Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: PwHXPKDPGjefB6qLTvPQmxcTYhvdkssxEoppF8abA4M=
Subject key identifier: B9:E3:70:7E:94:CA:46:FB:BA:B2:F0:4E:87:A7:1F:A7:EE:A4:1D:22
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 019651C96199FE3C0B7B20DAF1CD5E8D9B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 06:01:14 +0000
Manifest this update: Sun 20 Apr 2025 06:01:14 +0000
Manifest next update: Mon 21 Apr 2025 06:01:14 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: FtpHDG/ENQFESbs9TduWD6foBsY4OhiazarkF7N29sE=)
2: ev2WSyViLs_4S1tUPVrDBxIhRNA.roa (hash: 76S9MUck64w/+vCaPMsorT6TPB6jZWIo5BognypKoJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:61:99:fe:3c:0b:7b:20:da:f1:cd:5e:8d:9b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Apr 20 06:01:14 2025 GMT
Not After : Apr 21 06:01:14 2025 GMT
Subject: CN=b9e3707e94ca46fbbab2f04e87a71fa7eea41d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:cb:52:86:6c:51:17:f2:12:44:f1:4c:43:
8d:a9:91:fa:e5:e7:c2:61:2a:62:55:b8:b6:b3:53:
20:34:47:32:80:b3:ff:2d:93:f6:01:68:07:8b:be:
7e:65:17:74:fe:d2:f9:2a:c0:37:eb:dc:a9:21:2b:
2e:59:99:dc:81:1a:f4:26:83:b0:1c:32:d8:d1:3d:
bf:c3:42:00:3a:5a:d1:07:81:58:37:d9:fb:5f:59:
6d:34:9b:ba:6d:6c:ef:4d:b3:3b:bd:9d:1b:55:ae:
59:0d:0a:64:a7:ed:ab:72:bc:7a:19:af:43:75:4a:
7d:f9:66:92:fa:ec:e2:1a:de:8a:f2:cc:c5:12:17:
20:a4:8d:6b:34:3a:f6:02:a5:c3:79:dd:89:25:ba:
86:81:42:f3:47:44:1f:7d:b3:ef:a8:1f:eb:97:dd:
04:7b:7f:88:72:19:41:6d:cf:28:8e:58:9f:25:56:
3c:b7:40:94:fd:92:3c:b1:45:5a:24:57:ec:7c:69:
7a:c4:2a:71:8d:38:2a:85:1e:04:3e:69:bd:f8:e8:
7d:01:24:c7:f7:b5:34:cc:b5:6c:b3:48:b6:0f:16:
07:7b:ec:98:e5:b3:f4:7b:f3:34:a8:c5:6c:7e:9a:
2f:53:90:d7:20:e9:5f:a1:ed:c8:ed:87:11:ff:54:
9c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E3:70:7E:94:CA:46:FB:BA:B2:F0:4E:87:A7:1F:A7:EE:A4:1D:22
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:94:e2:69:04:fe:98:06:77:c2:10:e4:a4:94:93:4c:fb:62:
13:3d:fe:74:34:32:f2:60:70:78:5b:c0:ff:a1:1c:73:71:87:
f1:e7:3e:d8:ef:81:24:91:ef:2a:fe:42:95:84:f3:b2:af:e0:
00:e9:11:6f:40:67:a9:30:7b:b0:9b:c6:e5:b1:6c:60:b6:7b:
53:66:75:78:b1:15:d8:e9:d6:6a:97:39:2a:c2:5b:08:88:58:
51:70:aa:0a:14:f9:1b:2a:90:68:51:75:b5:21:0d:f0:12:70:
d2:5c:e1:5b:20:8c:60:1f:a8:1d:34:a8:41:89:38:8f:bb:72:
c5:e5:63:2a:2a:67:a9:0e:af:f4:a5:94:9e:d0:02:e3:81:d4:
35:b0:21:ca:5d:7c:dd:46:f9:d6:3c:cb:72:97:de:b6:7a:f4:
84:94:e7:60:db:24:bb:10:98:ad:2d:55:fa:e0:9c:8c:7b:18:
d1:8b:ec:b4:96:ef:ef:e0:76:cf:5c:33:76:ec:e5:85:47:ce:
c1:1a:84:16:d5:c0:57:71:51:a1:54:ef:57:7e:27:b3:6e:62:
e2:11:da:01:0b:46:fd:cc:bb:3f:11:d5:d2:f8:b8:57:4d:2b:
32:63:f2:ff:7d:0a:ef:df:a1:72:11:60:65:b4:65:15:c1:f1:
6c:50:06:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:28 2025 by rpki-client