Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
File: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft (raw, json)
Hash identifier: L6sb/vbGtzV6aKE36JUD0YTLKM2HaeYrZW2zpTeET24=
Subject key identifier: 83:2C:BB:FC:66:08:F1:1D:A0:77:AF:FE:0E:51:F1:F8:09:53:5C:BF
Authority key identifier: D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
Certificate issuer: /CN=d977120937500eb46696428962e510e02c348e6c
Certificate serial: 01962C3CD58D188CF725764D10C971F70BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
Manifest number: 0BD0
Signing time: Sat 12 Apr 2025 23:01:46 +0000
Manifest this update: Sat 12 Apr 2025 23:01:46 +0000
Manifest next update: Sun 13 Apr 2025 23:01:46 +0000
Files and hashes: 1: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl (hash: J1w8O8Jhh2g2iI6ZPboXJm6eXzg8i5IM5227ojKz2G4=)
2: ABCdWHfeRuB4x9Cfjqm_Nsu7Efc.roa (hash: bp8ugvHYl4CGZn0o8RUyCE5vXn4l+aGFTzhE2reh5sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:3c:d5:8d:18:8c:f7:25:76:4d:10:c9:71:f7:0b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d977120937500eb46696428962e510e02c348e6c
Validity
Not Before: Apr 12 23:01:46 2025 GMT
Not After : Apr 13 23:01:46 2025 GMT
Subject: CN=832cbbfc6608f11da077affe0e51f1f809535cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:bb:10:4f:ef:50:62:65:c6:72:ee:7f:6d:
0d:67:ec:21:0c:5b:25:db:01:cc:3f:9d:eb:53:b2:
67:eb:b5:71:ea:e4:5f:84:df:ca:43:a0:0e:15:b9:
08:d9:0e:80:be:f8:51:6f:26:9d:e0:b5:ac:df:56:
34:c3:14:1a:f6:46:cd:21:ca:5e:08:f1:5c:3e:a0:
e2:fc:fb:0d:8f:9e:30:cf:4f:09:7f:de:7b:f2:b8:
a8:32:b1:97:cb:40:6d:83:71:02:1b:41:e1:19:5b:
96:67:96:e9:7c:02:51:19:7e:b8:36:26:8c:d5:6b:
1a:f2:92:3d:a2:2b:49:63:d6:27:5d:29:c1:ca:15:
b4:7a:33:67:ee:cb:b5:79:bb:e1:34:68:cd:35:40:
e4:2d:07:63:7c:82:5e:f8:0e:72:15:44:30:bb:a6:
f5:ec:4c:59:a9:ba:5c:83:2b:6b:83:9c:67:d1:6b:
54:f6:45:7a:14:00:14:80:32:e7:ff:26:17:fd:de:
4a:ef:bf:ef:a7:3c:9f:02:7b:b2:ce:b5:2a:5d:e3:
94:00:82:93:a1:47:f5:b1:27:98:14:51:67:7d:c3:
c9:04:29:82:59:64:6d:03:65:57:4c:51:b3:c3:c4:
99:3b:ca:90:92:e0:cd:dc:df:0e:2b:cd:e3:50:89:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2C:BB:FC:66:08:F1:1D:A0:77:AF:FE:0E:51:F1:F8:09:53:5C:BF
X509v3 Authority Key Identifier:
keyid:D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f4:8c:00:c8:e4:cd:e2:12:ea:35:68:9b:9b:09:e0:fe:32:
e0:b3:9f:a8:16:b3:53:d4:3c:7d:e0:34:5d:a1:d1:fc:d8:13:
af:a5:33:06:04:d9:d6:12:f6:66:06:2e:73:ad:a6:ec:e0:95:
c5:dc:7e:5f:74:b5:8b:e9:5e:fd:70:b5:8a:e3:f1:79:14:53:
bc:3b:90:b8:73:bc:d8:4e:93:60:93:0d:60:5c:b1:0d:31:02:
44:48:bb:2c:3f:44:43:83:1f:13:c3:db:20:07:7c:ef:3d:e1:
11:58:2a:03:b1:71:7c:a1:fd:e8:c8:f5:6d:63:65:d4:f8:6a:
c6:91:8f:a4:e7:15:7d:d9:96:3c:d2:42:0c:ce:72:4e:59:c7:
cb:50:8d:6a:2b:05:1e:16:de:c6:eb:a0:86:81:e1:d1:2a:81:
33:b8:b4:32:63:a6:17:47:56:78:61:19:e1:31:84:82:8b:04:
0d:ae:26:e0:1a:50:2d:e4:a6:ef:7b:b7:56:59:fb:e6:8c:a0:
97:2e:f1:df:74:96:5e:79:3d:47:4c:92:86:71:1b:6c:51:09:
a6:4f:c6:f2:b8:c7:ef:fa:34:9d:29:d9:43:3f:5f:41:7c:ea:
0f:d4:04:eb:91:33:73:0e:43:c9:bf:12:fb:9f:2a:1a:f5:ce:
11:58:07:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:10:59 2025 by rpki-client