Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: hcy4Dd31kRDJrvXfDIhs7D/BIuoRZmWSALRDO3IjUqQ=
Subject key identifier: D5:07:21:D8:63:52:38:4D:99:F4:C7:41:F4:9D:51:F6:B4:09:97:69
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 01963F8B8C019CB227F79778C2E2C64A940D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 0231
Signing time: Wed 16 Apr 2025 17:00:32 +0000
Manifest this update: Wed 16 Apr 2025 17:00:32 +0000
Manifest next update: Thu 17 Apr 2025 17:00:32 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: fQnCH+8vsZrS4uaP4FvmNJLZ9BGwCsfGce4Ne/TgRAw=)
2: Cx9kha5bv103Kq3bAG_MTrrJE34.roa (hash: johgfLtk10gvNPvG8Domyd4XBTCwy6ebk0g5h9P2w50=)
3: SWoEFelEatU_dibcF-_TT8FcqBU.roa (hash: kVpeX3IZgib3pbvaiKFAlQKbHypFqhMKkbcuv4cpgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:8c:01:9c:b2:27:f7:97:78:c2:e2:c6:4a:94:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Apr 16 17:00:32 2025 GMT
Not After : Apr 17 17:00:32 2025 GMT
Subject: CN=d50721d86352384d99f4c741f49d51f6b4099769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:de:08:b2:73:5a:70:66:a0:69:bf:37:de:
ce:ad:e6:0c:73:f8:fb:9d:1c:f3:86:ab:ef:a1:43:
d3:42:4b:f9:71:e2:ff:9a:29:d5:77:3d:60:a2:48:
4c:0a:01:d7:ea:ab:7c:27:93:a1:59:9c:a5:31:70:
c9:08:06:59:02:ca:28:22:9e:8b:fa:0d:2b:18:f0:
c3:e2:f6:bc:bd:25:1e:ee:c3:13:55:4d:d6:c7:4a:
c3:b7:ef:87:24:5a:0f:29:14:03:49:80:f7:8e:2f:
a3:7d:63:2b:b2:ff:a9:78:89:68:77:23:0e:5d:22:
56:1c:e9:3f:22:8c:c1:b5:b7:49:62:27:b6:75:77:
4d:7a:27:92:5c:96:48:fb:f0:4e:76:5f:9b:c8:42:
5e:71:fd:cb:75:4b:0b:7a:02:20:7e:b4:45:10:f2:
1a:70:6a:fe:05:44:4f:2c:c6:1f:6c:09:28:5c:2b:
f5:ee:96:4f:ae:41:b3:0c:09:f6:11:c1:1c:72:61:
b5:b9:4a:8c:86:f5:5b:ad:cb:d5:77:4b:a0:b1:41:
d5:d9:d5:ad:69:ed:f1:38:4d:a6:df:6c:b2:27:8d:
da:d7:3b:89:73:bc:cc:98:20:f4:a3:c1:f6:28:1a:
b9:68:aa:03:3e:15:67:03:17:5c:66:6a:8e:62:ec:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:07:21:D8:63:52:38:4D:99:F4:C7:41:F4:9D:51:F6:B4:09:97:69
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:58:29:1a:b8:29:bc:ec:0e:e5:e9:01:2c:a5:92:21:52:bb:
ca:87:2b:4d:10:b7:4b:73:d5:29:ae:d3:56:35:aa:23:3c:9b:
52:fe:b0:eb:0d:bb:4b:82:5e:54:cd:23:e1:55:0b:1f:10:d8:
eb:9a:7f:31:01:61:a1:b3:79:34:4d:70:9b:0c:14:5a:ae:9f:
70:0e:d2:64:15:9c:f9:a1:f8:0d:49:ce:31:ea:d5:d5:ce:1b:
48:b4:e7:57:1a:ed:52:91:e5:45:6a:de:76:ec:5a:49:4a:18:
b4:96:e2:55:40:2d:be:5f:eb:cb:61:fc:d6:0a:af:28:51:b8:
40:6b:b4:0a:03:58:04:3c:88:a6:7b:78:3a:94:f4:10:e7:6e:
13:3f:85:e4:75:6b:c7:1f:d4:bd:2f:8c:e7:83:02:c1:bc:7e:
ee:f6:fd:f0:22:75:21:74:fb:0d:db:2a:97:74:53:8f:a8:1e:
3b:d9:1e:45:c1:4a:1d:77:c9:c1:e9:37:f5:95:96:7b:ab:69:
04:a9:54:8d:f3:f0:2a:f6:85:28:75:e1:84:3a:37:4d:fd:23:
95:8d:ef:c6:2b:5a:e4:07:c4:ed:4b:79:54:5c:3d:08:26:10:
c2:67:a2:cf:19:8c:e7:52:8b:c3:9d:4f:b2:de:57:04:4c:f7:
ef:92:9b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:28:27 2025 by rpki-client