Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File: 2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier: YjOHqbkgJtyWZL6qEDt41rSmOFJnSRGhFVm6j+99JsQ=
Subject key identifier: 1D:F6:3B:34:9F:FD:5F:59:9D:57:BF:F4:FF:42:A3:08:33:A5:D7:3C
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer: /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial: 01969CE2C5A0BE786C9995501B461E34AA05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number: 1522
Signing time: Sun 04 May 2025 20:00:29 +0000
Manifest this update: Sun 04 May 2025 20:00:29 +0000
Manifest next update: Mon 05 May 2025 20:00:29 +0000
Files and hashes: 1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: 0YgfUF2yklO3z+jfgS19GZhhr5lzTNDMpdnNDb6SDok=)
2: TtL1ROIX4qoe3FCQrbezbJvdiQE.roa (hash: EUtuOvVr+TGeDq+HxLBuoNhksrH6/dbzAs2zVkQm8sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:e2:c5:a0:be:78:6c:99:95:50:1b:46:1e:34:aa:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Validity
Not Before: May 4 20:00:29 2025 GMT
Not After : May 5 20:00:29 2025 GMT
Subject: CN=1df63b349ffd5f599d57bff4ff42a30833a5d73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c4:c2:8c:45:d5:b0:0b:d6:a7:39:14:1e:98:
ac:ce:1a:ed:d3:7e:3a:0d:3b:aa:56:20:6b:35:13:
97:72:fd:b6:fe:ef:4d:ea:3d:b0:8f:51:d7:27:25:
ca:1f:58:22:ad:0d:e1:61:03:98:65:fe:a5:c1:4f:
49:f7:cc:3c:e2:a4:26:35:1c:8f:de:bf:86:4e:91:
82:f0:8c:44:89:b5:a1:73:35:e3:68:14:31:af:36:
b5:31:53:72:15:a5:a2:07:20:4b:d7:8a:47:2f:62:
31:c1:2a:72:e0:9e:dd:bf:e5:53:19:f0:92:45:0d:
42:b2:d6:fa:f4:7e:f9:e9:f8:b0:42:1f:2e:64:d6:
94:32:f9:75:cc:cf:2f:4b:22:06:82:c6:16:eb:48:
a0:19:54:a3:ec:78:d7:a7:27:3a:54:3c:f1:15:2c:
3a:6d:1d:87:2d:43:51:eb:3d:56:74:6e:37:70:bb:
bf:ee:b8:c1:1d:66:ed:78:0c:3a:75:0d:14:a1:b2:
0f:ac:a7:e3:a5:25:1d:95:ed:61:e4:9a:b4:53:6c:
be:78:09:82:aa:77:6f:cb:9d:f1:02:5f:a3:1f:48:
50:a5:f3:e3:c8:95:f1:1a:1f:76:88:95:f4:f8:94:
2d:1b:b3:e6:57:2b:92:70:cf:31:93:d4:4d:86:12:
7c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F6:3B:34:9F:FD:5F:59:9D:57:BF:F4:FF:42:A3:08:33:A5:D7:3C
X509v3 Authority Key Identifier:
keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1b:1e:98:0c:13:fc:ad:12:42:6d:79:69:2f:28:2d:97:09:
f8:ea:0d:5f:60:49:63:8b:ae:4d:ba:81:83:5b:54:de:b7:57:
56:f9:41:38:16:33:c1:24:93:83:15:d6:9f:0d:fc:43:ae:f5:
56:91:7d:d5:25:00:4d:82:a4:84:10:4b:51:bf:4c:e2:c8:08:
5a:c7:a3:16:46:9e:51:55:dc:14:b9:0e:02:b6:36:c9:42:77:
1c:eb:05:8d:48:7a:94:04:ce:53:7c:da:6a:52:df:53:1d:38:
42:0c:de:bd:fb:91:e2:77:2f:a3:c9:78:d9:37:18:86:5b:e3:
1a:dd:be:a1:5a:e3:d5:07:0d:79:bf:71:09:e6:a3:b5:41:c9:
27:05:40:09:45:2d:f5:75:64:18:c7:04:4f:e6:8a:e1:75:90:
36:78:20:86:e2:13:8f:bf:06:82:2c:f4:25:dc:55:61:1e:c0:
d4:62:83:3f:4d:71:b1:aa:55:9a:f0:7b:47:66:aa:15:ce:da:
5b:a2:4a:d5:fb:11:f3:ab:b7:0b:0e:be:b9:39:50:7c:a9:34:
20:3b:7e:3f:5b:f9:c7:9e:7e:34:ce:c1:6c:5c:d3:7d:89:d4:
c3:8a:a9:9d:51:ae:c6:23:50:a7:c6:3f:cb:b8:e8:1e:d4:2a:
6a:41:c1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:11:11 2025 by rpki-client