Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: pw9D6c44gghIJtv68x2loyEn2bSj0VY53eXn6S7C7kg=
Subject key identifier: 47:3B:97:59:ED:62:62:B1:C6:F2:A6:01:7C:B1:29:46:6C:8B:40:9C
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 01967643413CAB7C246DDC3DC9CDF885231A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 1517
Signing time: Sun 27 Apr 2025 08:00:41 +0000
Manifest this update: Sun 27 Apr 2025 08:00:41 +0000
Manifest next update: Mon 28 Apr 2025 08:00:41 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: nU8bh8g7RE9KyGFcnRdA1VCGBOb2qXUHE7KKZ+9zJsg=)
2: tRJ-BFOul5VHl3dNMXgsuOwV3fo.roa (hash: pgbFxeJVexeBAKYnPH6MZKH2xCeZI1yAADTtVOgrLAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:41:3c:ab:7c:24:6d:dc:3d:c9:cd:f8:85:23:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Apr 27 08:00:41 2025 GMT
Not After : Apr 28 08:00:41 2025 GMT
Subject: CN=473b9759ed6262b1c6f2a6017cb129466c8b409c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:04:84:c3:52:43:ac:b0:76:be:f4:d5:7a:
23:10:d8:81:63:70:23:a3:26:89:2b:9a:13:e9:20:
c7:a7:8f:23:fe:59:f5:84:b7:c8:cd:02:92:18:83:
82:45:61:41:8f:6d:0a:67:08:3f:40:48:ea:f6:08:
c6:fe:92:47:35:42:47:f3:35:83:1f:56:4f:7f:cf:
31:a9:a8:f0:36:af:4d:4c:cc:b5:8f:06:ba:e1:bd:
a1:af:7b:6f:ba:aa:5b:84:04:27:e0:b2:d5:4d:f8:
eb:f7:1e:31:13:ad:a8:04:58:42:fe:0f:08:9e:7a:
f3:67:9b:7f:d0:42:c5:b3:a8:05:d8:37:f5:dd:39:
0e:f4:7b:5a:b2:14:37:bd:74:b3:ed:0c:d2:fe:7a:
fa:c8:f8:bd:41:70:75:4c:f4:7a:5e:ee:95:9f:2c:
20:fc:76:e1:c6:fb:c6:4f:80:96:16:89:2a:28:b9:
57:b6:b9:d4:ce:6f:7c:d6:34:c3:d2:e2:7b:7d:e9:
4a:50:20:cc:cc:eb:5c:83:d0:57:8c:4f:1b:ed:8c:
50:98:a3:af:d9:40:3f:05:0c:16:4b:f9:c2:84:4c:
69:a6:13:6b:38:1c:6f:37:25:0c:fa:35:31:d1:81:
e8:ca:ff:d1:6f:48:54:d0:7a:77:be:8b:28:8c:97:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3B:97:59:ED:62:62:B1:C6:F2:A6:01:7C:B1:29:46:6C:8B:40:9C
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:16:a5:17:ca:ef:58:e3:20:84:14:d5:1e:19:37:ce:43:ac:
42:3e:6b:33:3f:10:3e:07:a5:40:ed:8b:73:3c:99:97:0a:36:
97:c2:cf:d0:36:00:98:a2:bc:b1:d1:a4:9c:7a:32:55:f9:43:
3c:7e:55:1c:74:60:9d:fe:85:ff:67:2e:1a:65:22:ee:4e:62:
bb:f3:e9:30:0f:4b:ab:63:3c:fc:4f:02:f3:90:86:ac:43:49:
84:3f:fa:77:24:47:27:c8:51:71:92:bd:12:61:8e:26:26:84:
f7:fb:5a:fe:47:1c:eb:10:88:74:d4:e5:e7:93:79:12:a9:61:
ea:19:29:d7:24:2f:16:24:f3:ac:f2:98:d0:0e:10:7c:ca:97:
1e:83:e7:81:93:26:ef:cf:16:66:cc:fc:40:67:26:2b:ab:d1:
44:f2:4a:3b:ef:1f:45:88:84:64:0e:cd:84:95:d9:77:9b:f7:
f5:1d:8b:c4:7a:c6:1c:fb:9b:c7:e2:1b:e7:92:e9:6c:0d:d5:
4a:d8:d6:79:bb:35:56:64:42:ff:84:fa:3c:0e:c4:ae:1a:47:
2b:22:3d:29:e9:f3:b7:80:db:9e:7e:c5:b8:84:e5:50:15:1d:
de:9d:f0:37:43:a8:72:89:51:0d:e8:9c:cf:5a:aa:c5:61:7d:
a7:c2:c3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:19:06 2025 by rpki-client