Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
File: 2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json)
Hash identifier: axdc5XVmVx3wSG74lqiBsNoQdO5PhAkTWdJJ14VJUH4=
Subject key identifier: 22:C6:55:12:1E:2A:EE:09:D6:39:AA:8D:D2:77:45:02:E1:23:CE:3C
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial: 019650ED1AF65033DB90707A38DCA40479BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
Manifest number: 0DDF
Signing time: Sun 20 Apr 2025 02:00:38 +0000
Manifest this update: Sun 20 Apr 2025 02:00:38 +0000
Manifest next update: Mon 21 Apr 2025 02:00:38 +0000
Files and hashes: 1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: fD66OWf6fq3cms7E8yPFRrph6rlQ1boss5ZYAeOfhLQ=)
2: CYLgyzMsYi7lgn_Q5Gp7OFp3YLo.roa (hash: KpU4uZLnHzH71nuh4tR8vuJUqVXwmRrydoVr8tnF92Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:ed:1a:f6:50:33:db:90:70:7a:38:dc:a4:04:79:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Validity
Not Before: Apr 20 02:00:38 2025 GMT
Not After : Apr 21 02:00:38 2025 GMT
Subject: CN=22c655121e2aee09d639aa8dd2774502e123ce3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:6a:2e:98:b2:94:af:69:43:80:34:4f:19:
29:ae:eb:7a:7d:16:bc:25:52:55:dd:96:67:12:7e:
39:ae:0b:e7:0d:64:36:fb:ea:ba:83:89:8d:a5:32:
5c:6b:3a:af:0d:a8:51:33:04:6c:8a:f1:21:21:85:
3f:fe:39:99:72:bf:f2:45:50:e2:40:ff:a7:70:64:
74:72:37:fb:33:5b:b6:cb:c6:1d:67:31:08:61:8b:
14:79:98:e5:66:3f:5c:8b:00:e8:db:e2:73:61:ee:
cf:4a:8e:f6:48:a5:e7:85:17:7f:35:ec:af:b0:c8:
a9:b9:67:19:66:70:05:e3:87:f4:59:29:d4:f1:e0:
85:ac:0b:d1:d3:15:b2:e9:29:d4:9d:90:0b:9a:d4:
ab:6c:59:48:57:4c:e6:84:4d:1a:ec:ea:ff:b6:58:
19:08:d2:da:2f:0d:0f:6b:dc:ff:f4:05:88:90:68:
ed:fa:88:91:db:79:45:83:f4:3f:86:69:93:b7:e8:
4c:51:6a:80:a8:dd:15:42:04:fc:be:34:2a:f4:dc:
7c:af:61:f6:f9:cf:5f:b1:08:29:65:60:c9:68:43:
85:6d:30:c8:d9:0c:48:46:b0:0c:6a:8d:5e:23:05:
7f:1f:08:f0:7b:d7:36:5d:73:c4:20:04:8d:62:61:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C6:55:12:1E:2A:EE:09:D6:39:AA:8D:D2:77:45:02:E1:23:CE:3C
X509v3 Authority Key Identifier:
keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4b:55:bc:91:b4:fe:57:d0:ff:4f:85:d9:55:2a:70:fc:18:
32:44:ef:e7:1e:4e:90:c0:80:b2:ba:1f:ee:a3:1e:1e:1b:a6:
17:bd:83:78:45:d5:1a:87:bc:4e:7b:0c:49:b3:6c:d8:28:ad:
ef:a3:d8:c0:ff:f3:48:90:88:c1:1d:83:55:89:84:6a:6b:4e:
0b:e8:cc:04:44:77:35:27:75:17:20:cc:f8:c0:cc:b7:cc:85:
8d:74:67:4e:85:bf:9f:42:9b:a4:5e:1a:4b:98:53:26:0c:15:
e6:40:22:50:bc:e1:7e:8d:cd:9b:76:40:48:45:84:dc:23:00:
fa:57:10:07:d7:24:b3:b7:5a:f0:61:c7:c5:6c:d1:1a:77:a7:
8f:4c:3c:57:93:88:1d:44:86:75:58:59:a7:33:c1:32:94:14:
81:48:dd:bc:c8:6f:79:c5:ed:62:7d:b6:b4:0d:84:cf:b1:b6:
89:d4:fb:8e:05:11:cf:34:91:97:66:d5:fa:e9:5e:9a:34:37:
5f:bd:ba:4c:c4:1e:c3:dc:55:0f:17:ed:42:c4:4c:57:21:46:
ab:be:69:9f:31:ad:a2:3c:2a:01:cf:fe:f8:5d:4f:33:3e:25:
e6:d1:45:f2:1a:17:37:f3:bd:48:66:05:3d:4d:bf:17:01:fc:
05:72:a9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:28 2025 by rpki-client