Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
File: 2J9hzEBpw2NiRF2BiJEDQLble6U.mft (raw, json)
Hash identifier: J/KNDIc0A8q5Lg9HDXNRFto7GQB9onluXRPMFYPIiW8=
Subject key identifier: 34:3C:02:45:48:CB:72:B2:10:92:34:60:18:9B:87:9D:E4:16:D8:03
Authority key identifier: D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
Certificate issuer: /CN=d89f61cc4069c36362445d8188910340b6e57ba5
Certificate serial: 0196A088CEC7E298F9EFA404AFF371D840EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
Manifest number: 0AD4
Signing time: Mon 05 May 2025 13:00:42 +0000
Manifest this update: Mon 05 May 2025 13:00:42 +0000
Manifest next update: Tue 06 May 2025 13:00:42 +0000
Files and hashes: 1: 2J9hzEBpw2NiRF2BiJEDQLble6U.crl (hash: 8uUmX5hWUMbkrCXt16qtWH2HdAtm/gYNBobOKElgAzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:ce:c7:e2:98:f9:ef:a4:04:af:f3:71:d8:40:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89f61cc4069c36362445d8188910340b6e57ba5
Validity
Not Before: May 5 13:00:42 2025 GMT
Not After : May 6 13:00:42 2025 GMT
Subject: CN=343c024548cb72b210923460189b879de416d803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:50:b4:43:b4:03:e6:47:a6:05:e6:75:33:e2:
4d:26:b4:f5:1f:d8:ec:96:63:c4:e0:7b:c1:84:f3:
ba:6f:29:c8:65:99:a0:77:26:62:3e:ba:b8:fc:1b:
4c:c0:e9:15:8c:ab:93:61:0c:86:54:80:d6:87:f2:
a0:bc:5d:68:81:5b:07:d7:b8:20:e1:22:bc:c7:dc:
08:10:96:ab:b9:ef:08:b2:ee:de:f5:49:dc:b8:f6:
85:bb:56:e3:7b:00:3d:c9:01:a5:e5:d2:58:e7:c6:
d4:de:08:86:de:c9:31:fb:a4:70:e8:09:31:11:f2:
82:45:c5:ae:45:ff:1b:8e:5b:0f:c0:90:2b:39:d5:
00:a8:01:ac:f8:bb:93:28:58:f3:24:82:d2:e7:d6:
9a:2c:c8:b3:43:0a:22:de:42:d1:2d:5b:38:61:98:
a1:6d:8b:e4:b6:7b:d7:b2:a7:75:c3:7f:4b:94:dc:
40:91:4f:8b:e8:b4:60:50:93:50:d2:96:8f:6c:33:
73:21:99:5d:5c:2a:56:7a:2c:bf:17:1d:7b:b3:e7:
f2:b1:74:be:06:58:aa:68:e8:1a:69:f4:05:3c:27:
49:d0:7a:2d:0f:47:a5:31:ce:73:ab:b8:79:da:0a:
6f:6c:d4:2b:46:c9:60:a8:6b:94:39:42:23:79:19:
40:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3C:02:45:48:CB:72:B2:10:92:34:60:18:9B:87:9D:E4:16:D8:03
X509v3 Authority Key Identifier:
keyid:D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ba:c5:ad:56:3a:ab:22:21:b1:f9:7f:8e:fb:9f:da:61:d2:
f9:80:dd:75:34:14:db:68:9b:e2:a3:34:3f:84:3e:8d:c3:b6:
bc:71:fe:16:2e:c3:93:7a:e3:53:3a:00:7b:ce:f5:f4:27:b4:
95:29:eb:69:3f:dc:5f:f6:3d:7c:ee:aa:e8:ae:50:cf:84:6d:
74:65:3c:39:7e:f4:87:46:d9:13:ad:90:f3:9b:c5:ec:f5:79:
89:d2:af:b1:82:4e:40:32:8a:a8:8d:cb:e1:7d:3d:a5:44:18:
72:12:69:f4:5a:1f:94:1a:79:ea:af:5b:2d:8b:de:aa:55:e7:
86:e7:dc:e1:e6:e1:a6:8d:6d:5b:90:1b:f8:ce:f8:d8:17:37:
06:d1:43:d2:ec:ca:a1:36:a0:74:c0:0a:14:3b:b7:ae:f4:e4:
ef:74:e0:82:23:3d:33:54:c4:c7:cf:a8:26:dc:0b:d3:cd:b7:
c5:87:61:99:85:8b:16:cb:fa:05:b0:b1:2a:d1:21:8b:7b:d7:
01:d1:f8:d1:e9:07:f4:e4:7c:17:f5:ba:5c:9e:5e:22:d3:30:
0c:7b:15:14:4a:00:b4:be:20:63:cb:67:e4:8e:9c:b5:ba:3a:
f0:d1:ea:b3:49:3f:31:bc:bf:74:69:79:70:c4:43:ea:bf:22:
83:a8:bd:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagiM7H4pj576QEr/Nx2EDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OWY2MWNjNDA2OWMzNjM2MjQ0NWQ4MTg4OTEwMzQwYjZl
NTdiYTUwHhcNMjUwNTA1MTMwMDQyWhcNMjUwNTA2MTMwMDQyWjAzMTEwLwYDVQQD
EygzNDNjMDI0NTQ4Y2I3MmIyMTA5MjM0NjAxODliODc5ZGU0MTZkODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVC0Q7QD5kemBeZ1M+JNJrT1H9js
lmPE4HvBhPO6bynIZZmgdyZiPrq4/BtMwOkVjKuTYQyGVIDWh/KgvF1ogVsH17gg
4SK8x9wIEJarue8Isu7e9UncuPaFu1bjewA9yQGl5dJY58bU3giG3skx+6Rw6Akx
EfKCRcWuRf8bjlsPwJArOdUAqAGs+LuTKFjzJILS59aaLMizQwoi3kLRLVs4YZih
bYvktnvXsqd1w39LlNxAkU+L6LRgUJNQ0paPbDNzIZldXCpWeiy/Fx17s+fysXS+
BliqaOgaafQFPCdJ0HotD0elMc5zq7h52gpvbNQrRslgqGuUOUIjeRlAlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQ8AkVIy3KyEJI0YBibh53kFtgDMB8GA1UdIwQY
MBaAFNifYcxAacNjYkRdgYiRA0C25XulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMko5aHpFQnB3Mk5pUkYyQmlKRURRTGJsZTZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zOTRmMGUtZDY3Zi00NTY2LWI3Njkt
ZWEzMmMyOGQzODdjLzEvMko5aHpFQnB3Mk5pUkYyQmlKRURRTGJsZTZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8zOTRmMGUtZDY3Zi00NTY2LWI3NjktZWEzMmMyOGQzODdj
LzEvMko5aHpFQnB3Mk5pUkYyQmlKRURRTGJsZTZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLrFrVY6
qyIhsfl/jvuf2mHS+YDddTQU22ib4qM0P4Q+jcO2vHH+Fi7Dk3rjUzoAe8719Ce0
lSnraT/cX/Y9fO6q6K5Qz4RtdGU8OX70h0bZE62Q85vF7PV5idKvsYJOQDKKqI3L
4X09pUQYchJp9FoflBp56q9bLYveqlXnhufc4ebhpo1tW5Ab+M742Bc3BtFD0uzK
oTagdMAKFDu3rvTk73TggiM9M1TEx8+oJtwL0823xYdhmYWLFsv6BbCxKtEhi3vX
AdH40ekH9OR8F/W6XJ5eItMwDHsVFEoAtL4gY8tn5I6ctbo68NHqs0k/Mby/dGl5
cMRD6r8ig6i9jQ==
-----END CERTIFICATE-----
Generated at Mon May 5 21:32:18 2025 by rpki-client