Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
File: l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft (raw, json)
Hash identifier: Wod2EqLhD+IOt5dDVio9tLUehEBTUB+YWqwgRIuHFUE=
Subject key identifier: 4A:B7:2F:D5:ED:85:B6:7B:C1:2E:30:E0:45:CB:CC:3C:3B:AC:5B:E3
Authority key identifier: 97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
Certificate issuer: /CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Certificate serial: 01965236D10C0059A17E08481242FE8ABC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
Manifest number: 0BDE
Signing time: Sun 20 Apr 2025 08:00:46 +0000
Manifest this update: Sun 20 Apr 2025 08:00:46 +0000
Manifest next update: Mon 21 Apr 2025 08:00:46 +0000
Files and hashes: 1: l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl (hash: DEVcqvEMrh9R8v8A+LMpxWo+mNR05Rh00CWUeR/IYds=)
2: rAptMRvSUdwv73c1hrV9bfbr3Yk.roa (hash: M82hA2K7N0hc5dPJhXNevznbaSP5bAh4nu7+zgBVgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:d1:0c:00:59:a1:7e:08:48:12:42:fe:8a:bc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Validity
Not Before: Apr 20 08:00:46 2025 GMT
Not After : Apr 21 08:00:46 2025 GMT
Subject: CN=4ab72fd5ed85b67bc12e30e045cbcc3c3bac5be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:7d:a9:2a:37:cd:3c:e2:9d:1f:a8:fe:38:
bd:cf:dc:9d:4b:7f:13:cc:ea:73:1b:18:97:c8:f5:
93:43:b0:f1:fb:3b:dd:5a:80:99:f3:db:e8:19:35:
c1:41:dc:00:44:be:be:2c:fa:e2:65:b6:00:b1:55:
f5:b7:94:0e:0f:64:75:6b:4b:92:87:8f:d7:44:84:
9c:08:35:a9:e2:08:1c:f6:08:f8:1c:be:c9:d4:89:
56:de:7b:b2:e3:7a:fb:97:5b:50:59:fd:9a:64:ad:
d4:3c:fc:6d:4e:a7:dc:2b:8b:84:14:a2:35:b3:ac:
97:6d:37:0e:ba:d0:0f:38:3b:e2:ec:48:04:21:fb:
ff:81:ca:74:3e:a2:8c:e6:f6:47:62:f6:af:d9:56:
96:22:c0:c5:6c:54:d1:30:46:27:07:9a:aa:dd:e0:
69:95:e2:99:0e:f5:be:b8:f9:66:98:09:3c:af:a6:
82:0c:28:1b:85:bf:25:51:ee:10:47:9b:35:9f:8e:
bf:34:5e:4d:41:61:f1:4b:42:36:04:d3:84:15:07:
04:b5:09:f7:67:91:86:b2:2b:80:ad:c8:81:79:82:
70:f9:91:b5:87:97:ec:a7:20:91:3e:22:39:26:ec:
1b:dc:9b:f4:bd:6a:7c:92:a8:85:17:8a:aa:45:23:
4e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B7:2F:D5:ED:85:B6:7B:C1:2E:30:E0:45:CB:CC:3C:3B:AC:5B:E3
X509v3 Authority Key Identifier:
keyid:97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cf:08:f1:62:9f:91:6c:ab:20:98:90:6d:e8:56:69:64:16:
60:2c:48:0b:9b:1b:99:40:ec:91:4d:7d:41:d3:a1:2d:e7:58:
e5:8d:ad:75:13:9b:f4:54:a2:e8:02:10:33:28:74:64:cb:c5:
00:b9:30:05:3a:b0:70:e6:e0:0a:05:a6:54:0c:9b:38:6b:df:
ef:ed:4e:17:44:cb:c3:73:60:db:d5:8c:dd:93:c4:01:3f:bb:
34:ca:40:4b:02:71:bb:3c:cc:4b:17:51:8b:8d:cf:91:2c:cd:
67:2d:ff:55:fb:72:d7:d3:f2:fb:40:3f:b8:33:b7:79:91:24:
65:be:3f:d3:aa:76:06:5a:d6:30:4c:5c:69:0d:cc:f6:53:94:
e7:8e:76:03:be:59:cc:2f:5d:ca:02:bc:e5:38:81:83:87:3a:
70:1a:6a:13:07:07:3a:26:36:00:59:1d:f9:5e:9e:d3:cc:48:
80:38:41:2e:70:49:6e:ae:06:d9:33:71:83:fd:64:df:b0:66:
19:60:6c:ac:23:b0:b3:e2:a2:4c:70:8f:55:35:8f:fc:ad:38:
a6:17:92:4b:d2:28:63:59:5f:8a:d6:12:9a:f8:f5:c5:56:4e:
a8:d4:02:23:4f:97:17:90:1b:9f:3c:ba:b6:db:31:58:81:23:
99:5c:08:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:50 2025 by rpki-client