Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json)
Hash identifier: Q4UT7H9wDch0ejiUxW9mtvvJmxZCVpuCe3WW6vqw4as=
Subject key identifier: 21:25:E2:AB:E9:F8:2D:DC:95:89:D4:92:E4:35:99:7A:B2:86:EB:A5
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 019641432BA3278C3E0184A7F113B6104BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
Manifest number: D5
Signing time: Thu 17 Apr 2025 01:00:42 +0000
Manifest this update: Thu 17 Apr 2025 01:00:42 +0000
Manifest next update: Fri 18 Apr 2025 01:00:42 +0000
Files and hashes: 1: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: 75koS8tyVHJC3gKoM06cuybts1xUq5naSkh5lpQiw5k=)
2: P6mssWX-V0cqAzHy81OLWoJ95tA.roa (hash: 1KxuTLXZ0RpUrBX1EdO6Y3ND8ja5oUQEOKFvppcvKmo=)
3: xb1c81OFtbINdLQq-ZwRav9UWoI.roa (hash: XHYFd0tSE5d2fh7X6gspcN3JIn/ONDCV3VHTC+ocClI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:43:2b:a3:27:8c:3e:01:84:a7:f1:13:b6:10:4b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Apr 17 01:00:42 2025 GMT
Not After : Apr 18 01:00:42 2025 GMT
Subject: CN=2125e2abe9f82ddc9589d492e435997ab286eba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:34:02:29:0d:a3:28:0d:d2:fb:da:4e:7d:ea:
c8:f9:1b:aa:75:d4:7e:10:52:10:27:69:1b:d1:3b:
f5:ef:36:2b:fc:0d:1b:91:d4:d0:65:57:51:03:0c:
b6:a7:ed:64:8e:99:5b:93:b6:16:a1:c8:62:1e:46:
ea:f1:ff:93:e9:25:24:47:c3:6a:e8:c5:03:b6:55:
a7:4e:8d:a2:d7:0d:89:2d:b2:9f:17:a0:1a:5b:9d:
a7:f6:96:8e:de:7c:fc:f5:2c:1f:e5:00:e8:2d:89:
60:c9:b4:8d:38:f9:e4:17:ef:35:e8:f7:45:d6:fb:
83:18:86:bd:11:5a:18:99:a0:83:ff:a2:0f:61:92:
af:40:f9:55:06:72:ca:84:4e:9b:22:8f:1c:61:39:
ed:72:ef:cb:85:00:65:0f:12:3a:c4:dd:c1:9b:79:
53:1d:2b:91:4f:40:da:a3:24:14:3d:30:9d:d0:a9:
73:69:73:f7:d8:54:0a:9f:47:0e:1a:ee:7c:ad:7c:
66:7d:40:6c:1a:a5:9a:f8:5b:b5:9f:87:61:d6:2a:
5c:a4:4b:d3:df:67:b7:69:01:1e:47:d4:c5:0e:8b:
a9:fb:2c:66:0d:56:67:f7:5b:3b:6e:9c:f4:fb:79:
86:54:46:4b:c5:3c:0e:64:1f:c7:8e:8d:e4:82:67:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:25:E2:AB:E9:F8:2D:DC:95:89:D4:92:E4:35:99:7A:B2:86:EB:A5
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4e:81:ae:5d:21:cf:84:5e:75:71:82:ef:a3:eb:58:ae:d2:
98:6f:56:f0:dc:e2:ec:e1:24:68:13:aa:68:a4:e2:5c:17:74:
cb:d5:50:51:fe:81:85:41:7c:af:e7:78:df:36:bf:98:d9:e9:
02:b2:e1:83:14:5d:e4:a0:2f:ea:8e:27:7a:b0:fb:55:e4:4f:
e4:bc:7a:a6:cf:82:f6:01:ea:f6:01:17:4b:46:8c:0e:f0:05:
3d:fd:7a:aa:97:c2:90:65:77:ee:db:b0:3f:a3:88:d4:48:83:
72:36:35:ac:ec:08:66:8c:9c:87:29:b9:1b:e5:05:92:64:bc:
d3:68:58:da:d8:72:ca:66:01:fd:0e:a0:1e:48:1e:d7:ff:12:
fc:57:25:a9:b8:b6:8d:6f:57:13:0c:be:ac:c9:33:80:eb:3d:
8e:94:64:ad:05:39:31:68:62:38:59:d2:01:f1:2c:61:ce:86:
6e:b6:b8:be:c6:04:77:a9:95:cf:78:17:89:a7:29:59:c9:9e:
ca:d0:ce:4b:88:91:00:c9:29:54:82:50:8c:57:d0:09:bf:ea:
df:0d:a1:cd:8d:81:f9:8f:a4:a8:4a:3f:d4:2d:9a:12:6e:af:
0a:cc:99:16:eb:6d:a7:5b:00:93:cc:d3:86:8d:74:1c:ba:ac:
4a:d2:5b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:04:09 2025 by rpki-client