Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier: sshDYwvhgdXrNRVFg+QFJjuM9YV2aTkkaikRQ6GFPcI=
Subject key identifier: 4E:76:E8:B5:32:73:F6:8F:67:9D:D2:F4:8D:49:D2:4E:D6:26:50:09
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer: /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial: 0196439F7D7119DF6BBB1DFF2912FBCE2053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number: 0FD1
Signing time: Thu 17 Apr 2025 12:00:47 +0000
Manifest this update: Thu 17 Apr 2025 12:00:47 +0000
Manifest next update: Fri 18 Apr 2025 12:00:47 +0000
Files and hashes: 1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: zSe8iTyZDsGC5A2USiHDZPOsB+EX/gL+DSSWde8xf7g=)
2: jaff7ENxhbDetLmkrM4Rn1poSLI.roa (hash: ui5KqDG5NX3RDDGGQyaqVgy4VTQxAtFMr0iFGN/ACUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:9f:7d:71:19:df:6b:bb:1d:ff:29:12:fb:ce:20:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Validity
Not Before: Apr 17 12:00:47 2025 GMT
Not After : Apr 18 12:00:47 2025 GMT
Subject: CN=4e76e8b53273f68f679dd2f48d49d24ed6265009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:a4:95:55:81:1c:13:7c:8e:58:f8:16:e0:
ba:12:bd:c2:9b:19:0d:38:8b:55:06:4d:71:25:78:
70:5a:b8:87:90:da:0c:7e:0d:05:5c:80:dd:4c:45:
a4:16:bc:2a:c2:53:dd:8a:3a:24:d2:37:db:f5:4d:
34:01:f1:72:a7:72:df:66:59:58:92:71:4b:f6:7c:
cf:aa:20:60:6d:08:75:64:d1:cd:44:97:40:4d:f2:
58:aa:bc:b1:78:76:03:e0:9d:b7:b9:0e:2f:d5:05:
5e:71:d4:49:51:e1:9a:f3:c5:98:67:7d:33:a1:dc:
4e:2f:c6:f6:bc:d1:6d:05:c6:a2:94:15:eb:46:72:
7e:08:d9:cd:53:51:08:cf:36:68:d9:d7:15:e7:9d:
c1:fa:9b:7e:33:c1:a4:7f:e6:78:54:03:73:9d:51:
1d:f9:93:52:c4:da:7b:61:3f:b4:30:88:fc:e6:a2:
71:97:7f:b9:3a:8f:c7:40:e0:66:59:24:cf:16:3b:
35:02:27:f1:6e:05:a2:e4:5d:2d:9e:5b:11:0e:3f:
55:6e:5e:3e:af:2a:3d:b0:03:6c:82:62:52:b1:7c:
05:96:2c:15:18:a4:6b:f6:9d:38:43:f7:07:3c:94:
4f:8d:74:c5:66:aa:b8:ed:90:43:a7:40:19:a5:dc:
74:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:76:E8:B5:32:73:F6:8F:67:9D:D2:F4:8D:49:D2:4E:D6:26:50:09
X509v3 Authority Key Identifier:
keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ea:56:54:10:86:60:8d:10:24:2a:2e:e8:1b:af:66:5d:c6:
25:7c:05:68:f2:58:b6:61:bf:0a:48:ba:50:4b:0a:b1:91:cd:
6e:0e:78:bd:b2:e3:0d:e4:eb:bc:5d:75:c2:d9:9a:76:cc:c7:
23:a0:58:2e:4a:3c:b8:ad:4d:75:8e:3c:4f:99:0b:53:cf:7a:
86:3d:61:99:80:30:32:10:38:a5:35:af:27:67:18:0f:c3:01:
31:48:8c:ef:7a:4f:c1:00:05:32:2e:43:ed:87:71:f7:ca:db:
3a:6d:62:20:ae:e0:7c:f3:bc:2b:51:8a:fd:ca:c8:ee:ca:8a:
fd:58:0f:89:9d:a5:2e:87:0e:9a:4f:fe:43:11:31:ba:95:43:
53:f9:da:18:14:fc:a8:77:84:ab:ba:cb:e7:7e:f2:de:32:af:
3c:0a:e9:64:ee:88:e6:64:58:a6:2e:d4:5f:d4:c9:c0:02:71:
68:d6:6b:ed:15:78:ab:5a:fd:57:e9:ff:6b:87:92:cc:2d:e2:
01:27:10:88:8d:10:a2:5f:81:b0:43:11:70:fc:f4:51:f0:20:
72:ab:30:53:3a:cb:68:bc:87:7f:ad:de:46:85:c5:62:01:ee:
e4:ad:0b:1d:e9:b1:91:42:7f:63:95:d4:0d:ac:6c:f4:0e:8e:
71:1b:b2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:30:37 2025 by rpki-client