Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
File: 2DLajUWISdX0C6bwuSCPhYXZ4j4.mft (raw, json)
Hash identifier: D/5CAkKUKlNxvdVgle3Z9j+PSYdZSTslV+yuTs1uMtA=
Subject key identifier: 4D:D4:1A:7D:E4:D1:5B:C9:FE:02:3A:AF:94:E7:CE:00:B0:D3:F3:0A
Authority key identifier: D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
Certificate issuer: /CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Certificate serial: 019652A48FFDD9257E0F659678234894FF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 10:00:38 +0000
Manifest this update: Sun 20 Apr 2025 10:00:38 +0000
Manifest next update: Mon 21 Apr 2025 10:00:38 +0000
Files and hashes: 1: 0LdCYiyoo_rQZDLAQK9EXmWdrLs.roa (hash: ii+DUPaWPj2PKPLgx9rgU4vJhM6MjQajOc4FBEHl1O8=)
2: 2DLajUWISdX0C6bwuSCPhYXZ4j4.crl (hash: 5CfpN3YaEIPxs0449rHDisyT+P5YKlqAlrtaD8zK0ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:8f:fd:d9:25:7e:0f:65:96:78:23:48:94:ff:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Validity
Not Before: Apr 20 10:00:38 2025 GMT
Not After : Apr 21 10:00:38 2025 GMT
Subject: CN=4dd41a7de4d15bc9fe023aaf94e7ce00b0d3f30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:eb:c4:d8:65:e4:23:c6:0f:5b:de:7b:cf:
4a:6b:a6:f3:f2:64:9d:a1:b9:13:e0:d6:30:1c:5c:
8b:00:b4:82:2f:a7:aa:a3:07:f1:77:70:6b:7e:2a:
9a:6e:0f:5a:58:19:41:e9:f1:cd:a5:6c:52:df:82:
9e:3f:9c:43:cd:ff:86:35:e2:f5:9e:ce:ba:70:21:
d4:a4:8c:0e:85:83:b9:90:08:fc:70:c4:ce:03:d8:
81:01:5f:75:76:d4:24:8a:85:77:5c:37:6f:68:7b:
f3:16:7a:ba:b7:62:e5:f2:d7:b0:b6:14:99:fc:8c:
14:8f:4d:75:f0:93:cc:52:dd:43:40:ba:78:ec:34:
44:e1:88:2e:dd:a1:9f:e2:26:d5:08:87:52:23:ce:
13:60:43:d0:af:9a:c7:bf:f2:b4:9f:d3:5d:67:60:
ad:6d:0f:c5:fc:42:0f:93:66:6c:46:5d:3d:99:eb:
77:45:08:84:bf:79:46:80:4a:c7:a1:ba:57:b7:c9:
c9:1a:db:b0:6d:0d:3d:e2:c1:f3:8c:45:04:aa:a7:
d3:51:c9:06:f6:ca:0f:51:56:f1:25:fa:29:16:fe:
10:89:71:13:c9:b7:76:f8:9e:7e:79:20:d0:fd:6d:
13:1c:35:e5:e2:20:09:e4:a7:36:a1:01:e8:c1:70:
2e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D4:1A:7D:E4:D1:5B:C9:FE:02:3A:AF:94:E7:CE:00:B0:D3:F3:0A
X509v3 Authority Key Identifier:
keyid:D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:79:c8:d8:e3:db:3d:fe:61:3e:8e:f9:dc:3a:78:36:b5:8f:
f6:3e:35:5b:30:f9:69:7c:5b:07:9e:d3:39:97:fc:14:38:4a:
87:22:9f:d6:0d:18:5c:bf:24:01:f0:94:c3:6e:9c:35:1e:1a:
9a:15:ee:f7:bd:ca:48:f6:88:d0:29:e1:4b:26:50:d5:57:00:
11:0d:e7:1a:b8:9b:cb:42:d1:60:09:01:50:cb:d7:26:24:70:
96:37:6e:b3:3b:09:7b:7c:16:d5:f0:9d:7c:f9:68:ca:cb:83:
21:b1:67:e2:05:a6:26:05:9d:6a:bb:5e:80:50:8f:7f:5d:44:
30:72:e6:e9:02:d0:1b:8f:9a:a8:11:a3:1b:de:52:6b:8e:86:
23:05:4a:71:01:2b:a5:61:eb:b9:69:5e:7e:6e:db:2e:71:03:
ef:1c:c3:44:e4:f7:d7:06:15:ac:c6:5f:24:3c:40:ff:0d:08:
1d:9c:63:24:3a:13:41:41:9d:cd:fb:3a:1f:38:9d:8c:42:50:
f9:93:0b:c7:a7:12:d7:cd:3d:bd:03:f9:f2:a5:2d:c4:17:c5:
14:6f:5c:92:5b:90:86:a6:bf:12:b4:5d:13:f1:d4:64:59:5b:
d5:a7:6b:d9:89:d7:84:1f:0d:33:b0:24:32:90:b4:e5:78:a3:
dc:75:43:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:11:22 2025 by rpki-client