Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
File: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft (raw, json)
Hash identifier: TdqbmlvvsqODXTtn3L/kkQGuqj8Hl/EeLS9bnXzKebU=
Subject key identifier: D2:BB:00:5E:7B:43:20:73:3B:6F:81:AE:9B:85:43:CF:A7:75:DB:80
Authority key identifier: A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
Certificate issuer: /CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Certificate serial: 0196A8B09B45CCA37AC73027D281A4EF8BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
Manifest number: 0A9D
Signing time: Wed 07 May 2025 03:01:08 +0000
Manifest this update: Wed 07 May 2025 03:01:08 +0000
Manifest next update: Thu 08 May 2025 03:01:08 +0000
Files and hashes: 1: ehG-SCGwvd8yBJatadELhp3bH6w.roa (hash: YkiZ4YuzwJ9yzU2pKOGO15cIT4PrhxRCvMLtPrdtwoE=)
2: p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl (hash: DwhS+YQsOKwhHiZvcH5urS3QdhPf/rH4usu+FegLi48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:b0:9b:45:cc:a3:7a:c7:30:27:d2:81:a4:ef:8b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f09ad8aad3b3354875bbeaed05b61a54a03704
Validity
Not Before: May 7 03:01:08 2025 GMT
Not After : May 8 03:01:08 2025 GMT
Subject: CN=d2bb005e7b4320733b6f81ae9b8543cfa775db80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:da:36:63:55:d2:de:9f:8c:e1:06:82:c6:
98:c5:75:ca:9b:1d:58:ba:fa:e4:2e:3f:97:04:3e:
73:2c:d5:af:41:1c:6d:2b:8c:dd:a7:1b:13:76:7a:
92:0d:bc:60:29:77:3b:f1:a5:a4:f2:7d:3e:7e:06:
83:15:1a:1a:cd:a3:bd:60:47:47:89:d0:7d:81:9f:
a0:df:f9:4f:73:6c:ae:f9:14:b4:d5:b9:47:97:4f:
89:72:f5:e1:9a:15:ac:e2:25:94:16:04:79:34:f4:
7b:d5:71:83:a5:23:70:ed:7a:99:93:bf:9f:86:b2:
b5:01:c3:a8:aa:f3:b7:48:68:da:94:a4:90:79:01:
72:38:19:02:ba:70:b8:90:ba:90:6d:58:3e:cb:c6:
ae:55:63:43:39:03:4d:2c:2b:4c:52:fd:09:f8:7b:
d1:66:a4:4e:65:d5:6c:68:74:c7:da:31:7b:72:37:
c3:78:34:83:af:38:75:4b:64:68:c4:37:10:70:5b:
38:dc:be:ca:62:00:12:ec:20:1e:ca:c1:d7:06:71:
56:23:a9:c5:cf:21:0d:b4:da:2f:4f:f7:99:6e:7c:
86:e5:29:36:7d:04:ed:aa:a6:fe:a3:22:06:31:a4:
bb:32:1f:88:a7:71:23:28:cf:00:40:f5:34:4d:d6:
20:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BB:00:5E:7B:43:20:73:3B:6F:81:AE:9B:85:43:CF:A7:75:DB:80
X509v3 Authority Key Identifier:
keyid:A7:F0:9A:D8:AA:D3:B3:35:48:75:BB:EA:ED:05:B6:1A:54:A0:37:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d56c2f-b999-40d1-adbf-9ebd2f1ab362/1/p_Ca2KrTszVIdbvq7QW2GlSgNwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a0:2b:fe:dd:ac:24:4c:30:3f:da:7f:67:74:2a:44:a4:42:
32:cf:0d:69:49:3c:e9:4a:05:cc:a9:53:8d:84:ed:ea:23:3a:
e7:66:fa:56:7c:59:33:3b:ed:60:85:33:1a:4e:0f:26:40:c1:
f3:c4:bf:a2:04:8f:36:fd:5e:74:1d:bb:dc:45:b7:2c:4a:3d:
cb:78:72:01:e7:7b:53:bb:01:4a:31:a6:eb:f0:6a:7b:83:67:
e7:96:eb:41:f5:97:f9:ef:87:3f:c1:c0:f3:ba:39:a4:bf:59:
46:f9:04:d8:e2:d1:81:2f:42:d0:d7:cb:31:f9:84:7c:23:05:
e7:99:fb:b2:55:9a:cb:cf:2e:6a:e0:e5:24:c7:d0:d6:44:ac:
8d:00:05:6c:d0:a0:aa:45:47:e9:b0:cd:26:0c:b3:9e:c2:00:
bd:ac:b9:6d:37:f8:cc:99:0a:4c:92:5e:7d:12:9f:70:04:0c:
55:2a:eb:f1:58:66:52:7e:0d:37:c6:d0:62:fb:9c:69:e8:a6:
30:17:c9:d3:dc:3f:89:9d:cd:cb:f5:6c:9b:6c:2b:30:24:bf:
2e:45:a5:84:43:9d:10:cf:4b:5f:da:c4:9a:2c:d2:8b:2b:a8:
9f:00:95:e9:d2:4b:86:c1:92:6b:da:35:94:9b:79:b6:a8:aa:
66:ac:85:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:47:34 2025 by rpki-client