Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
File: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft (raw, json)
Hash identifier: WSSctYCvrSt1Y9eioOSGdqQwnnJUlBCxMeQfKn22Kaw=
Subject key identifier: D1:21:55:78:3B:02:17:87:36:7F:6B:D9:62:D1:C2:12:ED:AA:E7:12
Authority key identifier: D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
Certificate issuer: /CN=d977120937500eb46696428962e510e02c348e6c
Certificate serial: 0196BF00F7DA762C4CD8C2DBC3218AEC44B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
Manifest number: 0C1C
Signing time: Sun 11 May 2025 11:00:33 +0000
Manifest this update: Sun 11 May 2025 11:00:33 +0000
Manifest next update: Mon 12 May 2025 11:00:33 +0000
Files and hashes: 1: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl (hash: FPUHK/EXsCjoJwTxOdx6j28WfjwpOH4HO0KC/H0dyMQ=)
2: ABCdWHfeRuB4x9Cfjqm_Nsu7Efc.roa (hash: bp8ugvHYl4CGZn0o8RUyCE5vXn4l+aGFTzhE2reh5sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:f7:da:76:2c:4c:d8:c2:db:c3:21:8a:ec:44:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d977120937500eb46696428962e510e02c348e6c
Validity
Not Before: May 11 11:00:33 2025 GMT
Not After : May 12 11:00:33 2025 GMT
Subject: CN=d12155783b021787367f6bd962d1c212edaae712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:6a:54:7c:1d:89:22:b5:1c:46:6c:74:2d:
5d:97:93:53:15:ed:cf:26:94:68:fb:33:23:b7:9e:
56:da:e9:e0:da:b9:39:51:6c:10:ec:89:42:08:a4:
f1:3c:88:f2:a6:c2:43:c4:05:7e:5e:4e:b8:cc:1a:
04:3a:d6:48:99:0b:28:bf:e7:40:44:79:c5:6f:c9:
41:7b:49:62:9e:ad:be:7e:6b:ec:83:aa:4a:a0:37:
44:b7:f7:49:0e:00:83:44:e3:f6:97:a7:10:78:ff:
6c:d3:0d:24:a9:70:a5:ac:44:83:9e:ed:a1:f9:0e:
49:7b:db:d3:2d:35:41:22:b7:02:52:00:88:f0:53:
a7:a9:e7:bf:10:08:60:10:16:a8:79:4b:a7:34:78:
cf:89:32:35:33:de:b6:ae:ca:14:ac:4d:40:ae:a8:
30:80:6c:3d:c2:e7:1a:97:68:98:ec:4b:93:b9:4f:
29:d5:25:a7:55:3b:71:d7:24:16:b9:8e:00:24:b5:
fe:35:34:91:3b:10:8f:50:77:e9:50:ee:c6:4c:b7:
1f:e3:1b:03:f2:b3:ca:01:66:ec:ee:9e:73:4a:09:
7c:ee:62:09:94:c1:92:ec:9b:89:59:fe:8b:e3:7f:
19:b9:5c:c0:a7:1c:6e:32:15:2f:9d:ff:54:6b:f3:
3f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:21:55:78:3B:02:17:87:36:7F:6B:D9:62:D1:C2:12:ED:AA:E7:12
X509v3 Authority Key Identifier:
keyid:D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:29:49:45:c0:26:c8:0d:dd:60:87:42:e8:39:34:cc:15:69:
a7:0c:03:f0:34:4b:72:e6:16:84:91:4d:0c:86:4b:cb:4e:63:
f1:93:cf:6c:eb:a0:9c:df:f2:36:bb:86:ba:2a:7a:2d:75:7f:
d8:b9:17:3b:7c:8e:47:18:c8:91:99:7e:92:5d:27:4f:8d:62:
4f:9c:65:a6:8b:38:0e:cc:17:75:30:8c:f8:cb:04:97:5c:1e:
ad:3a:70:e4:eb:80:5c:bf:7e:c5:4e:36:59:ee:98:d4:1b:14:
0a:fc:38:18:4a:28:6f:e7:fb:0f:c9:31:dc:54:35:0a:33:e4:
6b:fb:7f:9e:48:4f:f5:2c:2c:15:2d:6d:3e:df:34:f8:30:cd:
ff:0d:48:1c:e5:9c:a0:a3:80:2f:88:51:16:01:7c:ce:3c:8b:
88:2a:20:a3:66:76:78:67:94:f1:b4:7c:dc:f2:38:2b:9f:28:
46:ab:b2:9a:6a:7f:a2:2b:ae:eb:36:9a:bb:1d:a5:12:1b:48:
e3:00:99:8d:db:4d:97:b3:bd:bc:28:60:32:76:7b:a7:7b:d8:
eb:4d:0b:54:b9:d3:52:47:09:2f:ac:3d:66:68:e7:93:a4:55:
82:52:44:37:44:a3:27:32:93:5d:7f:d3:9d:3a:c8:1a:31:81:
ba:b3:88:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:07:35 2025 by rpki-client