Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft
File: 2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft (raw, json)
Hash identifier: ACwyy5QqDV6l5xhaHaScL9nIO9OZDuFPwV1L2a8F69c=
Subject key identifier: 8C:74:01:62:58:18:45:AD:11:18:9F:58:65:C7:A1:16:D8:97:6F:D0
Authority key identifier: D9:B2:28:11:DF:86:12:3D:71:AF:5B:99:8A:21:0C:23:EB:1D:5E:FA
Certificate issuer: /CN=d9b22811df86123d71af5b998a210c23eb1d5efa
Certificate serial: 0196553899DF3D7DE6073845CDBF7F8DE46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2bIoEd-GEj1xr1uZiiEMI-sdXvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft
Manifest number: 0E3B
Signing time: Sun 20 Apr 2025 22:01:34 +0000
Manifest this update: Sun 20 Apr 2025 22:01:34 +0000
Manifest next update: Mon 21 Apr 2025 22:01:34 +0000
Files and hashes: 1: 2bIoEd-GEj1xr1uZiiEMI-sdXvo.crl (hash: vglcTMS+RW9VkuqV0sDL1PmWUshMFRhiQf4epaViJD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2bIoEd-GEj1xr1uZiiEMI-sdXvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:99:df:3d:7d:e6:07:38:45:cd:bf:7f:8d:e4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9b22811df86123d71af5b998a210c23eb1d5efa
Validity
Not Before: Apr 20 22:01:34 2025 GMT
Not After : Apr 21 22:01:34 2025 GMT
Subject: CN=8c740162581845ad11189f5865c7a116d8976fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:c5:aa:8e:b2:b2:7b:42:ad:1b:1b:50:e1:
44:cd:85:62:63:09:72:81:83:88:b5:b9:7b:37:e2:
ed:60:3e:c8:97:44:97:6e:6f:82:a1:da:58:79:39:
c4:82:55:7a:52:84:01:36:95:ad:6c:5c:49:d4:e2:
65:1d:d9:af:7d:00:bc:9e:d3:67:bb:06:c0:35:2c:
05:a1:83:2c:ff:a8:63:47:af:88:f2:24:15:4e:61:
3e:0e:30:84:0e:cf:4b:bb:b2:d5:af:27:53:12:57:
32:97:15:3e:35:b3:d4:bd:e4:bd:f2:51:79:7a:18:
35:9a:b4:42:29:33:0e:a5:43:10:dd:db:d5:2e:d9:
22:43:e0:ee:ee:77:34:ac:cb:0d:00:68:ce:90:f9:
96:6a:5f:c7:f7:0a:62:46:84:42:c0:6d:4d:6c:95:
9f:5b:74:83:04:ff:a4:29:fa:af:da:6b:8c:f0:c2:
8c:ea:88:ac:0f:38:d3:1a:41:b8:dc:64:da:68:74:
22:e8:79:65:08:1a:92:33:63:35:33:19:a3:2f:31:
04:d4:f3:36:ae:7d:1c:01:2b:83:d5:55:b3:35:f9:
bd:32:fb:52:dd:e4:c5:a1:f9:f8:d5:71:b5:2f:40:
d5:3b:e8:e5:82:c8:e9:f5:7d:b4:62:46:24:c9:f6:
9b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:74:01:62:58:18:45:AD:11:18:9F:58:65:C7:A1:16:D8:97:6F:D0
X509v3 Authority Key Identifier:
keyid:D9:B2:28:11:DF:86:12:3D:71:AF:5B:99:8A:21:0C:23:EB:1D:5E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2bIoEd-GEj1xr1uZiiEMI-sdXvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3f0c29-f112-4d0a-bc24-66cd55fee3f9/1/2bIoEd-GEj1xr1uZiiEMI-sdXvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a8:ee:e6:bd:7f:31:a2:4e:d0:a5:d5:02:f2:b8:28:b7:0c:
53:1e:be:fb:63:cb:a0:08:13:14:85:54:a3:64:6f:c9:4a:33:
44:0b:e0:9d:bf:bb:54:70:f9:91:72:ad:26:cc:c2:c5:84:bb:
b7:97:32:16:de:16:6f:a2:a4:dc:cd:84:25:c0:f9:3e:50:61:
ff:61:c6:67:e7:5c:38:ab:61:17:7b:24:cb:bf:3c:8d:b2:56:
03:68:8f:a3:c1:65:15:c1:93:d6:6d:37:c6:ae:c9:8c:d2:7b:
6f:87:1a:dc:fa:a0:ec:0f:8d:4a:a7:9c:e7:66:0e:71:8d:f9:
46:02:49:e2:a9:75:e6:e7:35:fe:cf:0f:5d:db:d4:85:69:d4:
18:a8:27:b3:14:9b:16:72:95:67:5e:b8:a1:1c:66:8f:88:f1:
65:8e:80:3a:c3:f2:25:b8:33:5b:1d:bf:9b:d0:46:6f:0b:ff:
32:64:c2:7a:85:f1:d9:16:29:c2:b1:cf:9e:e6:a6:82:f6:ca:
7a:da:c7:87:93:78:fe:d8:3e:1b:1d:be:1c:ae:97:16:9d:4f:
1e:1c:f2:b6:e8:a2:99:82:5c:e8:21:85:c1:a1:53:6f:58:8d:
48:5c:02:cc:dd:ac:f5:ec:f3:84:ef:c6:c9:1a:f7:d1:df:ca:
8d:72:a0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:54:10 2025 by rpki-client