Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier: aPSJwdRoxojrWb9OcY2y2LYf1RkEcHx+YMDRQlRrERE=
Subject key identifier: C7:96:84:8D:99:63:64:F6:9F:9C:C4:96:8F:9F:87:AB:7C:AB:2E:48
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 01967CB32E72C969911C28BC417A90A4940C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 14:00:39 +0000
Manifest this update: Mon 28 Apr 2025 14:00:39 +0000
Manifest next update: Tue 29 Apr 2025 14:00:39 +0000
Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: neTMxcGz3CMMO2WsiPlkyjsjmONGvkRXpwRBmouwaBA=)
2: tX7pIK0_Y0DkC_cQB792D8KfMpI.roa (hash: 6bt98IzDmAFpK9cQatBo1xPLFut1eb0d15KmkgIc6Y0=)
3: yHaEkoOTCPurcY3b0F-9VL88Kwc.roa (hash: Y+GSgGL/KpLcJxeK38gow6fyI44wgNDdjmQduqWLn3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b3:2e:72:c9:69:91:1c:28:bc:41:7a:90:a4:94:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Apr 28 14:00:39 2025 GMT
Not After : Apr 29 14:00:39 2025 GMT
Subject: CN=c796848d996364f69f9cc4968f9f87ab7cab2e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:61:b2:bf:34:30:3e:b9:40:36:36:89:9c:
51:66:d7:b3:25:1a:87:2f:bd:57:7f:8b:d0:1f:16:
86:c7:5c:b1:c3:a8:cf:62:f7:b6:ef:c0:ee:da:c2:
27:0b:65:0c:8b:11:26:4d:4f:08:68:e3:6b:f5:43:
d9:00:64:21:b2:21:f2:aa:e2:42:10:bf:4e:c8:45:
4b:56:2f:7d:76:1d:22:42:27:56:24:9e:03:eb:a8:
4e:a7:6b:38:67:8d:ea:7a:d0:2a:a9:23:bd:d2:3b:
8e:d8:1a:f8:a2:2a:60:9a:eb:06:e7:7d:4f:7a:eb:
14:68:82:c0:e8:a7:ea:d2:b6:f6:ae:54:35:73:d6:
bb:5a:90:c6:59:69:27:c1:9a:eb:d0:98:2a:a1:cf:
34:ba:34:0b:6a:19:d6:d6:28:84:ba:a5:6d:2b:40:
c1:6f:3b:2c:d3:eb:73:ee:13:20:99:ff:27:7a:75:
b1:76:29:f1:97:ae:da:fd:3d:cd:96:fa:ec:7c:02:
d2:1d:e9:0a:f6:fe:0d:14:eb:5e:6c:83:ef:ec:6f:
b2:46:12:2d:7f:c5:c1:15:8a:65:da:2d:88:62:0b:
5f:ef:b1:19:5f:dd:8c:1c:19:fb:b4:f5:a0:fe:6e:
01:71:e6:70:01:b6:34:1b:3d:0f:cb:53:c8:57:34:
c3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:96:84:8D:99:63:64:F6:9F:9C:C4:96:8F:9F:87:AB:7C:AB:2E:48
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e3:73:23:d2:b3:84:31:4c:f4:da:f3:cd:ff:25:d5:d5:c1:
98:90:a8:8e:0c:3d:30:24:fc:51:b6:a5:55:6c:f9:1d:b6:f5:
81:b0:99:bd:58:a4:83:fe:e0:60:08:65:89:2c:cb:91:91:e1:
d9:27:c9:ed:09:48:22:5a:5e:65:d3:47:31:f0:3f:d8:d5:cf:
62:08:39:4b:4b:5c:e5:c6:0c:54:4b:8f:a2:6e:ba:f0:ff:1d:
1d:12:ec:ad:17:56:c7:00:ce:a1:68:fa:04:a0:6b:a9:65:99:
d2:58:c6:d4:58:39:c2:88:ca:c2:50:2d:74:62:21:fa:d3:be:
c6:f1:89:75:06:2e:a8:6c:06:ae:99:c2:23:8c:ed:66:3c:8d:
9a:cb:2d:09:75:19:32:82:bb:07:65:87:64:61:6c:1d:8c:2f:
54:23:30:fc:9d:5c:29:60:88:70:a3:e7:50:6f:29:2f:37:a5:
ce:d3:94:29:07:60:44:16:a6:8d:40:18:df:f5:6d:43:84:2b:
e6:94:ef:c3:b0:35:47:bc:1c:b4:c2:99:02:ca:93:c7:c3:9b:
5b:0d:9e:9a:f3:13:aa:71:95:43:fa:61:ce:9c:ec:9f:c2:f3:
a2:11:72:4b:2d:25:83:41:94:87:ae:10:8d:cc:7c:50:a9:0c:
5b:69:cd:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8sy5yyWmRHCi8QXqQpJQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzc5ZDI4NTViODk3NDE4MjA4ZDQ3YmE2ZTUxNDYwMDE1
YjVkN2IwHhcNMjUwNDI4MTQwMDM5WhcNMjUwNDI5MTQwMDM5WjAzMTEwLwYDVQQD
EyhjNzk2ODQ4ZDk5NjM2NGY2OWY5Y2M0OTY4ZjlmODdhYjdjYWIyZTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BFhsr80MD65QDY2iZxRZtezJRqH
L71Xf4vQHxaGx1yxw6jPYve278Du2sInC2UMixEmTU8IaONr9UPZAGQhsiHyquJC
EL9OyEVLVi99dh0iQidWJJ4D66hOp2s4Z43qetAqqSO90juO2Br4oipgmusG531P
eusUaILA6Kfq0rb2rlQ1c9a7WpDGWWknwZrr0Jgqoc80ujQLahnW1iiEuqVtK0DB
bzss0+tz7hMgmf8nenWxdinxl67a/T3NlvrsfALSHekK9v4NFOtebIPv7G+yRhIt
f8XBFYpl2i2IYgtf77EZX92MHBn7tPWg/m4BceZwAbY0Gz0Py1PIVzTDQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeWhI2ZY2T2n5zElo+fh6t8qy5IMB8GA1UdIwQY
MBaAFNrHnShVuJdBggjUe6blFGABW117MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDct
NDQ1ZDQ1ODhjMzEyLzEvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDctNDQ1ZDQ1ODhjMzEy
LzEvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuNzI9Kz
hDFM9Nrzzf8l1dXBmJCojgw9MCT8UbalVWz5Hbb1gbCZvVikg/7gYAhliSzLkZHh
2SfJ7QlIIlpeZdNHMfA/2NXPYgg5S0tc5cYMVEuPom668P8dHRLsrRdWxwDOoWj6
BKBrqWWZ0ljG1Fg5wojKwlAtdGIh+tO+xvGJdQYuqGwGrpnCI4ztZjyNmsstCXUZ
MoK7B2WHZGFsHYwvVCMw/J1cKWCIcKPnUG8pLzelztOUKQdgRBamjUAY3/VtQ4Qr
5pTvw7A1R7wctMKZAsqTx8ObWw2emvMTqnGVQ/phzpzsn8LzohFySy0lg0GUh64Q
jcx8UKkMW2nN2Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:36:40 2025 by rpki-client