Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft
File: 2zdeFqGTZ96ZuySsEV0lmioEgaw.mft (raw, json)
Hash identifier: xs91MKf+IaSkUSE7+Pzna7mhd21kw1puC+WtE3mI2wE=
Subject key identifier: 2D:D1:06:37:1A:F6:88:F8:27:94:53:A4:DD:F5:C3:13:CC:36:7E:93
Authority key identifier: DB:37:5E:16:A1:93:67:DE:99:BB:24:AC:11:5D:25:9A:2A:04:81:AC
Certificate issuer: /CN=db375e16a19367de99bb24ac115d259a2a0481ac
Certificate serial: 019658DDABD598EEA91B514E3A99D5182FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zdeFqGTZ96ZuySsEV0lmioEgaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft
Manifest number: 0A99
Signing time: Mon 21 Apr 2025 15:00:44 +0000
Manifest this update: Mon 21 Apr 2025 15:00:44 +0000
Manifest next update: Tue 22 Apr 2025 15:00:44 +0000
Files and hashes: 1: 2zdeFqGTZ96ZuySsEV0lmioEgaw.crl (hash: TgITBH+EBZvaANEAByDp9co6MpysaLE9JkBn3XwAXdY=)
2: x6hLDer_XW1q_iEu4GXkzkZyC4s.roa (hash: WqVvea5/LNqbNIIZsdml33Mg9/QcNbUM12u8YdmaIWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zdeFqGTZ96ZuySsEV0lmioEgaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:ab:d5:98:ee:a9:1b:51:4e:3a:99:d5:18:2f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db375e16a19367de99bb24ac115d259a2a0481ac
Validity
Not Before: Apr 21 15:00:44 2025 GMT
Not After : Apr 22 15:00:44 2025 GMT
Subject: CN=2dd106371af688f8279453a4ddf5c313cc367e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:e9:c9:af:36:7e:f9:d1:a6:11:2d:30:c7:
c4:30:d7:32:37:f6:88:b7:e5:e6:84:00:4e:a4:ff:
a7:d2:83:ac:76:e5:f0:a9:77:ad:20:de:6d:be:c9:
86:b5:f3:25:3f:98:71:b2:f6:d2:38:86:90:92:ac:
10:55:24:81:13:30:e6:f8:ba:47:ff:4d:ed:a6:0a:
24:36:05:85:dd:78:1b:3b:e8:c8:4f:9a:1f:3a:75:
7d:61:f6:31:a3:04:85:e5:ec:28:74:6a:9c:d5:8b:
7d:3d:8e:ee:80:86:63:f3:5b:b2:5b:74:53:d7:4e:
d0:ac:67:10:60:d0:59:f1:10:e4:6e:b2:79:81:de:
b5:d2:f8:46:cc:0a:dc:69:6e:8c:c3:cb:95:fa:4d:
22:d1:83:0c:d2:17:b8:8f:b7:c1:06:ab:46:56:1c:
cd:3f:0e:9c:80:31:99:56:33:6e:f9:97:97:f7:1c:
91:d3:03:8c:7d:79:01:85:c1:d3:eb:e6:e2:bd:4d:
96:7c:a4:27:03:02:b4:95:fd:55:72:1f:3e:06:c2:
d5:bc:37:f6:88:de:86:dc:a7:66:0c:83:28:7d:49:
f5:06:95:6b:7b:70:0a:59:8d:ec:ac:c9:87:ab:3e:
43:8f:79:45:5f:4f:d3:d1:4d:9e:53:d2:90:ef:29:
0f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D1:06:37:1A:F6:88:F8:27:94:53:A4:DD:F5:C3:13:CC:36:7E:93
X509v3 Authority Key Identifier:
keyid:DB:37:5E:16:A1:93:67:DE:99:BB:24:AC:11:5D:25:9A:2A:04:81:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zdeFqGTZ96ZuySsEV0lmioEgaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:dd:a2:38:35:0e:41:6e:3a:9a:df:ad:e8:30:e8:87:96:12:
ea:0e:4f:39:b7:8e:55:ce:dd:1e:56:69:c7:63:29:98:2e:03:
a9:32:b7:46:07:42:b6:55:cc:8d:50:f7:68:0d:90:64:5d:aa:
14:25:c9:0e:e0:bf:2f:7e:6d:7c:db:96:26:96:f8:96:b1:81:
a2:63:02:50:44:4c:b5:ba:83:c5:21:37:89:e3:27:44:3c:e7:
4a:52:c4:3e:1d:ef:b9:5c:e5:bd:07:af:04:66:b7:c0:78:5a:
a8:a2:88:2a:a2:f1:f5:b2:b6:4a:3c:61:1a:c3:fd:80:69:79:
fa:b4:17:a2:44:44:f8:0c:a0:30:bf:3d:21:1c:3f:57:62:3d:
0e:d6:d0:44:66:b4:2b:2e:87:79:59:b8:c0:70:09:6a:b9:90:
bd:cc:a6:70:23:0a:c1:41:d2:d4:a3:d1:bd:62:96:63:26:d1:
a9:dc:d8:ba:16:20:78:3e:ce:93:f2:a4:d5:0c:ff:7f:1b:e8:
7f:a1:56:14:8e:62:f1:dd:6b:49:0f:29:db:3d:86:7a:6d:20:
3c:57:e3:4e:83:d2:28:c2:0d:21:0a:43:87:46:83:3b:70:38:
05:94:21:e9:63:dd:e9:93:39:b3:69:d8:62:bb:ce:7d:a2:00:
03:2a:2f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:30:56 2025 by rpki-client