Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
File: 2f-eF7m0GYipJZnLyroDkf-2GiA.mft (raw, json)
Hash identifier: KDtRUQqidvmOxjMbcKymdWHxLF6b0n6kS8EDQIWcyTs=
Subject key identifier: 20:37:72:D4:67:FC:94:01:17:74:5E:B0:F2:46:31:ED:8F:AC:4F:01
Authority key identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
Certificate issuer: /CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Certificate serial: 01965492B60B1AB35D8CBA98333A5DCC11B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
Manifest number: 09A5
Signing time: Sun 20 Apr 2025 19:00:23 +0000
Manifest this update: Sun 20 Apr 2025 19:00:23 +0000
Manifest next update: Mon 21 Apr 2025 19:00:23 +0000
Files and hashes: 1: 2f-eF7m0GYipJZnLyroDkf-2GiA.crl (hash: +xa8HV+Ve22Xbx5KYfODg/7HDzEge/Cq+sAdwgl/CWI=)
2: UT5aV3lJ6FgDL5XHeTyJuVG6mSE.roa (hash: Cu2FnCFHqCtovjMBqgSsihXDirx6FiS+aJUImKLcRT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:b6:0b:1a:b3:5d:8c:ba:98:33:3a:5d:cc:11:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Validity
Not Before: Apr 20 19:00:23 2025 GMT
Not After : Apr 21 19:00:23 2025 GMT
Subject: CN=203772d467fc940117745eb0f24631ed8fac4f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1d:eb:99:8f:80:82:42:a6:7e:21:13:ed:95:
e9:10:5c:1d:c9:2c:34:18:4c:0c:b1:e5:4b:f6:5b:
26:7d:44:f8:b4:60:97:66:51:01:11:2e:8b:fd:16:
1c:9a:f7:c2:0b:b0:37:2e:b4:44:dc:90:87:d9:92:
c8:28:87:25:f0:f2:92:c8:85:17:f3:04:10:e9:5a:
bf:44:bf:1d:12:4d:d6:8a:d9:28:82:93:35:ac:d1:
ed:8c:a3:0a:95:6f:24:2d:69:75:9b:a0:66:4d:1d:
75:68:13:e2:f6:ee:32:be:01:4a:ec:0a:e6:dd:63:
79:8f:d7:e7:b5:0a:1a:6b:8c:55:f7:a1:55:1b:5f:
ce:5a:c3:04:d7:a1:f1:b5:63:f8:92:de:91:37:a4:
d3:82:6a:8c:75:33:9b:64:ea:b3:84:78:64:c1:66:
1b:80:05:41:13:16:a0:fc:3f:84:9a:cd:a2:1a:f2:
11:8e:37:1d:75:27:76:ad:05:b7:06:99:d0:ce:67:
14:e0:69:be:db:91:75:6e:86:b1:9f:1e:e6:10:59:
cc:b7:f3:c5:4b:e5:53:49:51:ea:83:6a:b5:59:db:
1c:84:ef:37:36:17:aa:be:e9:21:f2:68:45:86:18:
fa:c0:2f:c0:5f:7b:e9:aa:a7:5b:1e:d4:f3:d8:21:
b3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:37:72:D4:67:FC:94:01:17:74:5E:B0:F2:46:31:ED:8F:AC:4F:01
X509v3 Authority Key Identifier:
keyid:D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:34:6b:85:6d:d5:36:0a:de:0d:cd:9a:a2:9c:c8:78:2c:f4:
3d:d7:df:ca:c2:e0:87:e0:9b:82:dc:25:fb:7c:87:17:20:5e:
d9:78:a7:84:20:e9:83:30:99:2d:3b:2c:79:b1:30:71:dd:bb:
6c:8a:34:15:62:e2:2d:af:21:c8:bb:c4:36:c7:63:86:6c:db:
17:df:bc:5f:ae:5f:fe:ca:e3:e7:97:85:47:85:e5:4c:ca:28:
78:6e:a0:c5:f8:a2:51:9d:52:a2:34:5d:cf:60:c3:da:2f:08:
48:83:60:f8:8f:f3:c4:fe:1b:4e:49:d1:b6:af:50:fd:9c:13:
6a:bc:1b:d1:c5:aa:fa:5c:c7:b8:38:10:ae:c9:48:18:ca:27:
02:e2:76:67:d8:a1:b5:74:8a:c0:2f:54:bb:5f:b9:4a:66:0c:
9b:81:ae:b1:6c:49:c0:43:5d:d7:67:16:ad:f8:67:71:92:05:
ee:28:91:de:93:01:77:73:23:bf:92:49:b0:d2:67:f9:b7:3d:
65:c9:15:9d:8f:a1:33:be:d7:d8:f1:6b:7d:4e:e1:3b:b5:28:
3b:65:1e:d9:ad:89:ee:c5:59:b2:f4:5d:8d:22:7d:a1:eb:ed:
af:58:5d:46:ba:34:e4:ac:4d:82:43:c0:5b:0e:5d:49:85:85:
ef:5f:c0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:31:51 2025 by rpki-client