Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
File: 2rsdAWAvFSERMu1IGFqZs2IlEX8.mft (raw, json)
Hash identifier: To2UsuwW5+ZtzxPfXpE1cijp8hly2oyr1CVdS5QLH+4=
Subject key identifier: 6A:34:20:2E:1B:B6:4C:32:A3:C1:11:83:DE:16:E1:B0:1D:7D:F8:B2
Authority key identifier: DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
Certificate issuer: /CN=dabb1d01602f15211132ed48185a99b36225117f
Certificate serial: 0196B66BCE1012CE22B87753884A2D715A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
Manifest number: 0D9B
Signing time: Fri 09 May 2025 19:00:40 +0000
Manifest this update: Fri 09 May 2025 19:00:40 +0000
Manifest next update: Sat 10 May 2025 19:00:40 +0000
Files and hashes: 1: 2rsdAWAvFSERMu1IGFqZs2IlEX8.crl (hash: gRY2gAOS2eQIr6gUX3JyFt68SI+6deIoKmeXyvAz4IM=)
2: 787WsGeG_PtOH4NifJLvSRcdjKE.roa (hash: LXK7T54I67xPwZvLYoiPIC1z9h7T9ebkz0cAqwvP0HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:6b:ce:10:12:ce:22:b8:77:53:88:4a:2d:71:5a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dabb1d01602f15211132ed48185a99b36225117f
Validity
Not Before: May 9 19:00:40 2025 GMT
Not After : May 10 19:00:40 2025 GMT
Subject: CN=6a34202e1bb64c32a3c11183de16e1b01d7df8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:df:54:d6:29:f5:7f:17:6e:9e:b6:6a:b8:
e5:c3:bc:51:69:21:3d:b2:5c:16:63:be:3c:86:cc:
b8:c6:9e:7a:3d:55:06:b8:01:21:ba:2a:18:f5:85:
fe:9c:3e:31:1e:20:8e:cf:4b:aa:23:b3:62:81:65:
22:fa:98:a3:d3:6d:5d:41:87:79:9d:57:d7:a3:51:
71:28:14:65:11:98:66:e4:58:90:bf:14:33:38:8e:
64:f2:f3:7c:8f:f8:6d:20:9f:96:87:90:56:af:36:
30:b9:62:90:f2:f9:4a:a5:2f:4a:d4:a1:3e:0d:2e:
16:9c:67:ff:79:31:7d:b9:a8:06:c4:53:e9:91:d1:
10:38:cc:8a:55:63:ae:a1:73:2e:1f:b7:31:7b:52:
ac:37:2b:0e:be:ac:ef:d9:75:d8:ec:3d:cd:70:c9:
82:5e:c7:2e:1e:c0:92:ca:8f:82:b2:f8:bb:90:b5:
cf:ca:f2:ac:6d:85:54:27:d9:8b:78:02:69:7b:9a:
e6:b4:73:80:dd:a7:68:e7:3c:6d:01:8c:ae:c6:48:
f1:17:5c:11:3e:e3:ea:e2:54:7d:22:42:2a:d1:fb:
3e:49:1c:94:09:8a:c7:9a:bb:e0:77:47:84:80:80:
7f:1c:c0:14:c1:cf:e3:5c:9d:95:07:a4:76:54:b4:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:34:20:2E:1B:B6:4C:32:A3:C1:11:83:DE:16:E1:B0:1D:7D:F8:B2
X509v3 Authority Key Identifier:
keyid:DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:59:2c:f3:0c:31:a4:7f:bc:ef:78:2a:ae:4c:b1:97:6a:c5:
26:51:0c:da:5d:de:cb:0f:ee:ec:ab:1a:8e:e4:07:e7:b5:be:
fc:eb:93:5a:d0:f3:c3:15:84:2b:69:dd:82:9f:a2:6b:8b:03:
54:f6:b0:cb:d2:d5:39:5c:de:d6:ce:9f:fe:02:6e:d5:58:1e:
22:e6:17:d6:b8:67:03:1c:e0:08:bc:04:be:23:14:03:a0:e4:
df:86:16:74:6e:c6:b6:4e:58:63:2f:59:41:fd:ac:c0:bb:c1:
31:b6:53:1c:26:b0:67:61:93:be:c6:01:57:f2:ed:49:11:a0:
a3:67:4f:87:4f:c5:16:34:7d:22:f0:68:c6:60:6c:9d:38:79:
7d:b2:ed:36:a6:b8:53:8a:a2:58:c0:6c:52:2e:29:1c:83:ee:
1b:bd:0d:51:ce:b5:14:40:4b:5b:38:cf:5c:8d:c6:11:c6:69:
d1:1f:13:17:c7:9b:69:c8:bf:3d:47:21:b5:84:45:e8:7c:31:
8f:ed:47:36:88:30:f6:1d:a3:20:ac:5b:34:82:99:76:cb:03:
0b:29:f0:2d:68:52:0f:d6:b4:2b:a5:22:94:76:14:35:ff:b7:
b4:7e:e7:b5:da:c0:66:1d:01:a1:6f:82:50:2c:f8:64:13:b5:
81:e6:10:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:59:26 2025 by rpki-client