:
48:dc:3f:7b:5f:75:04:6f:e5:10:05:03:08:cd:5a:c9:36:51:
5b:71:73:e1:3b:43:ee:4e:9b:46:8c:ef:f7:42:c1:75:b9:cb:
81:b1:6f:a5:1a:53:20:3b:a6:16:1d:6b:5a:82:74:21:0a:eb:
7c:2d:c2:53:0d:1d:4f:df:7e:6b:88:c4:ca:d9:7d:83:c8:49:
16:f6:41:9e:53:32:70:59:59:f9:28:bb:27:45:b2:da:c3:61:
40:b8:27:47:b5:70:2e:66:20:e8:de:11:98:e2:ad:66:2b:d9:
84:97:33:52:de:f4:ee:e1:f6:e8:d3:9c:d4:a2:4b:f3:5f:5c:
5a:43:23:c8:9e:63:36:ed:5b:9e:08:ef:62:a5:9c:f9:93:7f:
69:f5:20:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:40:32 2025 by rpki-client