Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json)
Hash identifier: gfKwmX/5tsU32QmxBlUxTU0GGZAQv/bbz3j6b+nRU2I=
Subject key identifier: 8B:97:57:42:82:9B:B1:7E:9E:31:5A:C7:3B:BD:4C:68:39:1E:60:44
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 01964CA24260209A005CD1232D0E996281C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 06:00:24 +0000
Manifest this update: Sat 19 Apr 2025 06:00:24 +0000
Manifest next update: Sun 20 Apr 2025 06:00:24 +0000
Files and hashes: 1: 24_mmtOlkG05yQ7mb26MLLzNTPk.roa (hash: NN9FJFjMrEoXgY4DCGNqxgbjsbFf0mQojMZSGAkFQFg=)
2: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: dutk0rt3+xHSd4UKW4mQpN7vib+fKMTs8Ml3oEC4m7s=)
3: bhkCmw6Utz1WDIi1a3ZQnDXW25w.roa (hash: vuvSrc/xAi8bu4mOjDMbPo9yb6kp8ev2fK1dkeS76Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:42:60:20:9a:00:5c:d1:23:2d:0e:99:62:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Apr 19 06:00:24 2025 GMT
Not After : Apr 20 06:00:24 2025 GMT
Subject: CN=8b975742829bb17e9e315ac73bbd4c68391e6044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:96:34:a3:e7:5b:7f:19:19:9c:df:2c:3c:
28:c7:0e:ee:f2:59:15:63:1f:0a:1e:7a:46:99:a2:
c2:2e:46:a6:e0:64:71:7b:4e:9e:bb:37:a1:e1:ef:
c5:b9:ac:4f:8e:c4:36:15:d2:b7:ba:46:ea:50:e7:
9f:cb:0a:1f:51:9d:c4:4a:27:13:3f:a1:37:62:67:
06:0e:e0:90:59:8e:e3:84:e9:d7:f1:ee:c7:27:54:
f0:36:10:6d:54:61:99:40:6a:b9:86:f3:d6:3a:f6:
80:ac:a5:15:1f:85:ba:ef:73:5a:0d:29:ed:a0:28:
d0:65:0e:fe:69:c0:bc:fb:09:7d:67:61:55:07:50:
88:12:24:3c:b4:c1:9a:51:f6:54:67:cd:9d:42:2c:
a2:86:26:ed:38:50:43:8e:f9:06:cb:88:26:5a:39:
55:1c:1e:e8:88:d4:56:7c:d9:38:c8:78:96:bc:57:
0b:e7:93:5c:c0:05:79:ed:8f:23:fc:4a:b1:8d:53:
0c:35:e7:4f:c0:c1:43:f5:df:e4:24:3c:79:1a:ff:
1a:53:e5:80:80:55:fe:14:8f:eb:74:0b:50:9e:18:
33:f1:d0:e0:63:1c:46:a9:90:72:23:79:5e:48:84:
68:8b:6b:24:ef:ff:2e:b9:4e:04:d7:6c:b2:4a:41:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:97:57:42:82:9B:B1:7E:9E:31:5A:C7:3B:BD:4C:68:39:1E:60:44
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8b:43:53:a2:03:e2:e6:37:d1:fd:88:03:9e:e8:d9:a2:9b:
27:6b:9e:18:ea:55:8d:c0:d5:4c:9f:ed:d6:99:f8:c1:c4:06:
3d:00:44:b4:cb:72:1a:02:a2:9c:51:4e:d3:41:63:4b:aa:e4:
08:09:2b:07:2b:77:ac:e4:70:0a:34:0c:7d:91:51:25:18:82:
fa:68:81:e3:21:c5:28:09:19:b4:53:de:4a:24:6e:38:a1:1a:
18:df:82:6d:c3:cf:65:09:be:f8:a0:48:4f:11:da:4f:a6:9f:
a4:f2:63:9c:1b:c7:f5:c9:cf:af:ac:f1:ec:92:91:ba:a7:24:
28:dd:b9:2a:eb:7b:3f:66:4f:a4:42:56:ee:d1:6a:79:98:73:
43:17:e5:dd:31:a6:7e:8e:19:f8:05:2a:54:f7:d2:b8:a9:27:
95:71:34:7f:b5:d5:3a:ec:79:08:6c:e3:f2:1e:f3:25:fe:4f:
a5:f8:33:4a:25:94:b8:ac:fe:55:ea:17:3d:c2:29:59:cb:6c:
19:e6:75:d9:e4:af:d6:0b:58:57:8c:31:03:bf:2d:8f:b2:bc:
dd:67:78:db:ec:27:25:8d:f5:6c:b6:9b:27:45:6d:bf:c8:33:
7e:8f:7a:0b:9f:24:49:39:0c:39:68:81:f2:ff:b1:29:79:b2:
44:80:3f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:37:41 2025 by rpki-client