Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json)
Hash identifier: a01DX3M8IW/kA6mLI0RgElub4oqk6XK530UYUEBSmIo=
Subject key identifier: 56:2A:A2:5C:57:C3:D3:75:36:C4:C1:17:FA:29:11:20:7D:4C:21:53
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial: 0196C6BA9B1C5240846FEEABC7925836E906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
Manifest number: 0B10
Signing time: Mon 12 May 2025 23:00:40 +0000
Manifest this update: Mon 12 May 2025 23:00:40 +0000
Manifest next update: Tue 13 May 2025 23:00:40 +0000
Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: /YbWtW1hnxKIoVbKScR2JgK0Oafg9Aax3Ja/c07/i78=)
2: IS0smRtY_UHklMsTV-a11MXxvnU.roa (hash: 1NEqhD+uaMSbaGDtUxTmaG/oRgFCvJ6p9cklS658oe4=)
3: WbjFo-ltxvF-7ZrjyQy1FqeRLns.roa (hash: V+1LDHomAKK5fbX6O5ZL1HAUnZGkvTtj4L1E7oUU45k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:ba:9b:1c:52:40:84:6f:ee:ab:c7:92:58:36:e9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Validity
Not Before: May 12 23:00:40 2025 GMT
Not After : May 13 23:00:40 2025 GMT
Subject: CN=562aa25c57c3d37536c4c117fa2911207d4c2153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:fe:14:a2:1b:14:44:96:64:5a:98:92:76:
0c:8e:8d:ba:3e:57:1c:53:03:e4:05:5f:09:d5:f3:
51:76:95:fc:16:c6:f3:d1:88:2e:08:bb:7d:47:e0:
be:8d:6b:54:5d:e9:50:fe:2f:f5:d3:48:20:07:f2:
40:c2:f3:f7:4f:42:3b:d7:b5:24:4f:53:d2:8b:3a:
6a:f1:84:74:c3:9b:99:7e:b7:39:41:bf:e2:7f:a6:
3a:30:52:9b:9f:bc:69:86:0d:a7:cb:f6:1a:6c:bc:
b1:47:2a:2b:7e:f8:ef:26:fd:ad:3c:86:c9:5e:9f:
8f:a9:49:74:e2:40:0c:b8:7e:b1:d1:7d:be:c4:a1:
64:e8:b5:c9:37:c3:35:c7:8b:36:59:d1:b4:bf:50:
5b:31:3a:94:32:ae:64:30:5a:52:f5:27:b8:f9:4b:
14:5e:af:4a:cd:d1:a0:f5:35:b5:0e:29:97:19:07:
63:1f:8e:9a:1f:9f:f6:55:95:78:4e:16:c4:60:a6:
70:28:fc:93:27:c1:47:53:8c:d9:b7:d1:0f:a2:9f:
a3:c4:13:a0:e1:19:2f:d9:20:77:e1:25:d4:3a:57:
3e:d8:34:1f:28:f5:61:16:39:21:eb:4d:2c:55:b0:
b3:fc:9a:9b:12:a3:4e:ae:ff:31:f3:2b:8e:41:c4:
cc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2A:A2:5C:57:C3:D3:75:36:C4:C1:17:FA:29:11:20:7D:4C:21:53
X509v3 Authority Key Identifier:
keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7a:5e:8f:56:ab:07:42:0e:82:c7:a7:75:6c:f4:2f:e9:8e:
ef:34:06:61:d8:92:8f:85:f8:82:9a:a3:5f:4b:81:a1:2b:ae:
98:04:8f:59:4d:1d:da:b8:f5:3c:3c:8f:67:51:7e:09:1f:4b:
d6:59:1c:41:b7:10:55:48:22:49:fd:60:e6:4e:b3:92:fa:2c:
8f:7f:2b:96:b7:da:d5:fb:69:63:80:71:e8:fd:4d:89:b5:30:
93:02:c1:17:69:74:c6:d7:07:aa:c0:6d:f7:a3:22:66:6e:2b:
10:ba:15:f5:c0:6a:1c:91:c4:c1:ad:0f:83:49:4c:94:c1:a5:
a2:78:46:76:a6:11:ce:16:6e:c3:f6:0e:7e:f5:21:66:58:ff:
08:c4:2f:d1:f7:9c:b0:97:64:94:bf:13:29:e0:ef:7a:c4:a3:
cb:79:ec:e0:a5:d0:41:33:1c:90:f7:bc:82:d9:5e:72:99:15:
7f:64:6d:e6:0d:29:d6:f7:83:e3:63:5f:85:81:5f:91:e8:4c:
0f:25:16:0b:ff:71:2a:d5:42:88:73:e6:08:de:17:3f:85:2e:
80:52:7b:f1:04:6c:8d:05:95:b2:2f:c1:fc:42:8f:7f:6e:64:
59:86:13:1e:ee:e0:96:6c:5a:2f:92:00:a9:38:69:3d:f1:e4:
fc:a3:1f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:11:06 2025 by rpki-client