Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
File: 2S5c30xU_4aM6JUxXqtY8tiGUMI.mft (raw, json)
Hash identifier: OKthNaKKxBXoPiI7prTJpSJWb0ndpnZkTVvNOCWoqVg=
Subject key identifier: 8E:3F:E8:0B:55:1A:9C:3D:A6:13:87:1E:63:04:AD:F3:EA:96:95:86
Authority key identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
Certificate issuer: /CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Certificate serial: 0196512454178C5EED84E8A68A9DDAC7DC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 03:00:57 +0000
Manifest this update: Sun 20 Apr 2025 03:00:57 +0000
Manifest next update: Mon 21 Apr 2025 03:00:57 +0000
Files and hashes: 1: 2S5c30xU_4aM6JUxXqtY8tiGUMI.crl (hash: 89oTqtQwhE8lUwdugVGc6GzhWFAh5SkK+iI+vaB6AIk=)
2: uU6zg4YH1264IiROqTWMjBqhAVA.roa (hash: OWnA1HPfhWIThBzmOjCNNoLbJUm6FK12YolmGLT6gvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:24:54:17:8c:5e:ed:84:e8:a6:8a:9d:da:c7:dc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Validity
Not Before: Apr 20 03:00:57 2025 GMT
Not After : Apr 21 03:00:57 2025 GMT
Subject: CN=8e3fe80b551a9c3da613871e6304adf3ea969586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:27:89:7a:13:2e:11:e6:ae:2a:ca:07:07:
3e:fc:cb:32:46:13:1f:32:d8:9e:45:b7:7a:df:5d:
13:22:3a:94:3a:2e:44:ed:88:ec:3d:11:2a:7a:fc:
19:d6:1b:c2:a8:1e:40:7e:cc:e4:0e:f4:a2:b6:46:
0f:8b:72:ba:15:f1:37:73:2f:85:6b:e3:b5:cc:6c:
60:99:46:49:79:b0:37:4e:6b:51:08:1d:67:ff:f0:
ce:b8:d4:ff:8f:a9:08:7f:3d:a8:12:35:62:38:55:
e1:f1:f1:53:be:80:bd:25:ae:3a:f6:bd:4c:f4:b3:
69:d0:b6:df:64:ed:e2:d0:a4:0c:d6:8a:8b:4b:57:
d8:21:93:f5:b1:db:a1:93:4c:5c:ca:76:a2:57:40:
79:ed:04:c0:35:75:5c:63:d3:66:cb:41:5f:a3:c5:
2d:06:80:14:07:63:d5:cf:fc:fe:37:ac:95:44:04:
84:b4:bf:93:a5:e2:a0:25:d0:c2:03:21:cb:e8:08:
f3:88:d8:7a:78:47:56:86:04:a6:93:4c:e6:97:c8:
67:bf:41:8d:29:90:62:ba:55:fe:7d:c8:13:25:c9:
67:3d:06:d6:29:bf:e6:09:38:0e:a2:9d:dd:7d:f7:
f1:e1:cb:ec:e8:28:f4:1f:bb:eb:7d:0b:a0:cc:65:
a6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3F:E8:0B:55:1A:9C:3D:A6:13:87:1E:63:04:AD:F3:EA:96:95:86
X509v3 Authority Key Identifier:
keyid:D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:63:e7:59:65:73:cc:1d:19:da:b4:1c:dc:34:ee:fc:7b:0c:
2a:fa:52:38:68:18:9e:59:13:87:bf:c0:91:f9:57:66:86:f1:
d8:11:ba:48:2d:25:45:8d:41:40:70:d7:c2:0d:de:9a:0f:0d:
b5:b7:1c:82:fc:91:56:f3:b7:b9:cc:91:fb:6d:c2:dd:5f:99:
26:07:8b:e1:c0:8e:e7:6b:37:eb:b4:fe:d6:fb:ea:d5:2a:67:
04:15:40:95:c1:32:ef:d7:8d:43:2a:f6:5a:c1:ca:74:be:38:
42:a5:ca:80:94:10:b8:22:f1:d5:71:c4:75:cc:42:ea:d2:cb:
13:44:b3:95:99:33:ef:f7:61:97:96:b8:f7:d0:a8:72:5a:f7:
1c:c3:2f:5f:3a:13:57:cb:1d:86:fd:f5:20:d3:42:96:cf:03:
03:b9:c8:56:5e:80:e3:2f:fc:ef:71:b1:ad:d4:90:c3:80:44:
b7:aa:a5:dc:36:d8:b7:b8:d4:b9:0b:92:f1:46:85:d6:7a:94:
67:89:eb:2d:c7:21:82:7c:6a:7d:e6:76:d1:6a:1c:15:2b:b8:
c7:c0:e0:9c:d9:43:55:23:5a:c6:7d:96:d4:10:93:aa:97:b6:
1a:82:7d:7f:39:88:3c:33:46:64:c5:5e:ce:fe:b4:94:53:95:
20:16:28:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:02 2025 by rpki-client