Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
File: 2x2jIYQ_n60TjmEV2FvuipILjh0.mft (raw, json)
Hash identifier: yjCH2+AO/hTtFHX42qX8JjGJ/ptgd49W2acu/a9lmrU=
Subject key identifier: C5:9D:12:62:01:0A:DA:0D:B6:77:6C:28:96:A8:AC:75:C5:B7:BE:83
Authority key identifier: DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
Certificate issuer: /CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Certificate serial: 01967FEAD6207304B30969569F0DA894CA7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 05:00:18 +0000
Manifest this update: Tue 29 Apr 2025 05:00:18 +0000
Manifest next update: Wed 30 Apr 2025 05:00:18 +0000
Files and hashes: 1: 2x2jIYQ_n60TjmEV2FvuipILjh0.crl (hash: IuNNashjVYu+JmC9brLiBujMrBbM3IWxVJcyTGT5ZAI=)
2: gX7yqrsOZn21TglKYSwC7nvDyYU.roa (hash: OPLFwfaXc7vtj9ls4Hz8OLeHPQAJ08mEvbmGmH8DGlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ea:d6:20:73:04:b3:09:69:56:9f:0d:a8:94:ca:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Validity
Not Before: Apr 29 05:00:18 2025 GMT
Not After : Apr 30 05:00:18 2025 GMT
Subject: CN=c59d1262010ada0db6776c2896a8ac75c5b7be83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:71:32:85:9b:7f:bb:39:6f:cd:43:30:8c:
72:09:71:0c:cb:52:b9:58:65:d0:dd:41:c2:38:a4:
1e:c5:2b:23:ca:23:99:fa:bb:3d:4a:61:4d:cc:39:
59:4d:15:a4:01:2d:0c:a8:8f:cc:d8:e9:d1:f4:13:
3a:4c:4b:3c:b1:c0:73:dc:2a:38:e5:42:12:75:9f:
ee:55:0e:53:fc:cd:51:37:ed:00:fc:d6:4b:bd:d0:
8a:66:e6:34:15:1b:81:b5:62:19:c2:3d:cb:ac:8c:
84:a1:8d:2b:b9:2a:6f:af:11:86:e8:16:3b:f1:e4:
38:5c:4c:8e:52:9f:91:ae:0e:56:45:1b:34:8e:2f:
b4:32:ab:49:f8:1a:b5:fc:c1:76:92:7c:9e:93:d7:
07:73:d2:94:9e:55:1c:31:f3:cf:74:9d:ad:05:37:
b2:34:97:a9:f0:42:f7:44:a5:e0:95:e8:1f:89:f4:
c4:af:8d:69:da:4b:cd:93:48:cc:46:45:6f:aa:27:
4c:2b:82:02:72:50:a3:f1:5c:64:3b:57:52:29:0f:
67:e3:58:6e:3a:35:c9:62:e1:e3:fe:4f:32:fa:4f:
62:1a:f7:23:e3:17:17:f9:4b:64:16:71:98:eb:d3:
f0:95:fe:50:7f:8d:d3:20:e9:c9:86:a0:bf:7d:0d:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9D:12:62:01:0A:DA:0D:B6:77:6C:28:96:A8:AC:75:C5:B7:BE:83
X509v3 Authority Key Identifier:
keyid:DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:37:e0:fc:4a:ba:6c:24:8d:ae:90:d7:8c:27:3e:e4:8e:6c:
57:40:ce:a4:67:a3:c5:23:a9:e8:b4:21:12:ae:47:f1:46:9c:
c0:c9:52:8d:7e:34:9b:f1:72:c4:20:50:c7:34:06:03:5b:fd:
90:8a:01:19:98:10:37:10:38:4a:a4:04:52:cd:2e:a1:44:7d:
61:8f:90:5a:6d:17:77:a3:2c:31:9d:26:cc:2a:ee:91:17:eb:
db:f6:3c:a9:13:de:d8:a6:e5:b2:2b:11:68:e9:d5:f9:73:7a:
45:9d:47:f4:d1:3e:c5:04:2f:fd:6d:30:4e:43:27:94:75:b3:
d0:7c:45:31:fb:00:0b:44:01:c7:e4:9f:66:15:b5:df:a5:e1:
d0:64:bc:7f:1c:dc:97:1c:57:ee:fa:d5:2c:02:4b:8b:84:da:
c3:5f:11:93:50:0d:29:5d:fd:fa:7c:c4:19:39:d6:11:a7:61:
77:7d:ec:62:59:da:2f:9c:9f:46:60:59:40:d5:af:58:54:41:
a1:5b:67:c2:fc:ad:97:8e:be:d9:02:12:69:84:86:14:63:04:
c9:da:bb:f7:ce:24:d3:98:73:d0:eb:5a:df:eb:b3:9c:fd:43:
4c:a1:1f:33:2f:82:d8:0a:64:e2:9e:4d:14:43:f0:1c:b3:4a:
81:85:93:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:47:53 2025 by rpki-client