Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
File: 2S5c30xU_4aM6JUxXqtY8tiGUMI.mft (raw, json)
Hash identifier: 4ZIcRFptqPVSeUeUN/QA8VCway2lWZyVoM8S/mDjiIs=
Subject key identifier: 39:D0:71:E4:55:DE:BA:65:61:81:ED:CC:87:3D:52:74:9D:C7:22:A7
Authority key identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
Certificate issuer: /CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Certificate serial: 019677C38376B86B800515C9558AEB87BBC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 15:00:23 +0000
Manifest this update: Sun 27 Apr 2025 15:00:23 +0000
Manifest next update: Mon 28 Apr 2025 15:00:23 +0000
Files and hashes: 1: 2S5c30xU_4aM6JUxXqtY8tiGUMI.crl (hash: i/Lefq5d2m/Mj64k9jMsIT8jb1gLxKcVmbYjqr/IGnI=)
2: uU6zg4YH1264IiROqTWMjBqhAVA.roa (hash: OWnA1HPfhWIThBzmOjCNNoLbJUm6FK12YolmGLT6gvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:83:76:b8:6b:80:05:15:c9:55:8a:eb:87:bb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Validity
Not Before: Apr 27 15:00:23 2025 GMT
Not After : Apr 28 15:00:23 2025 GMT
Subject: CN=39d071e455deba656181edcc873d52749dc722a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:78:d8:55:3b:50:c8:14:52:52:36:38:8d:
f2:37:ba:e9:f8:d0:0f:36:81:81:f3:96:bf:3c:48:
70:b3:58:94:88:25:17:d4:f6:d9:1e:d1:14:65:37:
04:57:24:75:e8:47:cd:57:01:5e:4c:48:83:ba:10:
8b:3c:e3:66:1d:d2:be:bf:75:f6:d1:80:db:13:37:
75:7d:bb:47:6f:b2:87:e1:23:3b:01:77:6f:5c:8b:
5e:fe:b8:b8:41:75:f2:08:5e:2d:0a:f1:f6:8d:02:
c4:a8:f6:48:b6:e5:6a:39:b0:fe:95:fd:b5:50:b5:
6a:8e:27:31:b0:de:4f:b2:db:1d:6e:6a:0c:d1:26:
2e:e4:4b:99:1c:7e:c0:f1:dc:c8:6d:e6:d0:5f:e5:
43:ac:9f:59:a9:03:39:7f:f2:2d:64:83:a2:97:9b:
07:3e:7e:68:39:da:da:57:53:3a:fc:df:86:8c:7d:
57:f3:41:90:fe:70:3d:0e:15:b4:b2:73:26:59:0f:
96:00:8d:eb:39:d3:44:64:b2:bd:bc:23:7b:90:b4:
9a:c4:3d:49:af:28:c3:a8:4b:e9:cc:ab:3a:e4:3d:
03:b0:20:ad:42:6b:f7:94:22:fa:bf:2f:5b:fd:9b:
23:fa:e7:34:bf:0a:2e:54:91:cd:83:a7:16:41:1f:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D0:71:E4:55:DE:BA:65:61:81:ED:CC:87:3D:52:74:9D:C7:22:A7
X509v3 Authority Key Identifier:
keyid:D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fe:83:d7:d2:40:ad:e0:7c:a6:2e:02:92:c4:9a:e5:b9:ce:
df:e1:c3:59:31:d7:7c:9b:7d:5e:09:4d:b4:ff:ec:e7:3f:61:
21:24:89:d7:fc:4e:a0:84:f0:6c:cf:b7:aa:25:96:af:a6:bf:
3b:21:f8:6f:56:8e:ad:36:a0:da:9a:26:9e:e8:5c:21:01:69:
bb:63:fd:ab:2c:3e:c5:29:af:d4:10:c6:16:fc:82:d7:c4:ad:
ed:47:9a:c2:fb:fc:f5:c9:54:95:44:8f:f2:9c:20:66:a5:97:
17:b5:88:fc:89:5e:b3:46:70:82:bb:7d:7d:5e:af:bd:76:51:
ef:ae:8e:3c:a1:0b:6e:fb:c7:4a:ce:e3:ba:6e:8d:0a:fd:15:
40:6a:d9:08:11:db:ba:4e:b3:a0:e5:bf:cc:ef:94:e1:1e:30:
25:03:f7:04:cb:7b:f0:3e:a1:f2:03:34:7b:2e:80:05:cb:e1:
e9:2b:57:d5:c5:e8:f6:19:ed:38:c1:d9:34:2e:a5:0f:4e:34:
08:a0:f2:0c:8c:0a:aa:aa:4d:d0:7d:8f:cc:74:a9:65:c0:bc:
86:32:0c:63:34:bc:88:eb:84:c2:8a:4b:b3:9f:51:97:5b:fa:
7b:d2:df:4d:76:47:76:6a:88:cc:97:69:5e:05:35:26:ce:e2:
dd:5e:37:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:39 2025 by rpki-client