Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier: y8IXO8PIIvJD9lp17IkVFZWGccrTMr7QnbWuC6ORw0o=
Subject key identifier: E0:D6:54:AE:CC:7F:1D:05:2E:BC:BD:DC:C6:54:26:A1:DA:C8:90:F9
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 0196BE5C7A8EBFBA75C59CD1BE2D509A9C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number: 0B13
Signing time: Sun 11 May 2025 08:00:53 +0000
Manifest this update: Sun 11 May 2025 08:00:53 +0000
Manifest next update: Mon 12 May 2025 08:00:53 +0000
Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: P7Jr2e+3CQ57K+J/UpiLLjzUvNVj37Fu4m5IC+UhVA8=)
2: 9Rv9UA6xqHbqOVDX3M_ewENA274.roa (hash: CV9IQyD4yDSrfmV6gwR5PLHm4BEjsLgc7yXn2cWM6fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:7a:8e:bf:ba:75:c5:9c:d1:be:2d:50:9a:9c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: May 11 08:00:53 2025 GMT
Not After : May 12 08:00:53 2025 GMT
Subject: CN=e0d654aecc7f1d052ebcbddcc65426a1dac890f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:fc:93:f2:35:f0:ea:0d:18:99:cc:c9:78:
57:a3:af:ea:76:fc:1d:87:64:a4:c9:89:f8:4b:16:
d4:d0:0d:6c:9e:fc:27:a6:c2:a6:4c:04:70:8d:bd:
fe:75:98:5e:8b:ba:7c:f8:00:0d:4e:6b:d8:4c:ef:
d0:c8:f1:15:33:86:d2:94:ed:e7:c6:72:27:69:60:
f1:d9:f6:52:74:72:b7:57:c9:0d:4d:30:59:69:f8:
2a:be:68:20:2a:4a:f6:a3:1b:f1:24:4f:de:b4:7b:
dd:ba:b2:31:5f:bc:06:0f:d4:fb:2a:66:97:8c:96:
09:78:c9:ee:8e:c7:e5:be:d3:f4:0c:30:47:db:94:
ef:5c:0d:03:4b:63:d0:3b:bf:a5:d9:5e:4b:b3:80:
33:ab:de:ac:0a:66:46:7c:ea:39:84:33:71:e3:19:
c6:4f:8a:5f:b9:cd:35:bb:90:36:a4:72:53:ee:f8:
41:a8:21:33:26:d1:fb:3b:df:cb:e9:0b:cf:54:19:
42:3d:16:dd:86:f4:e7:ba:cb:aa:5d:79:45:65:b3:
81:43:5d:c6:c4:fa:ce:bf:6d:93:7e:30:86:76:ee:
0e:36:ee:e7:54:03:6b:30:95:97:dd:a4:9b:da:f1:
ab:6e:b4:8e:9f:ce:97:80:7c:a1:af:4d:00:36:5a:
0e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D6:54:AE:CC:7F:1D:05:2E:BC:BD:DC:C6:54:26:A1:DA:C8:90:F9
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:65:76:3b:21:12:09:c3:6b:03:3e:ee:28:95:de:ab:46:b6:
e6:0f:55:2f:bd:e9:0e:ef:e4:fc:82:bf:41:ea:ca:72:d1:17:
72:b3:be:ad:0a:36:64:ab:f3:c2:5c:e4:6d:b5:5e:af:06:42:
90:64:9f:d0:fc:30:84:cc:ad:30:8b:ed:fb:31:2e:89:84:4a:
44:63:17:8e:e5:1f:21:b2:a3:d5:d2:47:78:03:a8:e7:38:fe:
83:2e:d6:5b:83:fc:ed:fb:20:93:aa:ab:f1:ee:06:c4:80:48:
53:b7:32:79:50:96:13:8a:f9:41:56:26:7f:ba:a6:55:48:27:
3d:d7:44:7d:7b:1e:72:c9:59:88:9a:87:b5:22:b2:25:ba:86:
4f:ba:a3:f5:ee:0c:3a:47:7b:ae:ac:36:4a:c4:a8:68:71:65:
21:5e:dc:1c:f2:49:11:cf:eb:ac:7e:db:dd:95:8f:2c:aa:06:
28:e2:83:bd:be:06:85:6c:09:6e:f6:00:42:cd:e6:8c:a1:7f:
ff:39:18:a0:aa:8f:3b:d9:d7:e7:53:4b:81:a9:78:c1:97:eb:
e0:51:c3:27:fd:41:b5:1e:32:91:62:e3:b1:c0:5c:a5:71:e5:
34:c6:fb:b6:75:29:a0:c7:6e:46:92:c4:a7:02:bb:fb:df:45:
3b:8d:c1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:05:57 2025 by rpki-client