Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
File: 2VJzaCBuPppZJAgd9jiAJG5cVBo.mft (raw, json)
Hash identifier: ZtZBqLBplsxIZ383ur3rkbzkJB/GoMf6pLHZYldJvLQ=
Subject key identifier: 7D:54:21:2D:57:E4:A0:52:AA:E2:41:B8:29:87:3F:BA:AD:10:B2:34
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Certificate issuer: /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial: 019651C93088B02CFEF3D91DDEA09EFE1721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
Manifest number: 148E
Signing time: Sun 20 Apr 2025 06:01:01 +0000
Manifest this update: Sun 20 Apr 2025 06:01:01 +0000
Manifest next update: Mon 21 Apr 2025 06:01:01 +0000
Files and hashes: 1: 2VJzaCBuPppZJAgd9jiAJG5cVBo.crl (hash: iDMKPvQ/cVauRT8DyRnw1p98OrADb9JReWeW0flAJBE=)
2: SIolq_1_WZM4Sl_jpV4PfGa787Q.roa (hash: j7Gukmt+3MRCWPVKoFNL04/tZ9Oo5sZf6Bgq4mKvIoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:30:88:b0:2c:fe:f3:d9:1d:de:a0:9e:fe:17:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
Validity
Not Before: Apr 20 06:01:01 2025 GMT
Not After : Apr 21 06:01:01 2025 GMT
Subject: CN=7d54212d57e4a052aae241b829873fbaad10b234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f1:8f:fd:c5:d7:45:f4:d4:d1:fe:cf:32:5d:
3b:be:42:a0:64:7d:0c:cb:9e:8a:36:11:b2:1f:54:
ea:9b:7a:2a:79:95:f8:61:80:e4:b0:1d:b1:9b:8c:
74:b6:e9:9c:47:b4:a8:a1:d2:2e:25:31:23:00:1f:
c5:23:a9:c9:e7:8e:e4:6f:f2:76:18:f1:98:e6:eb:
a0:49:79:94:60:b4:64:2c:8e:ac:5b:89:05:77:ef:
c0:36:ec:7d:72:d2:e3:cf:15:74:75:cb:b4:fc:6a:
1a:b5:a1:1c:06:9d:fb:1a:3d:ad:7e:91:3c:bf:f5:
e4:3d:4a:cd:86:ef:96:a4:a8:2d:6a:98:4c:6a:46:
1e:7a:2c:ce:4a:0d:35:73:d8:93:03:3c:00:e7:5d:
03:e1:aa:1f:35:4c:e6:f2:1c:d7:3b:28:1f:f0:a0:
ee:47:af:77:53:85:91:39:51:68:b5:3c:d2:9d:5f:
d0:6d:73:7c:d8:e5:0a:b6:58:8c:02:73:3c:02:66:
3d:77:01:60:94:a0:c2:a0:95:ec:6e:07:bc:ff:9d:
96:33:79:92:0c:36:95:ca:b1:36:af:74:2d:bc:7a:
d9:f6:1b:00:3f:ed:57:b2:99:f6:b0:99:f5:06:23:
47:32:c3:7e:61:26:55:fb:e8:49:5a:43:06:51:b0:
17:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:54:21:2D:57:E4:A0:52:AA:E2:41:B8:29:87:3F:BA:AD:10:B2:34
X509v3 Authority Key Identifier:
keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ee:dd:b7:ce:b6:7d:5e:7b:76:88:93:76:cc:93:01:3e:03:
d9:50:ed:94:88:d8:b3:99:10:db:16:90:93:7c:15:71:b6:4e:
74:ed:54:52:61:f6:8b:ac:9e:db:94:99:f0:d3:e0:a5:82:e2:
5a:a8:1a:16:b8:ac:8b:38:cc:37:bb:bd:3b:25:77:de:05:d7:
18:51:5f:1d:92:93:29:ff:c6:2a:66:f6:f3:27:c5:d1:0a:84:
25:9a:01:a3:2b:fa:75:d4:c7:7b:fd:46:6e:03:be:9b:0c:64:
13:40:3c:68:55:30:4a:d2:80:cf:42:5e:af:c7:67:f0:bd:fc:
4c:c7:40:ed:41:58:b7:6e:6f:96:eb:ba:a0:3d:01:ab:7c:03:
d2:fe:2c:f7:5e:52:6f:8f:53:a7:7f:db:f0:76:0c:2b:dd:6b:
81:a9:a5:60:49:de:15:46:06:cf:c1:af:bc:e7:e5:e0:b8:aa:
4f:74:87:92:f1:4f:5b:e4:9e:c4:58:e6:29:b0:d9:9b:17:f1:
bb:c2:6f:69:7e:85:c7:d4:ca:e4:c4:58:e1:a8:39:1d:89:01:
82:32:88:68:64:e6:2f:ef:33:bb:72:08:b6:cd:b7:5d:25:f7:
93:6b:5e:bf:20:8c:35:37:df:e4:bc:4c:08:4b:da:29:e0:76:
55:47:b5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:28 2025 by rpki-client