Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
File: 2NYGQYZJDYzqI0f_ejqCSS0feXc.mft (raw, json)
Hash identifier: zqn1jiWlx8KG0tbr/7r21JPD8yNUeBznH2jraqDLHcs=
Subject key identifier: FE:C2:08:7A:90:35:66:26:50:BC:73:99:13:D9:3E:C1:76:5E:4D:60
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Certificate issuer: /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial: 019650117D2CEE68633008D2C4DC40B7AE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 22:00:45 +0000
Manifest this update: Sat 19 Apr 2025 22:00:45 +0000
Manifest next update: Sun 20 Apr 2025 22:00:45 +0000
Files and hashes: 1: 2NYGQYZJDYzqI0f_ejqCSS0feXc.crl (hash: zyTElfrVM6NHj8jwG8o8vCvEfXp+J+uwwrLJI2nou1Y=)
2: fRvh8sX1Hi5S8M4nM9SL76qC4pw.roa (hash: BU70IeuzZkqToqE9mDUdKtq0A+ixKO/u5mFIegNEZGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:7d:2c:ee:68:63:30:08:d2:c4:dc:40:b7:ae:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Validity
Not Before: Apr 19 22:00:45 2025 GMT
Not After : Apr 20 22:00:45 2025 GMT
Subject: CN=fec2087a9035662650bc739913d93ec1765e4d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c9:09:39:bd:6c:ff:2b:1b:a7:5f:22:3e:f1:
df:76:98:ad:19:52:a1:0a:0f:50:29:63:ff:a9:9a:
2e:49:04:49:86:e6:76:d5:5e:b8:d7:0d:63:17:cb:
60:39:44:16:e1:71:74:68:61:2c:33:4f:56:6d:39:
bf:6a:24:b2:9e:5a:4f:65:56:18:e2:0c:b5:02:bc:
66:93:fa:36:5a:31:c4:0c:5a:a8:9c:5a:48:17:57:
8b:f6:3d:bc:97:91:ab:f4:89:b1:b6:a2:dc:94:a6:
eb:29:f9:6c:04:db:0c:ce:6d:8c:10:ee:c6:0d:21:
34:1e:6e:cc:b4:5c:82:d0:fc:56:5a:f8:30:8b:37:
f1:0b:ca:a3:c2:bb:23:6a:9e:c6:7e:fd:f0:24:41:
70:fe:b2:4d:ba:55:a8:b2:2e:a8:7e:73:d8:c0:a0:
29:1d:5a:06:91:99:7d:cc:75:7d:94:f2:8c:9f:f0:
fb:1c:ef:4f:68:26:0e:1f:1f:41:dd:fe:05:ca:d4:
2c:dc:38:30:bd:95:9e:cc:28:c2:52:b9:ad:b7:57:
d7:d4:77:d1:49:fb:15:62:11:f0:e9:36:9e:d8:3a:
30:ad:f4:04:7a:1d:2c:50:d1:98:25:4c:a6:16:77:
cc:3a:ab:69:d2:45:ed:42:65:35:38:32:a8:14:77:
a1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C2:08:7A:90:35:66:26:50:BC:73:99:13:D9:3E:C1:76:5E:4D:60
X509v3 Authority Key Identifier:
keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:13:69:07:ed:18:9f:2e:f2:65:19:ae:dd:02:d2:ed:7e:21:
4c:0a:6f:2c:e0:b6:96:b2:51:49:b4:30:10:e1:b1:f7:36:83:
79:c9:cd:cd:dd:61:a4:5e:29:90:da:07:85:29:ef:18:01:4d:
98:fa:a5:67:0f:17:0a:9b:03:6b:10:d2:aa:53:09:2a:4a:6c:
ff:32:1d:a5:e5:ef:26:e3:48:27:3b:8b:b5:3f:56:29:c4:ec:
8b:2c:05:f3:a4:66:d3:9b:72:73:96:66:36:c3:09:00:3f:aa:
6f:ab:37:ee:92:89:45:41:a4:04:6c:fc:bb:2c:b1:d6:5b:44:
21:4f:38:de:1a:98:0e:49:8c:c9:f4:0c:3e:6f:af:5b:74:2e:
fd:34:a9:14:e5:52:86:f1:dc:b7:a4:4b:27:ec:0c:c0:43:fd:
7b:39:6a:3f:ca:0d:e5:78:e3:23:08:0c:51:0a:fe:51:b0:51:
3a:4d:79:c8:1f:28:c6:26:38:a9:d6:46:e8:fe:a9:b6:88:9a:
94:ba:12:e4:88:b3:e9:90:be:d7:8b:58:60:f9:38:66:a0:97:
f1:24:07:e9:ed:b9:3d:c0:9d:68:a2:f2:d6:d7:5c:e6:d5:c0:
cf:76:33:f6:69:c3:f3:01:9c:98:19:d1:4a:b3:42:b6:9a:c1:
17:cb:36:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:19:21 2025 by rpki-client