Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
File: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft (raw, json)
Hash identifier: 1ToRYWPw+Q0HuHqXtzefoZeeNPNg+m51zu87wkKle6A=
Subject key identifier: 62:54:6B:04:00:2C:01:27:29:B9:2A:E2:52:BC:5A:72:30:0F:CD:69
Authority key identifier: D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
Certificate issuer: /CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Certificate serial: 019684DA2BAD8FABE1612AB3436673A7A213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 04:00:12 +0000
Manifest this update: Wed 30 Apr 2025 04:00:12 +0000
Manifest next update: Thu 01 May 2025 04:00:12 +0000
Files and hashes: 1: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl (hash: 39E4P1xNPEsoacZzJswo4vmgeyY/kmedRRueWnyRZHw=)
2: Y1iEUL6HkZgDZU0_OFEdoFw8lAQ.roa (hash: CDvGigjNlLt/aSYIESg4jn5aQHhCGPQhN6LUC2qBNmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:2b:ad:8f:ab:e1:61:2a:b3:43:66:73:a7:a2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Validity
Not Before: Apr 30 04:00:12 2025 GMT
Not After : May 1 04:00:12 2025 GMT
Subject: CN=62546b04002c012729b92ae252bc5a72300fcd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:58:82:9f:b9:31:5c:b3:cb:16:77:e0:93:
36:20:7c:b4:6d:a7:5c:51:64:42:35:b1:35:df:40:
e3:88:7b:38:12:1c:ab:a5:e2:42:24:c0:16:e6:34:
58:69:c1:a8:bd:37:40:18:1d:5e:ad:88:f8:78:92:
08:de:92:02:e6:2f:85:c8:11:f8:56:a2:cb:cb:30:
80:be:df:c2:fa:89:22:e8:e2:5f:6e:54:5b:32:ec:
d7:4a:df:d7:60:39:8a:4a:12:e7:8d:a5:83:6f:25:
de:fc:87:46:0e:cf:cb:21:fe:6d:fd:29:5c:2e:25:
19:fa:bc:9d:22:31:2a:40:5e:0d:7d:4d:a3:23:17:
9c:37:33:47:2d:93:1c:88:b4:a3:42:47:af:d0:f1:
28:99:61:cc:0c:b4:c2:aa:9c:a7:59:3d:5d:81:57:
51:c0:f4:b2:5a:84:f3:aa:20:17:2e:ad:b9:6f:11:
ef:60:70:65:d2:10:6d:88:eb:18:7f:d8:56:f3:99:
19:3e:c3:01:b4:d1:c4:b6:fd:b1:d3:f2:eb:65:1a:
42:a7:56:77:2c:e0:6e:39:ba:8b:a0:7c:06:2c:b9:
b2:3a:30:49:5c:87:5c:67:0b:a5:e0:cb:2d:e3:91:
71:bd:f0:2f:61:62:6a:15:17:4a:e6:db:5a:10:8f:
7f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:54:6B:04:00:2C:01:27:29:B9:2A:E2:52:BC:5A:72:30:0F:CD:69
X509v3 Authority Key Identifier:
keyid:D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c3:f6:bc:6f:d9:b1:46:22:b5:0a:12:a3:07:7b:51:84:35:
81:1d:b2:51:7d:d5:cb:31:16:25:66:15:55:13:6f:70:64:1b:
0d:72:a3:16:64:93:64:2e:55:5e:6d:a3:c8:36:d1:ad:24:f6:
14:06:da:28:16:ed:04:c7:f3:50:99:dd:b3:a4:f2:46:20:c6:
8d:18:cf:93:2d:ff:45:3c:21:d5:ef:8b:47:bc:23:47:b0:a4:
39:2e:d7:27:ed:cf:17:fe:f6:84:ee:90:5f:22:6b:ac:15:ce:
80:94:d9:01:e8:cf:1a:71:a1:1e:cd:cc:68:c5:eb:8e:14:6d:
83:cf:5b:7f:d3:73:ee:8a:7d:1c:00:a9:aa:b9:98:d4:83:0d:
9f:ea:9e:0a:ac:39:22:05:b3:b0:0c:70:57:a8:ce:29:fe:9e:
82:a4:d2:1c:72:90:cf:ee:72:cb:99:70:06:2c:61:14:4b:30:
de:e9:fe:b3:69:8c:9d:56:74:ea:b2:ee:b6:88:52:f0:f7:b4:
d8:ec:dc:1b:1f:e4:67:50:16:83:80:92:77:ff:45:ea:d4:41:
02:56:c3:d8:51:d2:45:7d:41:ee:f3:61:f6:04:01:da:a8:ab:
89:38:34:c7:09:fd:05:ee:bd:07:f4:9b:14:72:93:ae:05:f4:
12:78:d0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:48:51 2025 by rpki-client