Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier: Wg6zjsEeUJ1GnC5u8BaLhycdy51T31eypc4P7ijoMyA=
Subject key identifier: FF:FE:22:EA:E5:31:86:1A:E2:02:EA:7C:3F:7D:2A:6D:59:00:2F:31
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer: /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial: 01964D7EF0401AABF5EF96F57E252A5EA8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number: 12EA
Signing time: Sat 19 Apr 2025 10:01:26 +0000
Manifest this update: Sat 19 Apr 2025 10:01:26 +0000
Manifest next update: Sun 20 Apr 2025 10:01:26 +0000
Files and hashes: 1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: /ejUthxhYTFUYxxr/lteaIIfJaQLr7zjsW1rj5yHfE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:f0:40:1a:ab:f5:ef:96:f5:7e:25:2a:5e:a8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Validity
Not Before: Apr 19 10:01:26 2025 GMT
Not After : Apr 20 10:01:26 2025 GMT
Subject: CN=fffe22eae531861ae202ea7c3f7d2a6d59002f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:60:72:8d:14:8c:60:9c:2d:24:72:a2:1a:20:
e3:b2:7c:ed:1a:98:a6:9b:ee:43:93:8d:56:ac:6a:
2e:7d:73:69:4c:53:2c:23:96:da:0d:ec:a9:13:7a:
6c:4f:a2:6e:eb:32:d1:22:23:94:06:42:ae:7a:f2:
d5:ba:2d:a7:34:56:13:25:c7:43:90:49:cd:55:d5:
95:be:1b:0a:f6:92:48:14:62:02:fb:42:f0:4e:23:
7c:e0:5d:1c:1b:be:dd:7d:73:b0:96:43:2b:f4:a1:
0b:7d:68:3e:f2:db:4a:4f:d9:69:61:ad:c2:64:99:
b9:26:f3:d8:a4:5d:7c:3a:a0:65:d4:dc:fb:51:5a:
6f:a1:ab:8e:32:38:c5:32:89:4f:78:fe:8e:b5:fc:
e4:84:79:bf:da:ee:bd:86:42:47:ce:a8:25:a3:97:
5a:d3:d0:0e:08:9b:75:7d:de:17:1e:00:e6:0f:69:
fd:e3:96:43:16:65:04:41:cf:b3:20:d4:df:bc:7a:
e9:a9:ed:1a:22:99:8c:5f:fc:29:72:73:3a:d4:24:
89:0e:19:db:b3:6f:d0:ef:96:f1:80:53:f4:34:5b:
34:39:7b:22:18:1a:44:37:a4:ce:cd:9f:fd:b5:09:
ad:32:f1:a5:29:91:22:14:d2:38:7c:2a:bb:40:aa:
1e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FE:22:EA:E5:31:86:1A:E2:02:EA:7C:3F:7D:2A:6D:59:00:2F:31
X509v3 Authority Key Identifier:
keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a7:a7:83:f6:5e:91:c7:a0:67:7d:06:ce:cd:ea:53:37:25:
f7:0c:25:63:c4:cd:22:3c:f7:99:47:40:08:58:1b:5e:d0:4c:
c9:8c:9e:a7:55:5f:fc:df:7f:64:86:a4:67:9f:08:78:7e:e3:
fa:95:b8:61:a1:8e:16:28:52:e7:47:f0:f4:5f:61:a1:81:75:
88:eb:f7:7b:45:ad:55:11:f4:5d:57:31:bd:66:d9:56:ac:0c:
a7:c0:5c:18:f1:01:ea:56:68:ec:28:8b:73:42:cd:d9:0b:57:
d1:50:a9:a4:e2:be:f2:b8:ac:52:db:b8:6e:30:f4:63:ae:23:
76:10:5a:49:f7:ed:c2:8b:7e:66:98:da:82:37:b1:e2:87:78:
68:4f:6e:99:c1:39:f1:86:10:26:9f:f0:81:29:73:34:b8:87:
c8:57:28:26:94:2c:eb:88:33:b0:9d:d3:dd:4e:96:3d:e6:2b:
ad:f0:f4:8a:e8:a7:0d:6b:1f:c7:36:f5:df:f7:49:6e:3e:ee:
f4:96:d9:c1:b0:fa:27:cb:4e:a5:7a:92:ce:b3:fc:bb:9d:ce:
e5:92:13:20:05:76:58:9e:12:8f:13:aa:a2:18:d5:99:9f:5f:
cd:a4:d4:fa:4f:57:40:84:fa:f6:f0:f4:20:8c:b3:c6:ee:d0:
ba:2d:f4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:41:18 2025 by rpki-client