Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
File: 2boyAk4sthQilREv5h9rG8NFe8s.mft (raw, json)
Hash identifier: P/An/0h1MY5z4MyBxN5oVdJZvKGw8L2Eay0gtXiOa4w=
Subject key identifier: D8:FF:3F:28:14:1F:39:29:98:15:33:C7:19:A1:34:18:27:11:9E:8C
Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
Certificate issuer: /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Certificate serial: 0196A19B105E00306B097B59C15E79571940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
Manifest number: 0225
Signing time: Mon 05 May 2025 18:00:16 +0000
Manifest this update: Mon 05 May 2025 18:00:16 +0000
Manifest next update: Tue 06 May 2025 18:00:16 +0000
Files and hashes: 1: 2boyAk4sthQilREv5h9rG8NFe8s.crl (hash: 3d6PpCLSGGbwDqD3tsq2vSvpkaE5hB1Os5dZpn6On90=)
2: AS5xBgzbP5q0xASJOg9vtSBeqlA.roa (hash: 1nXAgs4lTrviV/sBqRN0L9YKe+PpItQfWozhM88z0Os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:10:5e:00:30:6b:09:7b:59:c1:5e:79:57:19:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Validity
Not Before: May 5 18:00:16 2025 GMT
Not After : May 6 18:00:16 2025 GMT
Subject: CN=d8ff3f28141f3929981533c719a1341827119e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:40:88:47:9c:20:87:83:d9:b1:fa:26:c0:
00:34:e0:67:94:04:1b:16:76:65:ef:6d:ab:51:bc:
7e:49:3c:70:92:7b:db:29:0c:32:5d:e5:6f:5d:3e:
4c:82:75:98:2d:fb:80:24:be:13:70:52:e5:8e:da:
af:ac:d8:32:d0:5d:29:4b:f9:2b:b4:8f:b1:41:00:
4d:42:9e:95:9a:40:5d:41:3b:5c:1c:50:32:95:8a:
e3:04:50:c3:cf:53:6a:3b:22:5d:7e:0e:ea:dd:7f:
fc:17:cf:2b:f9:8f:ac:7c:86:0e:d4:0f:04:04:e1:
f0:c5:e1:a7:27:d4:3b:39:5c:21:ee:2d:48:19:0c:
db:9e:ab:01:44:5c:f6:08:d2:34:cd:e7:4e:4e:7e:
dd:be:22:04:ed:37:f4:f2:71:c5:20:35:4a:54:e7:
f4:a2:03:ca:b9:cf:8f:dc:51:c7:f0:37:84:a0:c4:
bd:54:bb:de:68:3e:ed:f8:06:fa:76:d3:fc:7b:7d:
e1:73:55:7f:36:0c:13:8d:69:e0:9a:57:ce:f4:08:
e3:70:ee:74:80:c8:d7:2a:ee:c3:19:d6:bc:b6:ee:
33:5b:fc:6e:3d:14:f2:b1:87:9f:22:61:c5:97:59:
65:7b:c2:cb:10:93:98:78:7d:a8:76:b0:1f:d7:16:
f0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FF:3F:28:14:1F:39:29:98:15:33:C7:19:A1:34:18:27:11:9E:8C
X509v3 Authority Key Identifier:
keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8e:9f:92:cf:ef:fb:23:bf:8a:86:86:78:42:3e:5e:21:27:
e9:d8:3f:01:da:ad:40:52:50:61:3c:12:3b:00:80:e3:91:b7:
a5:2f:66:cf:6f:36:66:a7:46:98:7a:68:1e:05:f2:7e:22:0e:
44:46:fb:0c:76:a5:92:fe:45:9a:d0:4c:71:66:aa:44:42:46:
52:dd:ba:c7:58:19:69:84:5c:86:5c:ed:2c:29:35:fe:2a:8c:
4a:68:c0:68:06:48:59:e5:93:ed:e8:c3:af:66:93:66:d3:de:
39:ed:4f:64:46:ef:f6:d8:3e:83:70:ea:3b:91:f6:e5:fa:3a:
34:b8:f4:71:47:4a:91:18:cb:4a:42:4f:f2:ef:e3:a2:dc:2d:
d4:6a:5d:31:6e:a3:9b:b3:1b:c2:9c:4f:f7:4a:e6:18:ae:34:
3f:de:cf:09:8b:c7:2a:9f:ed:d4:06:08:85:73:03:bc:02:1f:
5d:b2:db:20:c8:39:1f:46:36:cd:0c:ce:01:5e:c5:16:62:b0:
42:14:31:49:21:4a:34:e8:99:73:5f:8a:e6:5b:80:a4:b3:ec:
3b:06:76:2e:1f:57:12:71:03:63:e1:39:a6:9e:a9:ea:28:94:
8f:d4:ef:76:6f:9f:b4:2c:66:d1:2e:3b:f9:a9:a7:56:0f:e3:
36:e7:3f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:23:42 2025 by rpki-client