Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
File: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft (raw, json)
Hash identifier: T4U4LAawDtIn32MI5JPklBgN8SqUlxb/NtsUpCBIloE=
Subject key identifier: 9C:83:22:C1:70:BE:31:A0:16:9A:65:A1:23:C5:A4:66:7F:8E:98:51
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Certificate issuer: /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial: 0196C20226B7225F285813930955C177A987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
Manifest number: 1012
Signing time: Mon 12 May 2025 01:00:42 +0000
Manifest this update: Mon 12 May 2025 01:00:42 +0000
Manifest next update: Tue 13 May 2025 01:00:42 +0000
Files and hashes: 1: 2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl (hash: W9yy4Rxfyh5wubi/P47Y9NjRgcmegXUSpxZFMKL1PI4=)
2: 2e0Kdd38yk-OSrzXbewf8f0u7Hs.roa (hash: h6MTPJcLMkfrB1kWDTEOldnlj7IXiEuYpsdekwYMKvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:26:b7:22:5f:28:58:13:93:09:55:c1:77:a9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Validity
Not Before: May 12 01:00:42 2025 GMT
Not After : May 13 01:00:42 2025 GMT
Subject: CN=9c8322c170be31a0169a65a123c5a4667f8e9851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7e:32:76:1b:fd:0b:60:62:f4:20:ad:7d:8c:
ac:c8:6e:1b:ee:ba:37:6f:16:63:5b:cb:fa:c1:1b:
0c:e9:be:75:e5:0a:0f:51:f4:a6:20:c4:b9:ac:50:
63:75:a0:45:b7:24:b5:0e:95:a2:71:c4:79:7c:49:
0c:46:be:43:b2:20:e7:be:c1:26:8a:53:0f:b0:e1:
9d:96:6d:91:c4:fb:c3:8b:5e:69:55:0a:c0:78:44:
0f:8a:da:bd:17:59:6a:ae:a2:81:6d:56:53:5c:a2:
03:25:23:08:0b:7f:10:42:f4:b4:34:15:91:4a:f9:
3b:80:3e:2e:ff:f9:89:80:4c:0a:ba:37:2d:58:17:
4e:ea:46:2a:b1:38:25:a5:cd:d8:1f:ed:9a:d6:77:
06:77:ff:18:12:2b:64:30:18:6a:53:82:82:47:4c:
b5:29:86:e9:fe:c9:5a:38:d1:54:7a:06:e0:25:b4:
dc:ce:80:10:a1:73:59:81:2f:6f:9c:0a:56:a4:63:
a6:e5:ab:34:a4:d8:91:77:b0:d6:1f:04:ef:30:af:
3b:5c:d9:e3:58:1b:cc:e5:16:7e:80:36:af:f2:57:
d2:30:64:45:57:de:82:e8:b2:00:d0:f0:8e:b8:0a:
f4:f7:25:76:9b:45:fd:1c:03:cf:fc:3c:31:bf:61:
9b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:83:22:C1:70:BE:31:A0:16:9A:65:A1:23:C5:A4:66:7F:8E:98:51
X509v3 Authority Key Identifier:
keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:62:f3:cc:c4:06:b9:42:c3:69:99:66:95:32:ac:00:7c:b3:
9a:61:c8:43:4c:3d:45:a6:1e:16:64:d2:38:83:a1:0c:a2:95:
85:86:61:75:ea:a1:fe:68:e0:13:ed:30:a3:4a:a1:b5:bd:c6:
ed:f1:d7:91:c5:f2:a1:09:41:52:49:71:9a:4e:86:82:12:71:
fa:9c:05:d5:a1:21:c2:fc:52:d5:02:e7:08:4f:74:54:64:75:
9d:3c:da:25:f6:57:7c:6a:47:46:e9:37:ce:00:48:b4:b6:be:
3e:66:6f:de:25:38:3a:fb:e8:fc:10:b4:04:66:6c:d1:fd:19:
1f:18:ab:05:c2:c1:34:d8:9d:1b:a7:77:75:a0:d8:c0:40:d4:
16:25:f5:ea:37:c6:33:1e:6a:06:57:6c:a3:67:ba:cd:4b:1e:
51:63:a3:51:66:cb:c5:82:34:b0:10:72:e0:22:b7:1e:c7:65:
1a:64:45:86:93:43:66:2f:43:cc:f4:7b:03:79:f0:63:7b:d4:
1b:2a:3d:cf:39:19:9e:39:a9:7d:45:67:c2:ea:99:53:60:9d:
db:31:62:79:2b:42:36:a8:30:6e:21:65:d5:86:99:82:52:49:
92:5a:7e:d2:c2:9b:18:7d:06:19:0a:3c:22:0d:63:39:81:fc:
0e:5e:e3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:34:31 2025 by rpki-client