Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
File: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft (raw, json)
Hash identifier: BAZ+vGLoL/wC9w4s9JXITm2ZfLzf842mZWIDPI/am84=
Subject key identifier: AC:C5:BC:70:C9:BA:4A:08:22:44:A9:54:BE:F4:C7:AD:DB:76:05:BB
Authority key identifier: DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
Certificate issuer: /CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Certificate serial: 01965ACC177396B015828D77EFC6C9CD8D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
Manifest number: 02BB
Signing time: Tue 22 Apr 2025 00:00:46 +0000
Manifest this update: Tue 22 Apr 2025 00:00:46 +0000
Manifest next update: Wed 23 Apr 2025 00:00:46 +0000
Files and hashes: 1: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl (hash: 42IThi8xiI3ZrcWyYMez3IGBzBFNZ53YUDOYnEZuXIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:cc:17:73:96:b0:15:82:8d:77:ef:c6:c9:cd:8d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Validity
Not Before: Apr 22 00:00:46 2025 GMT
Not After : Apr 23 00:00:46 2025 GMT
Subject: CN=acc5bc70c9ba4a082244a954bef4c7addb7605bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:19:b1:73:c1:e4:7f:06:33:e5:e4:93:18:
72:dc:7c:04:1f:70:18:31:18:0f:e8:de:19:c8:d4:
7d:42:42:ac:64:85:66:2c:e5:ed:0f:94:aa:e7:23:
6d:15:81:f6:4d:71:0c:a0:8d:e9:7f:bd:22:ea:1d:
9a:a0:f2:70:ac:ec:8a:5b:f3:24:83:2f:20:c2:2f:
88:1e:08:24:fe:24:46:30:11:11:b6:6a:f9:d2:bc:
ea:48:b5:be:f2:3d:81:d0:f7:ed:e7:09:cb:9c:8f:
9e:68:25:d0:b3:0b:2f:3d:63:0a:89:5a:ec:53:8f:
1e:e3:d3:8f:bf:f4:6b:24:db:3e:34:61:07:af:45:
50:42:01:d8:c0:c8:97:03:9a:33:19:e4:b0:69:6d:
42:44:64:f3:a7:ad:cd:b5:8a:17:71:4c:cf:08:ed:
c6:03:f6:4a:9b:93:c6:ca:6f:54:ca:76:73:c5:2c:
90:6b:16:d9:3a:0a:0a:fb:ee:cc:33:b0:b8:07:b8:
35:22:a5:bc:78:ac:80:ed:d0:c2:e1:0f:14:a1:b5:
97:b7:0b:2f:7e:ac:d9:c3:18:23:41:c8:d8:f3:15:
4d:08:68:ce:b0:61:50:bb:39:c9:e9:06:1c:cf:8d:
42:e3:bf:98:ab:f8:4e:2d:5b:4c:0b:77:79:30:0d:
0f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C5:BC:70:C9:BA:4A:08:22:44:A9:54:BE:F4:C7:AD:DB:76:05:BB
X509v3 Authority Key Identifier:
keyid:DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b9:6d:8c:90:3d:eb:17:f0:b0:ac:e7:bd:9c:91:56:19:a5:
df:4b:13:f9:f3:62:0b:2b:12:b3:b2:de:22:19:a8:58:0e:50:
fa:d0:3d:de:a4:39:50:83:74:cc:3c:a3:36:b4:5b:ff:36:c6:
d1:5e:fd:66:58:68:9b:36:75:f3:f0:8b:24:f8:d1:42:54:0f:
35:9f:be:46:23:25:d2:28:c0:d4:0c:9e:02:e0:d7:fe:40:0c:
62:bd:85:90:79:b2:33:31:aa:75:c1:57:2b:bc:e7:4f:91:0f:
33:b1:75:42:68:23:47:92:86:93:3f:3d:ef:e3:b6:81:fb:11:
6e:40:45:40:ae:36:70:e8:a6:0d:fd:5b:c3:67:c6:83:35:69:
59:35:e8:ed:67:46:16:66:d3:d4:45:5c:db:ee:59:69:01:04:
6e:8a:37:93:aa:f4:79:79:da:7c:22:9a:33:b4:21:95:97:c7:
5a:87:d5:e1:06:9c:b1:ec:75:83:da:13:d8:01:16:d4:f8:33:
8a:d3:26:44:7f:cd:72:cb:29:b2:eb:a0:fa:16:95:d9:f3:22:
ea:c5:af:d9:94:75:53:f3:9a:a7:a3:2c:75:53:67:1c:22:6f:
16:89:b7:6f:4e:e6:66:46:5e:a5:c4:90:c2:bf:de:a0:70:f1:
f0:2d:2c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:49:07 2025 by rpki-client