Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
File: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft (raw, json)
Hash identifier: rXxgAhQh2PGNsZ6KxOQnfj+jWHPr7ZXSt6yA4JwpoZ0=
Subject key identifier: C3:E8:B4:31:15:C2:FC:F8:F5:52:72:F3:B4:9C:D2:99:A6:30:C0:B0
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Certificate issuer: /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial: 01964FDA7227C5FDA882287A16757A8503E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
Manifest number: 05AF
Signing time: Sat 19 Apr 2025 21:00:38 +0000
Manifest this update: Sat 19 Apr 2025 21:00:38 +0000
Manifest next update: Sun 20 Apr 2025 21:00:38 +0000
Files and hashes: 1: 20Dw3EtRjT0VsUf9XJsc0R3Ci-Y.roa (hash: eYk/5sRuyCDN9GA+BHkMTQtHbaoi0rArz9DpKNEObWk=)
2: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl (hash: T9sSZ8UA3qEeETDYuj3mJlM9d4V7uh4gYOIx+bYNDEM=)
3: 4syStsiJ4_nkcJBvU4Ns9Pjm0oQ.roa (hash: 2p6GX7iVYhsRkTJt8jEU86F9xE4rex2UzZbhNm8D8D0=)
4: N_GpQaNWWGxkbuDZ3ulfH-r64tk.roa (hash: IM2SiURjMxHWXsFqFI4woiJ2ADSr+qZUIrRaSOqm3m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:72:27:c5:fd:a8:82:28:7a:16:75:7a:85:03:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Validity
Not Before: Apr 19 21:00:38 2025 GMT
Not After : Apr 20 21:00:38 2025 GMT
Subject: CN=c3e8b43115c2fcf8f55272f3b49cd299a630c0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ab:bc:b4:93:38:b2:93:a0:6e:6e:0b:29:45:
f6:22:02:e6:75:ee:24:4a:00:6c:85:51:f7:9b:b6:
27:72:34:54:f7:07:1c:82:8a:fe:f2:31:ed:d1:bb:
db:4a:bb:fd:bd:f9:56:6a:41:91:2c:6f:52:9d:ef:
d8:91:87:21:2e:b8:0d:3e:6f:47:f1:07:bb:f0:1d:
0c:1b:00:6a:cf:e2:ae:ce:1d:03:9e:0f:13:70:1f:
bf:21:20:dd:50:39:25:f8:0b:a7:f6:cd:d1:88:a4:
77:f4:e3:9b:27:07:67:11:a0:80:12:1a:f9:41:78:
09:ca:c1:6c:df:13:75:72:7d:7e:cd:e5:50:fd:e8:
22:c2:b7:57:13:80:05:c5:fa:c2:31:1f:ea:41:71:
47:b9:ea:20:d5:6c:a3:ab:41:51:b4:80:7e:05:d2:
50:7b:b0:12:85:a3:ad:e0:5f:18:28:1e:a9:1d:bc:
c1:fc:86:a5:09:eb:4d:81:9a:10:34:3c:ed:2e:74:
67:66:af:80:81:cf:b9:10:21:b8:25:ea:74:75:d1:
17:33:99:39:0f:1f:cf:69:0d:8a:ef:b2:d7:67:71:
d5:a7:eb:a3:ab:56:75:4b:2a:0b:d4:48:d2:be:66:
0a:05:de:3f:ab:88:2d:79:18:d4:87:eb:02:35:ff:
f7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E8:B4:31:15:C2:FC:F8:F5:52:72:F3:B4:9C:D2:99:A6:30:C0:B0
X509v3 Authority Key Identifier:
keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e3:58:3b:7a:39:5f:df:06:c1:e6:07:c2:36:f0:e1:18:f6:
b2:4a:95:c5:34:1f:d5:d4:a3:df:38:29:46:f8:d5:c6:c1:69:
a8:3a:dc:2d:b2:20:e0:37:48:a5:ee:0a:4c:16:ef:1f:1c:9f:
8b:31:59:cf:5b:5a:91:d6:b5:75:c2:35:61:41:f2:b3:ce:20:
df:74:e1:0b:89:3b:e1:92:18:3f:20:b3:3d:ac:7c:2d:b2:1f:
f9:62:4c:1c:22:17:95:bc:5e:75:df:da:f0:14:81:7d:9f:7f:
d4:82:6b:45:b6:69:9b:ba:1e:96:71:40:b8:64:8c:5c:98:81:
af:e3:c9:78:64:9b:50:03:a1:d5:dc:50:42:51:b1:20:27:63:
ff:d2:ad:f0:33:f2:47:24:91:06:2d:96:63:4e:8c:bb:64:c5:
db:e0:c0:ab:62:a3:98:cd:d8:b6:de:c4:50:b5:9b:4e:c2:37:
bb:a2:b4:4f:83:6f:3f:6a:8d:e0:dc:97:c2:f1:c4:19:28:a1:
bc:55:fd:7b:21:58:55:d0:76:0b:91:ae:cc:fd:70:4c:66:87:
b4:d8:20:1c:42:47:1e:68:2c:83:1c:ad:19:bb:e1:cb:2f:91:
d2:eb:62:7c:f9:c5:8b:a5:9a:c1:ab:df:76:e6:49:24:a9:eb:
29:01:cd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:51 2025 by rpki-client