Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
File: 2sTLURUIAqQBjMJWrSn1RyBnXtU.mft (raw, json)
Hash identifier: FG76Wl7uYescbM7TQKhoa05lDP4eEBfwES94f66xw18=
Subject key identifier: C9:BE:3E:A5:08:23:50:84:32:41:5A:73:15:77:CE:E1:B7:F0:2D:43
Authority key identifier: DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
Certificate issuer: /CN=dac4cb51150802a4018cc256ad29f54720675ed5
Certificate serial: 01964D7E4CC06A1124C4CE1226AC1B3885EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
Manifest number: 100D
Signing time: Sat 19 Apr 2025 10:00:44 +0000
Manifest this update: Sat 19 Apr 2025 10:00:44 +0000
Manifest next update: Sun 20 Apr 2025 10:00:44 +0000
Files and hashes: 1: 2sTLURUIAqQBjMJWrSn1RyBnXtU.crl (hash: Nsarj8Jt11ZPU2kRVguTynQ/xJRwTotH5b+0XArCZb0=)
2: 49hgdGQLZzb2UEr0v1DR3B_4G88.roa (hash: ieB3PoGbaENiV1L+4PpT2lhh7W1Z3Cv1HFM+GYljVmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:4c:c0:6a:11:24:c4:ce:12:26:ac:1b:38:85:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac4cb51150802a4018cc256ad29f54720675ed5
Validity
Not Before: Apr 19 10:00:44 2025 GMT
Not After : Apr 20 10:00:44 2025 GMT
Subject: CN=c9be3ea50823508432415a731577cee1b7f02d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1b:35:0b:2b:bf:4a:e6:35:49:ad:05:7e:32:
aa:ee:41:8f:ae:98:35:53:3e:5b:5a:28:43:ac:dc:
73:74:86:7b:56:48:c1:8b:4d:40:8f:ec:29:4c:68:
6c:4b:8c:1b:ca:1c:e9:ef:06:74:2a:0d:a5:38:bd:
a3:cf:cd:6c:df:03:c1:d7:4d:54:8b:ee:a7:c9:80:
84:db:1d:38:8e:c1:7a:96:28:3e:ba:03:f5:2b:6c:
b4:27:10:de:0a:3c:e3:eb:ce:4a:0c:a6:9e:12:2a:
b8:7e:c9:e3:d9:41:3e:36:94:42:9a:24:5d:04:d2:
66:0f:2f:a6:b6:46:1a:3e:bc:72:69:44:8b:6e:cc:
bc:eb:43:4e:b2:92:78:0c:54:51:55:eb:18:ab:3b:
dc:68:95:dc:f4:3d:2b:85:c3:6e:00:3e:88:e8:a9:
e6:d1:b8:cf:be:2e:2c:7c:68:50:9a:10:80:9f:d1:
fd:5d:63:02:3e:3d:fd:40:67:b1:e4:ee:57:82:78:
69:1c:fd:2c:48:fa:1a:77:83:d4:5c:dc:0d:6b:c9:
3e:3c:6a:8d:83:a7:fb:98:0c:92:7b:f5:5c:76:a1:
2c:f1:70:56:82:f1:fd:14:6f:a1:29:e5:a7:c0:ce:
a2:f6:62:15:20:02:87:96:c8:ce:59:1a:c2:7c:17:
70:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BE:3E:A5:08:23:50:84:32:41:5A:73:15:77:CE:E1:B7:F0:2D:43
X509v3 Authority Key Identifier:
keyid:DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9a:7b:86:1a:a9:46:14:72:32:12:52:0b:78:b1:6d:d6:d3:
7a:f2:8d:59:66:5c:ec:06:e8:7e:4a:81:da:5d:68:85:5b:75:
4e:54:f9:7e:a4:5f:22:46:ea:70:ac:74:e6:84:ee:06:13:d3:
1e:14:b8:43:28:ca:7e:65:d4:80:29:c3:5f:c1:d8:88:8c:1e:
86:dd:c2:58:2e:a5:6a:47:2d:f7:e4:a2:0a:79:61:ea:8c:b4:
6c:39:5a:b9:70:f3:26:1e:9b:2e:bc:65:de:3e:9e:8c:f6:e7:
89:07:e3:9d:22:65:48:e3:3a:80:c6:07:0f:ec:49:f2:5b:d9:
36:5c:c0:94:c2:35:55:50:e3:ae:26:55:bd:65:e2:d7:90:17:
c0:89:09:fe:63:8b:9b:d0:78:db:ce:38:a7:76:10:97:06:75:
72:71:1d:47:4d:d9:b6:26:74:63:87:75:4c:40:88:21:dc:1c:
05:6b:fa:52:5b:99:be:af:05:b9:ea:4b:3d:72:b5:cc:c4:28:
c5:d4:58:6b:ce:86:0a:72:c8:de:24:59:a3:e1:a6:54:85:14:
60:65:e1:31:9a:1b:b3:aa:cf:81:83:f5:80:77:52:c7:9a:6b:
0c:3b:10:d8:21:26:b4:af:aa:b0:a9:ac:39:16:68:4e:3f:ec:
b0:ea:91:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:23:16 2025 by rpki-client