Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier: z4QXew97UAQBKpC5qey8Y/cm9m4GV0LN3wURjo/n/1o=
Subject key identifier: 06:44:92:04:23:F9:C2:E2:5C:8C:B4:96:B3:8B:EE:F3:A1:BE:7A:E2
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial: 0196507EF580608E6CAEAD8964AB20FF6C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number: 087E
Signing time: Sun 20 Apr 2025 00:00:19 +0000
Manifest this update: Sun 20 Apr 2025 00:00:19 +0000
Manifest next update: Mon 21 Apr 2025 00:00:19 +0000
Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: yIgxtuMUxb/Kqc5SJ+NDF5ODQz+GRutETTKStMNEBRU=)
2: CFSprmWbf9FMJJyxu80fINqawlI.roa (hash: 1mNVVtAB7atteoVY3WoXrG9InaTzBLk01eL0ItpajvM=)
3: DY1K6i5vQY8rznvxHZCh5DHCv5w.roa (hash: EKe1zlcQfQBpBTnSLz03ZLWlWqnPT4BruNhWaalp/48=)
4: juolSSzRfeDJo0Kp0hwKugPzAgA.roa (hash: G+kdJGG0lMFfjKrEiTBfGY6hBNUgOQA5o/mITsB+pLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7e:f5:80:60:8e:6c:ae:ad:89:64:ab:20:ff:6c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Validity
Not Before: Apr 20 00:00:19 2025 GMT
Not After : Apr 21 00:00:19 2025 GMT
Subject: CN=0644920423f9c2e25c8cb496b38beef3a1be7ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:67:af:b0:df:e5:53:6a:60:ca:26:21:e0:
fa:ec:02:81:bf:a4:a3:c7:da:02:52:16:50:44:9b:
d2:e6:58:19:e7:01:9c:e8:12:3e:6a:a7:b0:66:95:
03:6b:38:64:58:e8:56:3e:f4:b1:41:49:e9:0d:5b:
59:c0:fc:71:e2:f5:83:0c:67:c0:83:d7:b6:ab:75:
00:33:a6:86:13:28:04:68:d3:1d:b9:33:80:0b:e2:
bf:54:f6:88:20:a1:62:7c:af:21:0b:41:00:e5:b6:
69:30:25:0f:5f:af:cc:e2:56:79:74:57:34:bd:2d:
25:d2:5e:87:29:65:9d:04:ad:7f:1d:90:3a:c2:b0:
81:7a:a4:98:cf:66:b3:ed:43:a1:00:f3:76:eb:a6:
04:d9:44:5d:cd:ab:f0:e7:ac:6c:48:b7:a4:f3:67:
31:3d:f9:f5:b3:8d:20:0f:db:58:e7:70:32:c0:7b:
d9:ae:dd:bf:56:44:70:0b:03:70:9e:05:76:80:41:
2f:1f:c8:b8:22:99:d1:91:e5:cf:02:31:ef:1d:0d:
48:d5:87:7a:c9:92:49:bc:ad:30:d2:82:e2:5a:90:
63:f5:48:85:b9:e1:f7:a3:71:17:ba:37:fb:7e:ce:
0e:3c:03:5a:90:24:3c:fc:d5:16:9d:f2:36:e4:56:
e5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:44:92:04:23:F9:C2:E2:5C:8C:B4:96:B3:8B:EE:F3:A1:BE:7A:E2
X509v3 Authority Key Identifier:
keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c8:0d:47:e3:74:eb:b8:49:d2:74:9f:29:3f:89:29:51:8d:
9a:f8:86:74:d8:e3:07:08:d4:9a:c3:4c:1e:60:78:5c:c7:d2:
11:ba:15:11:fd:78:2a:31:13:0a:47:96:26:05:40:c1:a3:ca:
06:d3:1d:f6:3d:d6:cd:7d:e6:2e:23:d4:c5:1c:f0:6a:50:f6:
f3:a4:31:f0:28:13:60:f7:3a:e2:8e:6d:ba:05:16:07:83:3d:
82:c9:f4:49:4b:39:e0:47:0b:ce:eb:f3:67:b3:02:28:ac:b3:
2e:57:fe:64:96:9f:3c:fe:f5:e1:29:81:c0:97:2f:60:ba:07:
b2:eb:62:34:45:e2:c2:ff:92:5a:e1:2c:a0:34:fc:60:65:95:
f4:e0:42:b5:f5:6b:87:e3:65:b7:98:38:1c:78:79:4b:7b:ce:
aa:48:26:5a:b4:d1:69:fa:ef:5b:6c:2e:ff:b4:e0:de:e1:54:
5a:a4:f8:cd:d8:e2:6a:3c:db:81:54:fd:48:18:c5:69:39:71:
15:3f:d0:33:1b:5d:1f:59:d1:3f:96:46:50:0d:3d:c3:f5:e5:
c7:de:11:a5:1b:28:b1:23:c3:36:8c:13:0e:44:21:b2:1f:b6:
38:60:24:1d:8a:e2:41:7a:b4:e5:72:66:f5:9c:2d:00:94:49:
31:c4:18:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:17:33 2025 by rpki-client