Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
File: 2J9hzEBpw2NiRF2BiJEDQLble6U.mft (raw, json)
Hash identifier: LstDrstlp6jlOgsLQTfl85TtHrGWYqXixu74niTIIWA=
Subject key identifier: D0:6E:A7:73:A4:EA:74:46:A2:5C:2E:4D:5D:D6:1D:8F:77:A4:36:96
Authority key identifier: D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
Certificate issuer: /CN=d89f61cc4069c36362445d8188910340b6e57ba5
Certificate serial: 01962ABC0BA9E66EFCA384B176E46847296F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
Manifest number: 0A97
Signing time: Sat 12 Apr 2025 16:01:28 +0000
Manifest this update: Sat 12 Apr 2025 16:01:28 +0000
Manifest next update: Sun 13 Apr 2025 16:01:28 +0000
Files and hashes: 1: 2J9hzEBpw2NiRF2BiJEDQLble6U.crl (hash: a1jn6rwZQ1eCsP35JeHKPLMH4mstBacpchTuDTw3lSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:0b:a9:e6:6e:fc:a3:84:b1:76:e4:68:47:29:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89f61cc4069c36362445d8188910340b6e57ba5
Validity
Not Before: Apr 12 16:01:28 2025 GMT
Not After : Apr 13 16:01:28 2025 GMT
Subject: CN=d06ea773a4ea7446a25c2e4d5dd61d8f77a43696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:32:78:7b:a4:f2:75:5a:34:06:c6:92:75:
56:41:14:7e:fa:9e:31:a5:3b:e9:fc:10:d2:a1:a7:
46:36:59:ef:c7:47:e7:78:69:d9:98:78:6c:fd:9e:
c6:c4:96:fe:f0:e6:5f:3a:f8:6b:cc:03:46:56:8e:
cb:57:75:c4:1c:7a:ba:35:91:44:8d:3d:9b:71:12:
3f:2e:f8:fd:37:67:cd:5d:89:bd:fa:ce:4b:93:0f:
de:02:6b:76:5e:3d:8a:62:89:8d:18:e3:76:c1:a2:
c8:69:c0:4b:bb:0f:8e:a6:30:c3:8b:10:50:98:f1:
8d:d2:f0:7f:03:2f:c9:70:e5:3c:17:3e:98:35:4b:
80:a3:aa:c0:a0:05:8a:52:8b:b2:9f:91:31:7e:28:
8a:4f:8b:0b:da:b7:9a:d7:39:fd:fc:d6:ee:a2:89:
a6:54:4f:60:51:0b:d5:3f:70:1e:41:97:47:e2:61:
e4:96:4f:88:2f:ee:60:df:8a:fc:72:b0:4b:22:ee:
7f:cc:5a:4e:92:91:42:75:3d:a5:d0:e0:09:64:ba:
83:cb:47:ed:42:4e:08:09:23:92:e1:af:aa:50:f7:
d0:fa:f3:94:9c:61:2f:f2:1f:ab:fb:ce:86:c1:36:
f7:d7:03:29:31:10:78:e6:6a:b8:c8:b8:fc:a6:77:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6E:A7:73:A4:EA:74:46:A2:5C:2E:4D:5D:D6:1D:8F:77:A4:36:96
X509v3 Authority Key Identifier:
keyid:D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0e:d9:4f:69:f7:18:25:23:e5:e1:15:4e:27:0c:b6:da:63:
32:df:b5:21:a7:66:65:39:a4:3f:76:1c:19:34:6b:0c:d0:94:
85:e3:78:25:37:57:38:93:84:72:94:6e:56:d6:d6:95:a6:48:
fb:ba:c2:6d:91:bc:a6:80:89:44:75:7e:45:d3:5c:7a:f9:15:
70:8a:49:d9:c3:a7:2a:1b:d2:1b:b7:e6:c1:ab:5d:0d:27:3b:
fb:49:37:f6:cd:aa:fb:65:5f:44:c7:7c:47:fb:21:54:e8:4b:
0b:03:76:e5:43:bb:c0:8c:91:ca:83:e6:a2:31:a8:c7:4d:da:
c2:66:b3:a6:bb:d5:a5:fc:6b:a2:f9:84:84:2f:60:67:a1:12:
71:f6:16:9d:e9:9b:22:17:2e:2f:42:9f:3a:65:1e:e0:58:64:
3b:96:29:61:ec:0b:bd:9f:cb:67:5d:4d:e4:5c:52:9e:2a:0b:
73:b3:27:cb:e2:e3:68:81:a7:0c:b8:84:c8:ac:9f:c4:9c:88:
83:3d:4a:a3:b7:14:b6:ed:a5:1c:10:9b:66:66:46:b9:70:a3:
d7:1d:0c:5b:73:3b:3e:1f:f4:04:88:4e:c4:94:52:3a:5e:5f:
5e:74:9d:e6:61:5d:77:a1:61:2d:20:ed:10:34:9c:ac:19:65:
13:d6:fe:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:42:18 2025 by rpki-client