Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json)
Hash identifier: czkbRX1iKVsGjiL4IA4qp+QxWcfxuCUyL5PUZOgUOIY=
Subject key identifier: A2:D6:29:70:F8:35:20:7E:E7:07:2A:A6:30:D7:2A:43:CB:49:52:B9
Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Certificate serial: 019655009450A9F23063AB9F230995FBA648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
Manifest number: 148B
Signing time: Sun 20 Apr 2025 21:00:23 +0000
Manifest this update: Sun 20 Apr 2025 21:00:23 +0000
Manifest next update: Mon 21 Apr 2025 21:00:23 +0000
Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: f8+6TWddPwnmnYByJTONoFJWgB1mAG3WVMk7usJB9dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:94:50:a9:f2:30:63:ab:9f:23:09:95:fb:a6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Validity
Not Before: Apr 20 21:00:23 2025 GMT
Not After : Apr 21 21:00:23 2025 GMT
Subject: CN=a2d62970f835207ee7072aa630d72a43cb4952b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:ed:63:c4:83:0d:49:17:f2:5a:bd:a5:97:
f0:ab:8b:f4:ab:b1:d9:d3:23:e9:1e:75:70:1b:d7:
aa:73:79:0a:50:25:3e:e0:dc:27:fb:a5:44:84:e1:
7c:46:c7:fc:2c:97:b5:12:01:a9:65:bc:23:6c:95:
2c:a1:91:c0:2e:cb:44:f6:ec:df:81:0e:ac:06:3e:
95:f9:5f:29:94:26:b5:ee:bc:e5:61:cb:c8:a0:86:
7b:85:f9:27:30:ca:67:28:ae:17:ed:fc:5e:7c:ad:
1b:63:17:b2:4c:2a:00:ba:45:dc:e5:8b:9d:75:8d:
15:0a:4b:21:b8:5d:42:45:68:66:4e:4c:59:6f:91:
fe:86:99:43:6f:a0:a9:3d:63:43:1d:4f:3a:f2:bb:
05:d1:4f:ff:34:b2:bb:62:bb:0c:5f:21:4e:14:27:
11:a0:19:9b:84:01:10:7a:63:30:e6:48:a1:2e:d8:
e3:f8:99:34:cb:da:6f:30:16:d5:fe:64:d7:e5:73:
a8:46:81:20:c6:1d:70:3f:3a:15:76:4c:67:f0:ce:
0c:c9:45:ca:ff:e1:69:9a:fe:2f:dc:6b:ac:2c:c7:
4b:7c:d4:a2:cb:e4:d5:df:fa:d0:1f:ef:b6:de:73:
dc:b7:57:09:2f:29:5f:1b:3a:47:68:29:df:c6:8f:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D6:29:70:F8:35:20:7E:E7:07:2A:A6:30:D7:2A:43:CB:49:52:B9
X509v3 Authority Key Identifier:
keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:8f:40:24:4c:28:10:0f:bb:49:35:77:e5:cb:90:e5:63:69:
f0:35:93:50:17:d0:c9:46:90:4a:d6:a5:59:ad:be:bf:89:ff:
4b:8d:02:67:6c:a2:fb:6f:40:8c:6f:f4:0c:e3:40:3b:46:dd:
32:cf:55:6a:37:a0:7b:26:c2:59:51:9e:60:47:87:28:60:13:
88:51:d0:49:f7:39:fb:6b:76:74:1a:0f:2c:c8:0a:39:6c:70:
bd:ff:ee:e2:43:30:e9:9a:34:66:5a:7b:f6:33:5c:49:8d:3f:
ce:e3:0b:42:73:9e:48:e8:c6:6e:3c:f3:d1:89:ca:af:c4:58:
61:e2:f5:4e:1d:59:d7:db:04:ae:bc:c9:83:fd:54:40:e0:f7:
7c:11:e5:58:7c:49:bd:0e:1f:8d:91:6a:34:c3:94:72:70:fb:
c2:fd:06:c5:a7:00:dd:31:32:68:55:87:b8:08:8e:7c:7b:c0:
10:dc:20:ec:51:77:29:00:da:68:ba:b8:38:c2:0e:f6:27:45:
57:81:91:50:94:95:39:af:82:d3:75:8a:68:5e:cb:d5:e4:2f:
53:d4:9f:73:0f:90:3a:d9:84:f6:17:a7:d0:2a:61:47:53:2d:
26:9a:ea:0e:ca:01:59:ce:06:07:56:28:56:c7:24:3e:ef:72:
5f:57:74:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVAJRQqfIwY6ufIwmV+6ZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzA0MmViMGM0OGVjYjM3MTllNWMwZWUyZTE5Yzc0ZTI4
ODBmM2IwHhcNMjUwNDIwMjEwMDIzWhcNMjUwNDIxMjEwMDIzWjAzMTEwLwYDVQQD
EyhhMmQ2Mjk3MGY4MzUyMDdlZTcwNzJhYTYzMGQ3MmE0M2NiNDk1MmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulPtY8SDDUkX8lq9pZfwq4v0q7HZ
0yPpHnVwG9eqc3kKUCU+4Nwn+6VEhOF8Rsf8LJe1EgGpZbwjbJUsoZHALstE9uzf
gQ6sBj6V+V8plCa17rzlYcvIoIZ7hfknMMpnKK4X7fxefK0bYxeyTCoAukXc5Yud
dY0VCkshuF1CRWhmTkxZb5H+hplDb6CpPWNDHU868rsF0U//NLK7YrsMXyFOFCcR
oBmbhAEQemMw5kihLtjj+Jk0y9pvMBbV/mTX5XOoRoEgxh1wPzoVdkxn8M4MyUXK
/+Fpmv4v3GusLMdLfNSiy+TV3/rQH++23nPct1cJLylfGzpHaCnfxo84OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLWKXD4NSB+5wcqpjDXKkPLSVK5MB8GA1UdIwQY
MBaAFNpwQusMSOyzcZ5cDuLhnHTiiA87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lY2E3ZTYtZDI3Ny00Y2Q0LWFjZjMt
NTAxZjc3YjQyZTlhLzEvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9lY2E3ZTYtZDI3Ny00Y2Q0LWFjZjMtNTAxZjc3YjQyZTlh
LzEvMm5CQzZ3eEk3TE54bmx3TzR1R2NkT0tJRHpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGo9AJEwo
EA+7STV35cuQ5WNp8DWTUBfQyUaQStalWa2+v4n/S40CZ2yi+29AjG/0DONAO0bd
Ms9VajegeybCWVGeYEeHKGATiFHQSfc5+2t2dBoPLMgKOWxwvf/u4kMw6Zo0Zlp7
9jNcSY0/zuMLQnOeSOjGbjzz0YnKr8RYYeL1Th1Z19sErrzJg/1UQOD3fBHlWHxJ
vQ4fjZFqNMOUcnD7wv0GxacA3TEyaFWHuAiOfHvAENwg7FF3KQDaaLq4OMIO9idF
V4GRUJSVOa+C03WKaF7L1eQvU9Sfcw+QOtmE9hen0CphR1MtJprqDsoBWc4GB1Yo
VsckPu9yX1d0KQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:19 2025 by rpki-client