Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
File: 2boyAk4sthQilREv5h9rG8NFe8s.mft (raw, json)
Hash identifier: RIKFIqeCnQnr58jhUgPDp9z1iWLdughlAcTX3Bvabdc=
Subject key identifier: 37:22:46:F6:CB:5B:EB:E7:61:93:77:86:C1:86:58:3A:79:8C:1B:A1
Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
Certificate issuer: /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Certificate serial: 0196545BC3A6328013DD2AE0D90029F5DA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
Manifest number: 01FD
Signing time: Sun 20 Apr 2025 18:00:21 +0000
Manifest this update: Sun 20 Apr 2025 18:00:21 +0000
Manifest next update: Mon 21 Apr 2025 18:00:21 +0000
Files and hashes: 1: 2boyAk4sthQilREv5h9rG8NFe8s.crl (hash: HlxVlQJzOzuo4PQWX0K5+SyqTJAe3380URpMAtfB0P0=)
2: AS5xBgzbP5q0xASJOg9vtSBeqlA.roa (hash: 1nXAgs4lTrviV/sBqRN0L9YKe+PpItQfWozhM88z0Os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:c3:a6:32:80:13:dd:2a:e0:d9:00:29:f5:da:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Validity
Not Before: Apr 20 18:00:21 2025 GMT
Not After : Apr 21 18:00:21 2025 GMT
Subject: CN=372246f6cb5bebe761937786c186583a798c1ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:65:0a:14:69:d3:56:52:c8:e6:fa:4d:e3:
57:76:cf:fb:eb:6e:3f:dd:c3:94:4f:fd:3a:8f:96:
c5:ff:ed:ac:83:99:cd:ac:9b:67:dd:41:10:da:6f:
63:c2:fc:81:af:80:eb:ad:c0:1e:16:10:07:c3:9d:
1e:a3:4f:dd:ae:7b:21:f6:51:0b:a3:42:ba:d7:12:
64:41:a2:cc:a1:69:47:d4:77:8e:eb:84:f3:48:4f:
65:b9:5f:62:41:a0:1d:aa:ce:23:47:e3:5a:7b:b5:
0c:a7:7b:5a:6a:a4:6e:03:a6:d4:d7:a2:07:1c:a2:
31:31:54:fc:2c:57:54:6b:da:13:24:22:aa:4c:53:
4c:ab:d2:7e:26:41:08:88:62:cb:0e:b4:36:44:b6:
12:c7:cd:97:cf:b0:10:fb:1e:d0:3b:7c:bb:c6:74:
18:75:9d:20:52:d8:c2:96:ea:de:3e:3b:ca:09:40:
40:aa:65:cb:dc:84:94:7e:b8:58:dd:3e:ce:f6:8c:
9b:06:9a:ff:10:a0:24:16:11:e7:58:b6:c4:24:22:
39:82:16:b8:5b:45:1b:9c:81:29:a4:99:5c:06:dd:
3b:94:dd:de:8e:f3:a7:65:fa:9d:23:8a:a4:2b:a2:
0c:b5:47:b2:d0:f3:cd:f0:14:c3:3d:07:0f:cd:3b:
17:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:22:46:F6:CB:5B:EB:E7:61:93:77:86:C1:86:58:3A:79:8C:1B:A1
X509v3 Authority Key Identifier:
keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:82:15:a0:08:45:62:42:8a:90:60:ec:52:0c:47:b6:04:67:
47:1f:94:83:1d:b5:92:24:04:b9:5e:95:d6:02:11:d2:4b:6e:
36:83:e0:f3:95:13:b0:77:64:09:ed:e3:26:f3:b6:4f:87:de:
e4:76:c3:2f:6c:8c:13:44:f9:f7:68:ca:9c:cb:06:b4:2a:19:
17:4d:41:0c:41:3a:c0:0d:55:bb:ed:ca:df:29:5a:fc:d7:bc:
00:19:28:d0:13:72:13:cc:fc:fd:60:14:a7:c7:fb:51:08:25:
a5:ff:83:72:a8:d6:45:3b:0b:cc:69:13:c5:10:82:b2:31:ef:
27:e8:3f:5a:b5:0f:21:cb:34:d9:49:bf:ed:12:18:43:13:3a:
f4:1c:db:a1:b0:05:e2:ad:5c:4e:6c:8e:ee:88:2e:a9:3a:55:
45:c1:63:a2:e2:0e:ab:0c:b4:95:73:90:c6:4b:d0:68:fd:50:
68:ed:a2:22:8f:89:25:fe:e5:d3:1f:48:9d:c5:38:9f:65:92:
7b:82:a3:56:1d:9e:4e:34:8a:57:97:b6:54:47:60:ee:3e:f3:
95:ea:a9:9c:96:d9:ce:02:e6:90:61:2a:0c:7f:34:c3:bd:bb:
81:5e:35:a1:5e:37:2a:10:42:b7:eb:cb:31:5c:99:26:45:ad:
d0:b8:6d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:03 2025 by rpki-client