Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
File: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft (raw, json)
Hash identifier: 6epE6CQ3k1C61kfWFy97Sp9zc0JxKcNcur1/Ydtke7k=
Subject key identifier: 5E:50:1D:D6:44:4F:C2:9B:2E:50:24:D8:30:A1:97:6A:8E:02:E3:47
Authority key identifier: D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
Certificate issuer: /CN=d9ad6f484530e57cc60e3a865a695948476c413f
Certificate serial: 019748FA7F31883DD45061DEF22BA7FB7337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
Manifest number: 150C
Signing time: Sat 07 Jun 2025 06:01:05 +0000
Manifest this update: Sat 07 Jun 2025 06:01:05 +0000
Manifest next update: Sun 08 Jun 2025 06:01:05 +0000
Files and hashes: 1: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl (hash: hLY/PpVqKXQkWTtGMQxb7v756yCMGJWaK/q0A6yo9Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:7f:31:88:3d:d4:50:61:de:f2:2b:a7:fb:73:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad6f484530e57cc60e3a865a695948476c413f
Validity
Not Before: Jun 7 06:01:05 2025 GMT
Not After : Jun 8 06:01:05 2025 GMT
Subject: CN=5e501dd6444fc29b2e5024d830a1976a8e02e347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:b5:e6:34:7d:23:cc:0f:34:b7:23:e0:27:
2d:c3:9f:8e:f8:f4:96:36:71:00:e1:e8:7b:58:86:
38:f9:a2:0a:71:e4:30:1a:d0:ed:94:b7:12:b0:0c:
85:92:dc:21:a0:c2:66:03:80:cb:e4:da:49:f3:e5:
62:4e:5f:3a:90:a4:08:d3:8b:76:26:19:f7:67:4f:
eb:af:88:e5:fd:db:73:bd:6c:f9:ed:a4:44:b4:2e:
42:eb:1b:c2:ff:dd:07:ce:14:a3:39:2f:83:c6:67:
1d:d9:c9:0a:38:98:6e:11:41:16:85:46:99:35:9a:
99:50:ba:30:3c:35:08:08:de:19:e1:0d:48:cb:dd:
cc:a6:36:c7:b6:79:a8:eb:b3:68:30:1c:be:f7:16:
c7:d3:bb:9e:ce:fb:c1:7e:e0:07:09:a6:99:a0:12:
e4:b3:7f:e8:f4:d8:50:67:b2:d6:60:46:e2:f7:ce:
c9:63:9a:80:c3:6b:0a:2c:8e:6f:01:0b:ac:a4:7d:
2a:2b:bf:b1:d4:4c:5a:dd:44:76:1d:ff:a2:da:55:
8c:08:7c:92:7f:da:d5:81:2f:0d:3f:43:b7:78:07:
62:90:d7:f8:0b:89:d6:c6:55:7c:01:44:9e:60:b0:
4d:01:5d:2d:29:ae:11:09:2d:60:24:8a:79:e3:06:
dd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:50:1D:D6:44:4F:C2:9B:2E:50:24:D8:30:A1:97:6A:8E:02:E3:47
X509v3 Authority Key Identifier:
keyid:D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b4:73:f0:ee:25:ac:7a:4b:40:0d:20:49:52:4e:d8:c2:0b:
c4:e1:f3:5e:85:9e:95:fe:ab:d8:a1:a1:f4:d5:9b:f7:44:8e:
24:10:d5:62:b3:a9:d4:4c:94:f1:41:92:ed:88:21:56:bf:04:
48:9e:93:6c:23:81:8d:c1:f8:44:38:e7:58:d2:bd:99:0d:b6:
9f:9f:6b:85:de:c4:c4:80:bb:5b:43:4a:00:17:4b:39:6b:bd:
3a:ed:fb:30:a0:43:98:b5:63:19:96:3a:e8:a6:53:0b:f8:a9:
06:5c:d5:74:db:11:45:db:66:39:ab:bb:de:6c:d5:44:29:f2:
9a:2d:79:cb:0a:3e:ed:e2:91:30:1c:f1:8b:16:d9:be:3f:fd:
6e:c7:41:7e:b8:9c:57:58:32:bc:02:32:15:eb:10:4c:a8:82:
3c:b2:d4:88:16:c6:28:3c:e2:41:f6:12:98:48:95:5d:a5:a7:
de:e9:27:6e:b0:6d:01:1f:b6:22:07:92:b2:60:fe:37:12:d3:
bd:59:cf:97:9c:80:2e:98:e7:61:c2:ce:99:8f:8d:48:c9:12:
50:7d:e9:2a:0e:d7:6c:82:7e:dd:f6:f2:b4:b0:8c:36:6b:e6:
82:e7:10:42:8f:40:34:bd:1f:bd:1e:27:87:2c:50:67:4c:b6:
b9:5c:cd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:35:41 2025 by rpki-client