Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json)
Hash identifier: PYRjKBlYu6Sv2hkma8NU2VkWaZI7h8CdsoeR47qyrWw=
Subject key identifier: B2:E2:9F:C0:9E:E9:DD:16:33:CF:B3:7F:74:5D:B3:D5:9B:B5:94:86
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 019651C88DCF9FB12CA204700F820E303A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
Manifest number: 0FDF
Signing time: Sun 20 Apr 2025 06:00:20 +0000
Manifest this update: Sun 20 Apr 2025 06:00:20 +0000
Manifest next update: Mon 21 Apr 2025 06:00:20 +0000
Files and hashes: 1: 0qW5Y4yA32z4Dny6mIJ-qLW2XWk.roa (hash: q9HOhDrTziiN8dHNBG3tLes1wQlniZAzuxjJOEin3Rw=)
2: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: vpC4RMyyGYRNg6S7N+fBUM9iIZvK9DlMshEEmQiv8zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:8d:cf:9f:b1:2c:a2:04:70:0f:82:0e:30:3a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: Apr 20 06:00:20 2025 GMT
Not After : Apr 21 06:00:20 2025 GMT
Subject: CN=b2e29fc09ee9dd1633cfb37f745db3d59bb59486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:aa:83:21:f4:2c:fa:ad:f2:72:a9:65:d3:
40:e9:74:1f:a1:e6:6c:49:d0:fd:83:46:8d:55:33:
90:25:02:ba:1b:16:73:25:4e:c4:4d:4f:97:76:ee:
30:f2:5a:3d:c1:a4:ce:6d:73:8a:81:7a:d7:f1:95:
0c:1b:af:04:de:ef:76:1d:ca:0c:8a:1f:45:fd:5c:
1a:10:82:65:01:25:26:e0:26:cc:19:33:bb:3d:92:
45:0b:01:ce:ec:31:d7:5f:1a:00:39:af:77:80:c5:
a7:8d:28:b5:47:3b:b6:c5:55:d5:3f:ca:07:e3:72:
1b:48:a2:ca:74:85:09:d4:da:32:e5:a5:a1:f7:ab:
68:2b:47:3c:23:18:9d:bc:de:dc:81:54:28:9b:0a:
e3:0c:4a:b7:fd:1c:87:62:4e:46:8b:cb:12:34:70:
2c:fa:dd:23:da:60:65:d0:7f:cd:d8:e2:9f:ec:11:
a6:8f:69:3d:38:19:30:bd:2e:0c:9d:52:89:8a:ed:
01:15:ac:b6:d5:e0:98:6e:52:34:c7:9c:88:c3:91:
4b:bb:7a:64:9c:3c:b0:4d:de:41:05:2e:e8:ae:ef:
ea:26:b8:95:69:21:a5:62:f5:9c:34:42:09:ca:fb:
41:29:4a:fe:70:0f:78:95:25:c0:f0:b8:fa:1e:7d:
f2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E2:9F:C0:9E:E9:DD:16:33:CF:B3:7F:74:5D:B3:D5:9B:B5:94:86
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:77:f7:11:ed:32:8d:ac:f4:5a:f1:0b:be:62:ce:54:2b:af:
13:e7:df:ce:cc:6c:98:7d:3c:1d:9a:e1:fc:9c:f3:a1:2f:b9:
45:ad:55:42:31:7a:b0:00:cc:e9:ba:ff:8c:3d:ec:21:71:30:
2e:45:3c:cd:98:bb:a6:5d:76:2d:96:30:4a:43:95:7b:05:6d:
4f:69:26:e0:4c:54:6f:93:b1:2a:0f:47:90:07:cd:e8:fa:5f:
a2:e7:bc:11:2f:2f:a0:39:5f:36:c2:56:aa:40:6c:44:5b:85:
3b:a0:f8:40:3b:be:64:40:71:a4:1c:d6:f7:19:4e:ed:1c:8a:
22:a5:03:6f:ca:35:58:6a:d5:f3:11:39:bf:d0:ad:97:2b:58:
60:80:b7:57:a7:b3:e9:47:66:30:f2:10:36:45:05:b9:de:13:
e8:12:ec:85:cf:73:1a:4b:5d:7f:49:b1:36:d6:d3:4d:3c:89:
f0:63:72:61:02:67:e5:1e:f3:a6:12:c6:d0:b8:03:4d:72:bd:
90:e9:c2:ce:fb:a5:c8:a3:95:35:e0:81:60:a8:77:db:c3:8f:
9d:48:fb:f6:73:96:04:ae:90:bf:21:d2:eb:cb:78:f6:dd:4e:
a9:4e:43:32:00:38:67:a9:19:9f:86:03:4a:1c:ae:e7:f7:b0:
59:47:cf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:45 2025 by rpki-client