Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
File: 2JFWCWVvCPeijSS3xLqbY5ygsAk.mft (raw, json)
Hash identifier: 7Co36jb8/Pxbh6+WG+82g0ZbYpNq8rqMbroKKvP4Isc=
Subject key identifier: 40:EF:D8:8A:5F:F2:F5:71:57:B4:95:CC:DB:01:BE:4A:70:CA:EC:13
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial: 0196CF18F10A7DB857D3EA28AB759D0C35FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
Manifest number: 0FA2
Signing time: Wed 14 May 2025 14:00:40 +0000
Manifest this update: Wed 14 May 2025 14:00:40 +0000
Manifest next update: Thu 15 May 2025 14:00:40 +0000
Files and hashes: 1: 2JFWCWVvCPeijSS3xLqbY5ygsAk.crl (hash: EsJprp5m8SDszTSMx0gKZ7SqNWyKmyxb67yO2r63ksY=)
2: Wi60RxjWIlDPb3_szVmN-Gl0qoE.roa (hash: IAjzw2r7E4lx4vW0Aq4BO6OsCC7MgvRuI1axCmQxfb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:18:f1:0a:7d:b8:57:d3:ea:28:ab:75:9d:0c:35:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Validity
Not Before: May 14 14:00:40 2025 GMT
Not After : May 15 14:00:40 2025 GMT
Subject: CN=40efd88a5ff2f57157b495ccdb01be4a70caec13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:73:22:75:f9:f5:67:3d:34:2d:c2:55:d4:f1:
a0:40:eb:86:c3:48:9f:71:8c:d9:0d:71:c5:94:dd:
6f:5f:db:cf:07:be:63:85:7e:ba:0f:1c:99:fb:6b:
2a:b8:a6:dc:d4:69:f8:23:95:4a:94:f8:e2:67:e7:
40:0f:dc:9a:cc:41:53:70:b2:93:5c:7d:b3:ce:41:
d3:e5:f7:a3:db:9f:82:8e:1a:c1:13:97:89:f8:07:
e3:5d:0d:6c:6f:b6:72:bf:32:22:73:af:b7:a8:16:
b0:bb:22:8e:d8:9d:56:59:55:37:14:98:2e:93:1c:
6d:53:0b:ee:f6:d0:64:40:97:d6:d0:0c:92:de:ca:
71:19:51:f7:42:28:2d:d8:6b:ff:d3:3f:e9:dd:1f:
67:99:04:54:ef:4c:5b:ba:9d:dd:3c:c2:17:5f:4b:
3a:a1:16:a2:87:59:2c:b4:84:ca:ed:4e:5c:cf:20:
04:17:9e:37:b9:aa:07:1a:18:a0:c0:e5:a7:4e:f2:
f0:99:93:b1:01:28:a5:45:ee:5b:0a:eb:3b:a4:bc:
0f:25:37:4d:72:03:79:c8:94:0e:9c:b8:89:93:16:
3d:23:1b:3d:ef:2a:e2:33:19:2e:ed:10:29:5c:84:
30:fa:2c:8f:c4:ff:bd:38:60:c9:a7:de:e3:78:42:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EF:D8:8A:5F:F2:F5:71:57:B4:95:CC:DB:01:BE:4A:70:CA:EC:13
X509v3 Authority Key Identifier:
keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:57:34:d4:a1:3f:fb:f3:72:39:4b:63:c3:73:1a:8b:cc:46:
d0:e7:61:49:eb:f1:77:25:13:e3:43:c3:89:dd:cd:89:34:17:
59:f3:fd:c2:4c:21:5f:55:d5:b5:19:d2:26:52:0e:4a:d4:46:
b9:9e:4c:6a:7d:f0:59:cb:e8:28:4e:db:99:82:17:09:a6:25:
4d:ac:b6:6d:97:4a:61:bc:b6:6b:ae:e5:75:91:7a:f2:1a:2c:
72:30:53:4c:2b:15:29:bf:37:2b:4c:7f:5c:b1:7e:f9:84:ec:
b3:1f:4f:51:e5:b0:83:ab:92:76:8b:50:6c:ef:f2:71:a2:c4:
7b:ea:4e:99:1b:56:e4:17:2a:55:5d:ed:02:30:1d:4b:ba:74:
5d:a9:d1:73:f3:1a:6e:0f:d5:45:f3:5f:72:9a:94:bc:36:70:
46:74:e8:19:ee:17:8b:01:3a:26:0e:02:7d:21:23:65:5c:c2:
2a:90:2f:b1:4f:e2:ee:69:82:61:3d:da:b5:47:bf:5c:38:d3:
e9:15:00:a7:77:1b:9e:7d:e3:cc:e8:61:4c:04:3d:6f:73:64:
1c:9f:fb:d1:aa:74:98:06:c5:b9:09:89:22:58:d2:5d:ea:97:
d2:3c:e8:fc:01:46:08:3a:93:60:58:ab:cf:35:f8:18:22:f1:
cf:0c:7e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:52:53 2025 by rpki-client