Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
File: 2xTnpr6Xzsb1vBpninbqbRYZwwY.mft (raw, json)
Hash identifier: gTTxeu3wo9T5y7JM3Vk31kaiAu9utsPFgZi0jsLr+r8=
Subject key identifier: D2:F4:87:09:2E:DA:4A:0D:4D:1D:7B:38:69:E5:04:47:FD:FB:CD:28
Authority key identifier: DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
Certificate issuer: /CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Certificate serial: 0196CC17813608F2457F5373F4761E9C977A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
Manifest number: 12FF
Signing time: Wed 14 May 2025 00:00:14 +0000
Manifest this update: Wed 14 May 2025 00:00:14 +0000
Manifest next update: Thu 15 May 2025 00:00:14 +0000
Files and hashes: 1: 2xTnpr6Xzsb1vBpninbqbRYZwwY.crl (hash: bffSp6krbK+N9zii3/VK6VKJbdntyLmAAJeOH+RzGZM=)
2: FjL5MqcK0dv0phSETNIP5t1SBWg.roa (hash: HghvVzu9hsO9wX3NaFq2EgUKtQhDl/MHwAlkrJlofBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:17:81:36:08:f2:45:7f:53:73:f4:76:1e:9c:97:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Validity
Not Before: May 14 00:00:14 2025 GMT
Not After : May 15 00:00:14 2025 GMT
Subject: CN=d2f487092eda4a0d4d1d7b3869e50447fdfbcd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:08:68:ab:fc:6c:e9:57:ef:87:af:e8:4b:
40:4a:1d:e0:01:22:ae:27:29:5e:e7:fd:f0:38:0c:
f4:74:55:0e:04:c6:2c:a7:2a:0c:29:cb:1a:07:8a:
12:a8:6d:e1:d0:bb:f2:52:2f:a3:37:33:f3:ba:a6:
42:33:20:86:3f:c0:24:cb:f8:91:3a:40:c4:0b:dc:
32:51:ac:2d:38:35:6c:69:84:01:fa:25:5e:59:b2:
c8:29:6e:4f:59:aa:9e:a3:09:31:ae:e5:98:93:f7:
e3:34:e7:90:ed:3d:77:9b:65:5b:cb:f4:06:29:1a:
be:64:16:32:dd:fa:a5:8e:ff:25:8b:8a:db:87:10:
c6:85:34:78:2c:5b:93:b6:b6:91:2a:05:5a:cc:40:
c9:d9:c6:d2:56:87:5d:c3:90:67:e3:48:73:ba:fa:
6a:de:f5:90:99:ab:09:6f:55:19:f4:3b:1f:57:5a:
20:8a:ef:38:6a:91:cd:7e:ef:e7:c4:bc:bf:a9:74:
8b:96:41:8e:e2:54:63:24:c5:e7:b9:e8:0f:10:4b:
e6:d1:5a:dd:13:db:ff:6e:d2:34:69:fc:bb:c9:b0:
9d:90:09:15:33:89:98:ee:76:d5:e7:e3:66:a5:e7:
df:d6:c7:7d:0c:8a:ac:59:72:69:b7:e6:50:86:e0:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F4:87:09:2E:DA:4A:0D:4D:1D:7B:38:69:E5:04:47:FD:FB:CD:28
X509v3 Authority Key Identifier:
keyid:DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d5:b1:5b:79:b3:d2:71:80:4d:c3:4c:7d:13:b2:2a:e2:71:
1c:e9:1d:bb:29:e7:e2:3a:f8:ee:ed:8b:de:cb:08:f1:94:3b:
33:82:37:a0:d9:65:8c:1a:c9:6c:be:4f:f0:96:f0:43:e8:04:
1a:a5:89:b3:98:30:e9:92:4c:7f:c0:ec:bc:22:9c:88:e3:35:
d7:99:44:10:d4:9b:ee:65:23:22:8b:9b:fb:f1:a4:2e:6a:36:
f5:38:d2:78:9b:18:2e:c4:1e:d7:e1:0a:75:29:f6:61:62:78:
ba:11:8f:ef:ea:7d:46:9a:21:3c:26:86:7d:f6:7d:f6:83:66:
bc:25:54:c3:66:db:91:eb:74:bf:08:ea:db:c9:d4:03:99:42:
85:c9:5f:3b:d1:93:44:c5:8f:5f:ea:27:a0:78:20:d2:58:cd:
4a:e1:f5:46:f8:5d:54:88:84:c0:c1:e3:70:8b:3b:06:81:01:
a6:09:f5:be:b9:4f:ff:de:90:85:ff:72:ff:47:a6:ce:47:c2:
41:4f:22:c5:15:a1:16:81:07:17:b9:ba:a7:56:76:9c:3a:5e:
0e:c3:ff:36:d4:ea:c5:9a:4a:09:8d:3f:90:cf:66:da:a0:f6:
eb:bd:17:b8:7e:1c:d6:70:09:d3:f1:a6:0f:7d:bf:01:82:e9:
89:50:d9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:00:43 2025 by rpki-client