Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
File: 2eeOhm6SBNAab1LTn9hP8JALIdQ.mft (raw, json)
Hash identifier: L1JkFaupim5i8lV1tCYl5ryWnpT+ubcwUGUdScW0GMw=
Subject key identifier: 07:BD:94:A1:8D:19:2A:9F:8B:97:28:6E:61:B1:46:7B:47:34:C7:A1
Authority key identifier: D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
Certificate issuer: /CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Certificate serial: 019653124666077E4CE09797BAFE90C87F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
Manifest number: 02BF
Signing time: Sun 20 Apr 2025 12:00:28 +0000
Manifest this update: Sun 20 Apr 2025 12:00:28 +0000
Manifest next update: Mon 21 Apr 2025 12:00:28 +0000
Files and hashes: 1: 2eeOhm6SBNAab1LTn9hP8JALIdQ.crl (hash: TsWQil59R22OxlQUYSfHd/nitPM5Opb02um8438inH8=)
2: MnAFAkCtgzLcYcNFwN10QWcGsK8.roa (hash: 6b6kNF5nIgi+BcUotmCWsx7IX4qtT26omA/Wf9SJHJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:46:66:07:7e:4c:e0:97:97:ba:fe:90:c8:7f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Validity
Not Before: Apr 20 12:00:28 2025 GMT
Not After : Apr 21 12:00:28 2025 GMT
Subject: CN=07bd94a18d192a9f8b97286e61b1467b4734c7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:0e:fb:e1:8e:ce:8d:ce:1a:ee:e6:0b:96:
15:d4:e7:c0:d6:09:66:95:c8:7d:c7:2f:21:37:1b:
f2:60:f0:e3:c6:53:00:e2:5c:3e:3f:b5:4a:9f:02:
49:11:6c:4e:7c:43:5f:85:75:6a:ba:c0:e3:09:35:
92:ef:57:59:74:86:90:54:4c:9a:a9:d0:03:72:42:
3a:93:b8:78:a5:bc:7b:28:a8:39:ba:ae:9f:56:22:
05:fa:4a:4c:2b:0d:f9:41:59:4d:7f:17:03:1b:fc:
c4:5f:56:4b:a6:21:5a:1e:20:0c:40:24:fc:0b:5b:
70:12:93:4d:e2:1d:d0:0f:fd:64:f5:29:ce:3c:4c:
aa:b3:80:75:cb:75:7d:95:dc:d5:c8:0f:e2:e8:b7:
72:e7:94:37:a3:5d:a0:9b:13:33:a0:ca:1c:72:3e:
e2:40:ad:92:91:09:5c:c0:93:31:53:fb:46:95:0b:
6a:29:8b:e2:02:61:46:f1:19:b6:d2:50:52:d5:f1:
9d:c2:89:ae:04:c2:2c:95:40:00:3f:82:0d:c5:08:
5d:90:64:3d:2e:bc:99:82:31:a4:98:c1:3c:b8:04:
76:0a:28:cc:e0:22:24:7d:2b:7a:02:38:ca:9c:9f:
c7:56:cd:d5:cf:c9:ad:f6:c7:5e:36:bc:a1:2e:b3:
83:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BD:94:A1:8D:19:2A:9F:8B:97:28:6E:61:B1:46:7B:47:34:C7:A1
X509v3 Authority Key Identifier:
keyid:D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cb:6a:f3:b8:68:fc:ee:c1:81:c3:40:08:80:8a:5f:05:ca:
8c:f7:e4:ef:df:92:1b:04:08:07:57:4a:d6:bb:91:01:e9:b5:
0a:d7:5c:8b:a4:b3:52:34:0d:fb:cf:08:cc:49:94:8f:81:e1:
38:4e:eb:e6:24:be:65:44:12:0d:2c:b3:ce:64:a4:35:63:3a:
a4:35:e3:09:3e:72:5c:22:c7:f1:18:7f:57:7d:ce:88:e4:61:
61:67:d1:99:94:4d:6f:d7:7c:4a:11:3b:25:86:35:4a:9c:6e:
45:fc:98:f8:10:ee:d3:18:4d:b0:9d:03:f6:5a:90:a0:b8:75:
30:6e:61:aa:8f:02:68:ab:9c:cc:3f:ad:0b:55:3d:bb:f5:a2:
8d:9e:cf:6e:c7:8e:73:db:58:27:6b:7e:3d:a4:6d:67:72:13:
5c:a4:32:09:62:5c:1d:7e:b6:ec:45:16:25:10:4d:69:7b:f4:
e3:2c:8d:c2:64:ff:4d:58:64:8f:d5:ea:5f:d8:63:0a:4c:5e:
70:90:d4:b6:02:cf:ca:74:16:de:21:7b:b9:d2:9d:0c:9f:85:
34:e4:ec:39:7e:6c:47:b7:38:d5:af:10:d6:40:2a:af:b2:a7:
0e:c9:51:06:31:af:8f:12:ce:45:7e:db:77:12:b0:04:ec:e9:
ad:ee:5f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:49 2025 by rpki-client