Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier: ffRRzPGhcynLalNnguuPdCOX2CIJoFchZ2/rKqxgRiM=
Subject key identifier: 53:4B:28:4B:DC:F0:A2:F9:45:50:FE:CD:12:53:5A:48:DB:54:00:2D
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 01969D197BBF0DB67C3EE8AC757E4D5AEE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number: 0728
Signing time: Sun 04 May 2025 21:00:15 +0000
Manifest this update: Sun 04 May 2025 21:00:15 +0000
Manifest next update: Mon 05 May 2025 21:00:15 +0000
Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: i6RzDb6u+snXQaBABKwN5QKqBSpnVT1msRxcHWZz4YA=)
2: N6LVOXDpApHcakcmSkzmPFC6k_k.roa (hash: JBlMcthOLqVJmLIR25J/oCOwYGgINMhp1piHtiBmVPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:19:7b:bf:0d:b6:7c:3e:e8:ac:75:7e:4d:5a:ee:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: May 4 21:00:15 2025 GMT
Not After : May 5 21:00:15 2025 GMT
Subject: CN=534b284bdcf0a2f94550fecd12535a48db54002d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:55:ac:4d:b7:60:50:ea:35:c1:d6:08:d5:c5:
ce:8d:63:2a:ad:72:b0:5c:bf:aa:81:87:52:1c:74:
cf:5f:4d:1f:7a:1e:01:89:11:28:9e:21:83:f0:6a:
01:b5:43:a8:ef:df:65:ab:4b:4a:ea:90:02:fb:96:
3d:4a:77:e9:a6:74:d7:d5:b0:9b:80:dc:7a:20:ad:
7d:ec:b0:a9:a1:eb:94:8c:b6:36:df:59:53:e5:53:
3f:a0:73:32:ed:fb:85:de:a9:19:82:55:c1:ac:b8:
09:f7:8c:57:76:66:1d:67:39:e4:2c:9c:85:58:d2:
ad:ff:63:28:70:78:09:9c:7d:66:83:03:e6:61:26:
22:c6:73:09:3a:46:18:5e:0e:14:0c:9d:65:a1:62:
2d:65:07:3e:89:ce:db:b3:f5:9f:37:df:b1:66:87:
1d:70:07:98:79:26:6b:e9:e1:4f:05:4a:c6:2d:71:
f9:79:29:e0:11:7a:c6:f9:ca:64:d3:0b:d4:93:f5:
91:0a:c1:e2:56:b6:65:43:4c:71:27:52:fb:64:d8:
b9:b2:67:fd:10:b0:fa:bf:18:e6:7d:c6:9f:4f:8a:
25:0a:d0:2e:26:5a:55:dc:b7:30:c3:a7:52:81:53:
90:5d:9f:5d:c1:78:c2:49:fe:d5:cb:08:9b:04:8d:
8b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4B:28:4B:DC:F0:A2:F9:45:50:FE:CD:12:53:5A:48:DB:54:00:2D
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0a:19:43:d5:ee:2e:a8:a0:09:a5:01:74:15:fe:39:e1:18:
99:0c:d8:1d:ad:ee:9f:e1:df:89:50:84:d2:bb:6f:b8:ac:d1:
d3:91:11:51:1f:bb:f2:04:74:db:62:f0:ca:6a:58:19:f5:c3:
99:c0:32:ed:f5:e5:ff:bb:a7:a8:16:df:63:6c:2d:b3:59:dc:
e9:25:9d:fe:90:37:4e:3c:29:79:92:c0:7e:96:f6:06:c0:1e:
b7:aa:04:65:d6:b0:0f:d2:db:6a:57:8c:18:ef:04:27:d5:4d:
4b:b0:0c:1b:9a:86:4b:fe:e5:ad:96:72:d2:b9:dd:fb:59:61:
ba:5e:d3:17:d2:92:77:f9:00:b5:59:01:00:e1:93:68:90:40:
56:9d:13:27:2d:96:1d:67:88:44:8c:06:70:45:a3:43:e8:76:
39:da:7c:e9:e0:f8:aa:7c:a8:66:27:8c:7a:ef:f8:78:7d:61:
87:7f:56:80:0c:24:c7:69:a0:92:c5:85:bc:52:58:2c:2b:7e:
0a:df:73:b0:94:ee:c9:2c:5c:c5:45:63:af:2f:e6:c8:47:c1:
56:19:d5:fa:98:1e:ad:94:54:f5:77:61:fc:50:c5:f3:8d:f1:
89:fa:49:6a:01:5e:45:96:85:53:fb:dc:9e:a9:25:f6:7a:88:
67:ad:f7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:36:04 2025 by rpki-client