Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
File: 2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft (raw, json)
Hash identifier: cLZpmuBdqaqo0smhDzD/zdVZ9nczrtSfHamqlrSoQyo=
Subject key identifier: EB:D5:14:B7:3E:8B:2C:18:48:C0:32:16:ED:19:41:1D:79:FA:B9:3E
Authority key identifier: D9:AD:0D:73:8C:7A:F0:35:9A:06:30:36:54:16:44:0D:01:98:5B:A2
Certificate issuer: /CN=d9ad0d738c7af0359a0630365416440d01985ba2
Certificate serial: 01958C2983EA96DFDE69FB30599F63591DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a0Nc4x68DWaBjA2VBZEDQGYW6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
Manifest number: 07B4
Signing time: Wed 12 Mar 2025 21:01:25 +0000
Manifest this update: Wed 12 Mar 2025 21:01:25 +0000
Manifest next update: Thu 13 Mar 2025 21:01:25 +0000
Files and hashes: 1: 2a0Nc4x68DWaBjA2VBZEDQGYW6I.crl (hash: ZVuwNHgcwRotBH+1UVYpV7zvJTBTuPQmHaYXMouvU5w=)
2: bhwBYoazvA5A_Z_cE9R34ToOWGg.roa (hash: sma7MnYwGc+h3WkyXXW6543+L5js/BDpTSkKMtbWDZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2a0Nc4x68DWaBjA2VBZEDQGYW6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:83:ea:96:df:de:69:fb:30:59:9f:63:59:1d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad0d738c7af0359a0630365416440d01985ba2
Validity
Not Before: Mar 12 21:01:25 2025 GMT
Not After : Mar 13 21:01:25 2025 GMT
Subject: CN=ebd514b73e8b2c1848c03216ed19411d79fab93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fe:2c:ac:36:1b:23:b3:6e:0a:2e:f9:92:68:
71:9e:c4:a7:17:51:82:26:a5:0f:a8:85:a7:3d:54:
70:bc:d1:96:a9:65:77:a7:64:4e:a5:cb:77:a9:7c:
4b:3b:a1:b2:62:14:87:9b:d0:08:c4:e3:1c:2f:18:
3d:ec:12:37:91:ca:47:7a:c6:b1:29:28:d4:9e:a9:
8b:e9:73:e8:10:49:ac:13:89:4f:11:25:83:2c:0e:
82:3f:cc:b8:11:d5:48:2f:24:10:eb:53:16:ec:b6:
db:99:03:13:7b:ae:08:e7:95:c2:d1:55:7e:56:da:
94:ac:1e:17:21:49:18:7a:e2:ac:4c:f2:8a:c9:fe:
16:5e:b3:29:73:f1:17:f2:fb:e8:b7:ae:9d:be:5a:
14:43:e3:df:ff:fc:35:93:4b:cc:38:be:b4:a4:0b:
93:0a:ee:cc:e0:d5:f1:82:a7:dc:75:bf:ff:0d:db:
6f:70:4b:07:78:95:dc:9b:35:a8:1a:7e:5a:41:fb:
69:e1:0b:0b:07:1e:84:a6:7f:d2:98:a9:a4:a9:4b:
ae:f3:58:a6:0a:57:0e:64:e9:b2:3a:23:5e:97:63:
18:e5:20:5c:21:13:e5:18:a0:38:42:b2:d2:3a:e3:
d5:94:9a:55:23:ca:90:db:28:9d:2e:ab:7a:30:15:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D5:14:B7:3E:8B:2C:18:48:C0:32:16:ED:19:41:1D:79:FA:B9:3E
X509v3 Authority Key Identifier:
keyid:D9:AD:0D:73:8C:7A:F0:35:9A:06:30:36:54:16:44:0D:01:98:5B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Nc4x68DWaBjA2VBZEDQGYW6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e2:75:05:08:ed:26:6b:6e:cb:42:8b:b4:0a:dc:56:d4:24:
1d:7d:6e:05:01:c1:f9:6b:6c:98:93:3c:5f:1b:0e:56:a2:be:
3f:98:f1:ec:3a:0e:ed:b0:6a:a2:c5:77:c0:c6:62:07:a2:2b:
59:0f:c1:84:5b:7f:38:70:c0:3f:68:f1:83:56:42:33:f7:96:
51:34:60:93:8c:ba:6b:21:0c:47:aa:70:f1:6b:7b:2a:b9:c6:
21:b1:1b:c9:c4:14:f2:36:1a:0c:61:dd:bb:aa:f4:f8:5b:79:
e0:ee:66:b3:9f:a4:cd:5e:f8:7a:73:c3:6c:e1:c3:a2:d4:76:
df:77:40:e0:ce:18:42:cd:8e:cf:06:82:6b:8e:e0:c6:8a:3e:
a9:e7:7a:11:7b:0c:4f:c1:df:9b:56:b5:11:05:59:9b:cb:d4:
f9:7f:89:4f:9a:81:ab:67:ad:24:99:f3:13:9e:be:25:8f:33:
a1:75:0e:44:b9:28:bb:c1:e1:75:00:4b:b8:95:da:db:5b:6d:
e9:fc:b3:5f:60:94:92:f2:5f:34:20:1f:88:04:f7:83:6b:63:
ad:ed:1a:9e:46:3b:45:7f:0b:60:25:87:ae:85:e8:03:21:56:
4c:0e:f4:97:e9:18:93:a6:3e:6d:ce:9e:c1:90:63:ba:da:46:
8a:8f:c2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:22 2025 by rpki-client