Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
File: 2D73FCmY5OZWYFPixjpwgIxuojc.mft (raw, json)
Hash identifier: weBGxFaGaCo+13vu7MqQHmstamUlHN5b6HW9COT56b4=
Subject key identifier: E3:6F:6C:F7:55:40:DC:54:1D:3F:32:A6:60:D5:CB:B8:A1:EC:21:E8
Authority key identifier: D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
Certificate issuer: /CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Certificate serial: 01964CA220E18A90CF43468CB6B9DB01C1BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
Manifest number: 79
Signing time: Sat 19 Apr 2025 06:00:15 +0000
Manifest this update: Sat 19 Apr 2025 06:00:15 +0000
Manifest next update: Sun 20 Apr 2025 06:00:15 +0000
Files and hashes: 1: 2D73FCmY5OZWYFPixjpwgIxuojc.crl (hash: 3GUkG5faFEDeNjUc30JZQKgBstKBwYx3YGSt3ZNZq/Y=)
2: EWAO3dXqj4k_Zc24k1Bzcpcwlew.roa (hash: fG2UBrX6DjIKV9kptyQGomVTDY864OWJshOwmuCJfno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:20:e1:8a:90:cf:43:46:8c:b6:b9:db:01:c1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Validity
Not Before: Apr 19 06:00:15 2025 GMT
Not After : Apr 20 06:00:15 2025 GMT
Subject: CN=e36f6cf75540dc541d3f32a660d5cbb8a1ec21e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:2f:7d:0b:b3:7c:1c:e2:5a:14:da:40:3a:
fe:39:2c:42:90:6a:87:58:00:2a:6c:34:b8:c8:22:
c9:47:93:e9:b4:3f:41:02:ca:c6:16:c3:95:71:b5:
86:33:5a:54:a7:71:6e:66:28:0a:db:33:d9:81:dd:
32:21:c4:91:98:99:6a:e0:e6:39:ab:ab:98:bd:e3:
0b:d4:2b:8c:56:0b:cb:52:e1:20:2c:12:7c:e6:24:
6f:a4:29:cc:d7:4b:39:cb:5c:42:b1:66:01:b4:b0:
99:24:03:37:0e:88:c7:c1:d2:c2:a7:3a:5d:57:7c:
a4:10:f5:08:bb:b2:1d:09:9d:52:bc:92:ff:61:6a:
a1:3c:06:ae:28:0b:5d:40:ea:67:3c:d3:df:14:e6:
54:1c:53:29:45:47:4b:0d:52:f0:8b:51:a9:d0:60:
ed:74:ee:98:49:2a:94:81:f7:13:a9:62:57:78:a1:
ca:94:78:e9:00:2d:1d:15:40:5d:77:b9:7b:95:b0:
ac:dd:0e:eb:13:d0:f3:ad:44:f4:c6:67:7c:53:e3:
c4:71:f2:c0:41:bf:06:e1:df:11:0c:61:57:2f:b9:
99:fe:b0:8d:d4:85:04:8a:1c:f6:72:46:1c:62:45:
81:d8:27:99:11:62:6f:db:cd:8d:12:90:6e:fc:e6:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6F:6C:F7:55:40:DC:54:1D:3F:32:A6:60:D5:CB:B8:A1:EC:21:E8
X509v3 Authority Key Identifier:
keyid:D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6e:83:64:db:da:74:2a:5b:93:06:5c:79:a7:d8:fe:5d:34:
a5:f8:68:0b:bb:73:d0:0a:5c:e7:72:9f:95:9f:47:95:5a:4d:
5b:5e:6e:ac:43:a6:67:af:49:08:31:bc:c5:bb:86:10:0e:4a:
70:e3:ca:0c:0a:e2:a3:be:d9:63:9a:bb:8a:ad:bd:75:8b:c1:
e3:48:fd:65:37:66:3c:54:b4:fc:74:b3:43:e8:3e:f6:06:9e:
fa:9f:57:0d:a6:61:74:20:f5:fc:b4:5c:7d:92:b9:70:21:b4:
c7:bf:ca:58:f1:61:9d:64:a7:5f:67:44:d5:06:9b:5f:d2:24:
7f:31:da:5f:b1:28:e9:7d:3b:01:16:96:62:e8:50:35:85:50:
e6:69:18:e0:1d:8f:37:6c:19:71:e1:71:2e:c4:ea:28:93:c5:
4a:d1:cb:29:ac:31:ad:63:7f:dc:b6:dd:b2:52:ef:eb:0e:1c:
a9:bf:40:8d:ac:30:c2:f2:3c:2b:ab:71:3f:62:c2:c4:c3:9c:
ae:09:d0:e1:db:63:02:4e:42:60:02:da:f6:9f:34:a3:93:c6:
b8:d0:48:8b:32:68:c2:35:2a:b1:c2:0f:09:c1:4c:da:bb:c0:
a8:2e:4d:66:7b:98:36:87:55:85:a1:0c:7e:ca:5c:e2:8a:b1:
93:aa:a3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:48:53 2025 by rpki-client