Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File: 2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier: P+LrCNaEHJ1PrRLxdfJ510NiBBhjyFtTKPctkOuIIhI=
Subject key identifier: 5D:1D:68:6D:1B:5D:55:B5:23:59:66:99:CD:60:D0:34:FF:41:E8:EB
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer: /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial: 0196729DE51003DA9538FB4AA0636F5E5578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number: 150F
Signing time: Sat 26 Apr 2025 15:01:12 +0000
Manifest this update: Sat 26 Apr 2025 15:01:12 +0000
Manifest next update: Sun 27 Apr 2025 15:01:12 +0000
Files and hashes: 1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: AOY8VUXQUDvX7mml70LuhOlkdOm2tpQuUviJIGIDmG4=)
2: A8jjmK0kbHo3shuzOjuaZPLY0lA.roa (hash: vis28C1mwfjy7KcDtg+2X5RUSRegAsoJjOlr68nOUKw=)
3: AxYrlpLs1hzYP3fW7HLLvBvzGpQ.roa (hash: Q7nlxsfzrWdD9hSpE1mmCZFMWmLhOUPGmqqA4g2obUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:e5:10:03:da:95:38:fb:4a:a0:63:6f:5e:55:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Validity
Not Before: Apr 26 15:01:12 2025 GMT
Not After : Apr 27 15:01:12 2025 GMT
Subject: CN=5d1d686d1b5d55b523596699cd60d034ff41e8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:03:62:9d:b0:dc:de:44:c5:cc:49:af:a5:67:
42:48:c7:06:81:75:87:de:3d:46:40:89:8c:76:f0:
3a:cf:77:a1:dc:1c:5f:b0:92:06:55:98:b5:66:0e:
31:0b:b8:99:0c:9c:85:d6:1e:ff:e8:84:3a:3d:bc:
59:3f:56:45:c6:03:74:56:76:6f:f0:6e:6b:6b:dc:
07:18:31:fd:48:d4:ca:50:58:33:fe:5d:0c:bf:e4:
43:5a:ef:e9:1c:22:1e:85:a4:83:f1:55:b9:05:1b:
5d:a0:7b:e0:b6:38:f5:05:68:dc:9c:f3:75:3a:1d:
e5:c5:d0:1d:1a:6f:a0:6d:df:0c:08:3c:82:fe:a5:
f7:e7:ab:c6:bc:7b:e3:99:25:fc:79:b9:c0:0d:6e:
29:fe:d9:28:3e:ce:65:80:6c:e0:2d:c3:98:27:8a:
c0:c2:29:dc:ae:30:70:e9:b3:9a:a9:8d:cd:89:a9:
ff:21:7e:fa:a6:85:93:27:34:2b:89:c2:e5:66:8d:
a9:3e:e4:02:a6:ca:6d:1d:3a:6d:56:ea:a5:0c:b5:
69:a4:06:f5:70:95:eb:75:f1:72:c9:38:c8:5f:a7:
f4:2d:0f:60:02:50:be:7c:34:59:3b:a4:6d:52:5c:
e1:a8:0d:f2:72:7d:44:95:f1:94:09:e2:65:1d:d4:
3f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1D:68:6D:1B:5D:55:B5:23:59:66:99:CD:60:D0:34:FF:41:E8:EB
X509v3 Authority Key Identifier:
keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:48:d0:55:e0:3e:77:62:d4:ad:73:05:46:5f:0f:86:de:a8:
39:29:8d:8e:28:31:8b:52:1c:c2:c9:75:39:8f:c4:74:43:09:
c9:11:6d:3b:cb:1a:d8:1a:ca:87:02:8a:ca:2a:3e:86:c8:1d:
8f:0f:51:d3:bd:42:f0:22:2f:7c:66:ae:f1:e7:ac:04:10:52:
dd:6d:2a:43:b8:14:e9:56:26:14:ca:74:27:a7:11:28:46:63:
86:0b:0e:c3:45:10:26:c3:59:00:5a:fa:c5:c9:46:ae:15:5f:
02:dd:e9:fa:78:f8:69:b5:9f:00:e0:72:d6:4c:19:79:0b:69:
1e:b2:8e:c8:c7:25:53:65:e4:de:64:ce:8e:8a:f5:91:48:27:
95:48:3f:65:da:b7:04:d9:b1:22:6d:99:04:20:d6:08:28:be:
33:3f:a0:d8:d9:15:47:ea:7a:4f:c5:55:c5:a3:42:d2:bd:06:
cb:2e:2f:36:8a:c6:25:fb:cb:85:d9:c3:ed:af:fe:44:29:35:
5e:3a:7d:b3:3b:b2:6c:6b:39:a5:dd:19:e5:3f:88:90:f7:bc:
b6:4e:3a:fd:83:56:c0:39:83:5b:f6:2f:1c:f0:df:f4:31:98:
26:7d:98:58:71:bf:5b:70:37:a1:fc:bd:19:0c:4c:eb:f4:e7:
be:e4:05:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:16:45 2025 by rpki-client