Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
File: 2lLDjwx_664TXV3d2UjPJr7O87w.mft (raw, json)
Hash identifier: 6yoHO8NcRmZvC7fgXHiITVAXNqESgb55jTXihp75BFg=
Subject key identifier: 6A:03:66:40:BB:AB:16:CF:06:EA:A0:1D:AA:9D:08:50:7D:67:43:27
Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
Certificate issuer: /CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Certificate serial: 0196534958F35E1B813E52DC0653B070315B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
Manifest number: 0D7A
Signing time: Sun 20 Apr 2025 13:00:37 +0000
Manifest this update: Sun 20 Apr 2025 13:00:37 +0000
Manifest next update: Mon 21 Apr 2025 13:00:37 +0000
Files and hashes: 1: 2lLDjwx_664TXV3d2UjPJr7O87w.crl (hash: zvtqTO3EJt/juE/QaiPJtpVmAPZndhQOwnxx94CxNEc=)
2: ESp2P2qg1tcbnP0x2cOMAxJ9cfY.roa (hash: NXfX71EbjUbs5qPqJFV7lpPUd0bJOBkN6qOg1PkmUtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:58:f3:5e:1b:81:3e:52:dc:06:53:b0:70:31:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Validity
Not Before: Apr 20 13:00:37 2025 GMT
Not After : Apr 21 13:00:37 2025 GMT
Subject: CN=6a036640bbab16cf06eaa01daa9d08507d674327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6c:84:a4:bf:02:a9:38:4a:e7:53:a9:6a:be:
78:3a:05:de:36:a0:4e:a0:ee:4f:3a:41:5b:fd:a9:
87:54:2f:f8:e2:29:e9:bb:73:53:08:2b:26:27:5c:
ca:ec:dc:17:b3:f1:18:85:e2:a4:38:1f:b0:46:3a:
a0:05:5c:dd:8b:a2:7c:46:82:8b:be:1f:d0:89:4f:
50:9e:f3:65:02:51:59:a9:dd:35:07:23:5b:e6:5d:
77:b1:85:cf:68:45:6f:2e:33:33:39:25:a6:61:e0:
e4:5c:bc:04:1b:81:ed:bc:7f:9b:30:f4:68:b4:7b:
94:2c:0c:8c:6c:37:67:2f:73:28:33:fa:a4:3e:1e:
d8:12:01:44:b4:a2:e8:1c:e6:83:5f:9e:dc:4d:8b:
4e:ad:21:d6:40:39:47:c6:a9:47:13:dc:93:c8:78:
12:94:cd:34:f2:a8:86:db:13:ab:a2:f8:c1:d1:1c:
10:90:fb:00:39:2a:85:d5:3f:f8:4c:76:4e:d4:3b:
9b:2e:b7:ee:06:44:1c:56:a5:09:d8:fc:96:79:d9:
51:03:29:cc:65:98:89:05:44:8d:ec:cd:d9:9a:b0:
65:40:1a:74:0c:1a:b0:67:c0:43:6a:f9:7a:b9:5e:
f4:54:5a:59:ee:2d:75:8a:d0:0b:45:cc:b5:bd:6c:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:03:66:40:BB:AB:16:CF:06:EA:A0:1D:AA:9D:08:50:7D:67:43:27
X509v3 Authority Key Identifier:
keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:81:da:f7:61:14:90:f3:91:58:ff:df:a8:8e:64:84:83:fb:
ca:f2:34:a2:7c:c1:78:30:c5:05:2b:d7:c4:9a:5b:3c:cf:a3:
5f:44:b8:47:fe:62:87:3b:b9:7b:ca:8a:77:a9:4c:96:a3:c8:
d3:9d:73:66:c2:8a:4b:88:87:6a:38:e0:eb:ef:23:93:be:4c:
ca:05:b3:28:df:d9:0d:30:d6:51:b8:f4:3d:ab:c8:dd:1b:cd:
ce:df:b4:21:3b:a0:e7:74:99:0b:89:a7:97:3e:16:1a:38:ec:
91:08:65:c6:1c:ec:b5:a7:64:89:1e:74:58:54:01:87:e7:ff:
2b:2e:7d:00:31:91:2c:e3:7f:36:fd:57:bf:5c:0a:ff:3f:12:
18:7d:10:c2:64:b7:3e:51:c2:2f:fd:00:b0:a9:29:32:b5:da:
0b:ee:99:44:83:66:3f:ef:39:fe:df:4f:2c:e1:84:f8:65:0b:
7a:99:a1:61:8a:fd:2f:17:b0:1a:f3:81:2c:12:94:2b:73:65:
06:8c:99:19:c2:73:6f:dc:44:c5:51:d0:0c:09:bd:a4:63:9e:
b1:46:3f:70:a9:ea:85:4a:11:bf:a1:72:84:21:95:60:8c:4a:
bd:51:f2:9b:25:23:16:d5:cf:96:59:31:a6:0d:b3:24:85:a5:
1e:b2:d3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:53:52 2025 by rpki-client