Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
File: 2e_p029fiP3wR0LEFAx1MgkKt3A.mft (raw, json)
Hash identifier: 8ysv8q1daDTAOxQfr0+NiK0kVGi9zxHJKB4WN7zka/8=
Subject key identifier: 6D:B6:8C:0A:77:01:19:08:BF:C9:0B:54:81:95:6C:E0:F4:75:77:6C
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 01960FE931445D5873A4BCD9FE870D5082AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
Manifest number: 0C2D
Signing time: Mon 07 Apr 2025 11:01:02 +0000
Manifest this update: Mon 07 Apr 2025 11:01:02 +0000
Manifest next update: Tue 08 Apr 2025 11:01:02 +0000
Files and hashes: 1: 2RMmrpcDTc2PvNu5TNTAOyHaouI.roa (hash: XLm+GnfjmWK96gEaM9T+jWpkcJJsItx27t0lDAfnu+M=)
2: 2e_p029fiP3wR0LEFAx1MgkKt3A.crl (hash: DoYwGnAYptWvtkVVSm1PYd2mft7KBlNEOn7R7d1Mkeo=)
3: 8P6Z9Cx8SWSZTkyVumdiUHtewDA.roa (hash: TjOKj4a+PWeCDJb76vAZsC0563BFTc5omsFst4XIgOg=)
4: E0pkIzW9n-bHG2zbp1MoMQVm048.roa (hash: B3BqiJI6fxLnY50JHLDClRKLpgrtgt/Wjoy5/3OG5qU=)
5: Pk3Y8bmZ9v5bN1_6zxU4UYzAM4s.roa (hash: So1EWdtcEMDdLT99zqpyRyyrElAoZiXcpiXiUbqjYGI=)
6: T3lOjSmIziIpwPqfAzGQ-tEJwGg.roa (hash: YO3FHvImLTgWUXMun1aA53LmlRiB4Zb65q5ChwHuYqU=)
7: TAvnbGlGOHQkn1H4mmfTjMAonig.roa (hash: 5j2f3QIcoZ3w0v7OOhYxuDlG33ihkkRcN0bfLfGC5dU=)
8: qXJMsidJ81j9tR3h2UK1FDbmVxg.roa (hash: HLh56C+v712lFsjl7b6ehYsyReTygh+t6WH5+oMMUUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:e9:31:44:5d:58:73:a4:bc:d9:fe:87:0d:50:82:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Apr 7 11:01:02 2025 GMT
Not After : Apr 8 11:01:02 2025 GMT
Subject: CN=6db68c0a77011908bfc90b5481956ce0f475776c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:86:97:2e:46:7f:b4:56:ea:a2:4c:c6:76:f7:
31:9e:fe:ce:fe:86:d3:29:1c:66:0e:33:e5:07:ef:
6b:a6:ca:bf:56:6c:29:40:49:dc:9d:bf:e0:25:f9:
9e:18:f6:b5:3b:fd:38:ce:ef:c7:89:d4:aa:4c:bf:
08:04:14:0e:61:b4:bd:07:e0:19:7a:2c:31:7d:3b:
0f:0f:88:67:a7:8b:2f:62:a3:34:09:78:45:ad:83:
0d:e1:c5:79:9d:35:2e:88:3a:8c:8c:c6:77:e5:82:
5d:dd:e0:70:ab:18:bb:c2:4d:86:2e:37:1a:1a:59:
4b:4d:33:23:9b:09:f4:80:9c:b4:9a:35:3a:20:69:
1e:d0:12:f1:85:29:b0:32:55:f6:29:75:ac:c6:51:
05:ee:bb:b7:89:ef:7f:37:ce:ae:19:5d:d6:5c:09:
b5:68:b9:1b:1a:e2:69:1b:36:1b:84:cb:ab:de:7d:
13:68:0b:49:8d:8b:1f:9f:d6:48:e2:31:42:54:14:
87:f0:c4:d0:6d:14:28:f1:51:94:1c:6f:7d:52:74:
0a:57:16:e2:68:9b:c9:b0:c8:f6:cf:d8:17:ab:19:
0c:a7:5a:79:30:e9:cf:7f:f7:74:86:de:34:f2:b9:
11:c7:a3:25:ed:64:fc:39:77:f8:14:9c:12:4c:ac:
4b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B6:8C:0A:77:01:19:08:BF:C9:0B:54:81:95:6C:E0:F4:75:77:6C
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a1:32:6d:6b:90:96:34:47:0e:2e:69:ca:0a:19:48:44:c0:
70:75:5c:83:33:6d:c1:2f:62:7b:41:b5:b4:3a:0f:50:f5:20:
13:61:65:1f:8b:1d:d9:1c:07:b9:3a:16:42:c9:c1:17:46:95:
05:02:98:37:8b:8e:23:d6:74:11:42:fc:ff:51:df:c7:2b:ff:
cb:19:14:9c:81:ad:49:97:bf:c0:b2:6b:76:58:6b:86:d0:9f:
8a:fc:33:49:b6:f8:8e:5e:ee:98:0b:dc:1a:98:1b:db:1d:19:
71:91:ba:90:b3:46:3e:76:d3:15:1b:75:01:6a:91:1c:dd:8f:
25:11:fa:05:0d:71:ea:76:d9:4e:88:9e:36:e4:c1:b7:f1:4b:
8b:bf:f4:63:80:09:7c:4d:e1:e8:0b:ce:84:0c:fb:68:72:5d:
9d:6b:e4:44:42:50:de:ab:7e:9f:50:e5:a8:b6:6e:b5:bd:5c:
41:eb:7b:48:7c:ac:dd:8c:05:ba:a9:1e:30:4a:ea:9b:0c:da:
d2:3b:e8:5e:f8:8c:42:8c:0a:31:75:dd:9f:99:48:bb:f0:09:
83:a3:db:28:de:16:8f:65:00:d7:d4:b9:5d:e9:ee:9e:59:78:
78:64:b7:1d:e8:c5:c9:ba:cc:ff:6d:2e:6a:48:d5:aa:aa:be:
16:c3:da:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:31:06 2025 by rpki-client