Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
File: 2Znl1k5EsXM8YXNzN86CtKaUOkY.mft (raw, json)
Hash identifier: GAhgDmyMnhWI5jImcvkNAq36yYtGU67n3cRRioTe9xU=
Subject key identifier: D4:59:35:0A:A1:1D:66:EE:89:BE:F8:EE:C1:9B:D4:56:6C:9C:CF:20
Authority key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
Certificate issuer: /CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Certificate serial: 0196B145B20A6CB2A41364F79E347890A114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
Manifest number: 036C
Signing time: Thu 08 May 2025 19:00:56 +0000
Manifest this update: Thu 08 May 2025 19:00:56 +0000
Manifest next update: Fri 09 May 2025 19:00:56 +0000
Files and hashes: 1: 2Znl1k5EsXM8YXNzN86CtKaUOkY.crl (hash: pSpE/h9qXnBiyNHweEzUJ1zpZbwA39nOoEsr//hu5nI=)
2: xandp5YxydZR7wlTUWsPRookRQc.roa (hash: TvsdUKw2eDJNV/EQUTSOnGCjImCSLoPXA7kEvQkSjo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:45:b2:0a:6c:b2:a4:13:64:f7:9e:34:78:90:a1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Validity
Not Before: May 8 19:00:56 2025 GMT
Not After : May 9 19:00:56 2025 GMT
Subject: CN=d459350aa11d66ee89bef8eec19bd4566c9ccf20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:30:37:50:8a:33:6e:d2:a7:76:0d:5c:95:36:
af:0e:d3:a2:37:18:18:31:33:3b:06:b9:63:41:50:
2d:a8:e9:7a:6d:9a:e4:68:c0:d7:eb:14:e1:8b:8e:
94:79:5a:e1:3a:6b:89:d9:16:e1:25:9e:8a:3c:b7:
cd:c1:ed:a7:92:90:1e:69:8f:3e:5b:03:58:0e:75:
e3:b4:f9:1b:7c:73:40:34:2b:07:ff:62:bf:16:65:
b0:95:c8:65:99:01:53:11:33:0a:4c:30:61:90:5c:
95:16:2c:68:7e:37:c1:38:9b:5f:10:29:ae:82:87:
44:40:b0:eb:38:94:a8:51:55:15:f2:19:88:cb:16:
fe:a5:71:a8:9b:08:a5:09:ab:04:1b:92:35:d6:f6:
47:00:0b:03:b2:12:f1:50:96:5a:e0:dc:33:d8:bf:
b5:3b:7b:84:7a:05:4e:70:92:88:6b:b1:d5:28:1f:
f6:29:76:1c:4b:ee:7b:7b:7a:64:ec:48:cf:dc:86:
ee:d0:56:36:21:8f:4f:b9:2f:4b:6f:24:3d:52:cc:
22:26:7c:eb:6b:63:dc:ae:ac:af:19:47:b0:a1:21:
ec:1b:2e:8f:16:e9:37:96:e4:4c:9e:95:bc:9a:84:
07:d2:fe:f0:86:23:39:6a:6a:37:51:bb:07:21:49:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:59:35:0A:A1:1D:66:EE:89:BE:F8:EE:C1:9B:D4:56:6C:9C:CF:20
X509v3 Authority Key Identifier:
keyid:D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7d:c1:51:f7:f2:4c:cd:c2:30:87:5b:72:19:0f:65:e9:e2:
a7:06:5c:a8:4d:ed:26:1e:0a:b6:06:0d:a0:39:dc:c1:72:46:
af:5d:89:52:03:44:8c:39:81:90:cb:e3:ae:42:34:93:43:3f:
9a:18:29:a6:b9:c6:af:f4:09:66:cb:0c:56:5b:a1:6d:e0:a2:
f0:dd:b5:e7:b5:7a:33:bc:65:8b:8b:83:31:89:0b:3d:bd:61:
0f:0b:b2:0a:f8:1f:4d:aa:e6:7a:50:23:81:1b:50:f4:42:60:
d5:f4:db:72:b5:c0:d0:81:e1:ae:58:bf:83:0c:c0:7f:0c:72:
63:7d:ca:7c:69:d2:fc:31:e8:af:d0:c6:8a:98:27:d2:b2:23:
65:2f:e3:dd:8a:1e:79:f9:00:61:75:52:27:a7:63:8c:93:1e:
29:a7:f1:8a:4e:5b:0d:4d:f1:fe:1c:64:d8:f4:b1:5d:24:3e:
77:1a:f0:27:d9:6e:e7:8f:f0:13:d6:30:72:31:cd:05:6c:c9:
ff:bd:0d:cb:5f:59:c9:a1:a4:88:8b:24:67:98:5c:75:dc:28:
56:4e:97:b8:4c:d9:c8:bd:7f:59:71:0b:56:66:dd:46:c8:7d:
23:4f:71:70:fe:fa:63:12:b4:a4:e0:cb:94:02:d3:86:ef:8d:
09:25:e5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:59:24 2025 by rpki-client