Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
File: 2KzzS-KwTHzO8iIejR_LbKu0FZE.mft (raw, json)
Hash identifier: DIt5TFc4QzsppyYx24XvVY4znXEuAm+uP0dQlx0c/qw=
Subject key identifier: C4:70:F9:9A:D0:FC:90:A9:90:A1:11:C8:7A:D9:13:6F:64:BC:5F:D5
Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Certificate serial: 0196C0B867D903B9A2698A816150B3E09274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 19:00:32 +0000
Manifest this update: Sun 11 May 2025 19:00:32 +0000
Manifest next update: Mon 12 May 2025 19:00:32 +0000
Files and hashes: 1: 2KzzS-KwTHzO8iIejR_LbKu0FZE.crl (hash: 28I5odNVki9kBjMqQFNX/lOuvlSe0Dslx1ykMhqG9KQ=)
2: tFYWfziNY6T1pgWT96la8X957p4.roa (hash: 08hpQSe8BwmYvsZjvFViF9kdWzrXeHJU+sA3OilF/oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:67:d9:03:b9:a2:69:8a:81:61:50:b3:e0:92:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Validity
Not Before: May 11 19:00:32 2025 GMT
Not After : May 12 19:00:32 2025 GMT
Subject: CN=c470f99ad0fc90a990a111c87ad9136f64bc5fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b0:fc:04:b7:f7:87:20:9a:2c:d8:41:a8:c0:
94:82:83:1d:5a:4f:e4:2e:12:ce:6a:d5:43:b5:03:
88:d6:8b:e9:ac:bb:63:53:58:85:01:c8:66:c7:ca:
c1:f9:3e:93:70:df:8d:a9:ec:ec:64:5c:e5:9d:65:
d0:62:a8:3b:52:09:34:72:3d:ca:d4:00:c4:77:7e:
5b:05:ec:24:3a:4c:c1:8e:b6:6f:df:80:48:c7:97:
dc:9d:db:91:7b:df:54:d3:db:00:5d:8e:66:e5:2e:
49:ae:e1:44:cf:55:86:7f:a3:62:c3:2f:90:64:91:
d5:28:9b:51:99:6e:76:5b:55:f7:b3:4b:c2:15:a1:
1c:43:68:1e:7d:0c:2c:1b:c5:00:ac:33:2c:27:70:
4f:83:da:28:6f:83:ea:4a:2f:f5:90:bc:62:e2:31:
30:cf:8d:73:b2:d7:44:f9:40:b5:65:ce:9f:be:d1:
0a:3c:47:bc:74:0d:0a:b2:57:99:5d:49:1d:12:58:
c2:c8:25:d7:d8:90:4c:52:07:94:4e:a9:d2:15:c9:
48:c4:88:e4:14:65:e6:cd:13:06:03:05:65:21:f3:
fc:f9:ec:5a:ad:93:52:55:4a:8d:35:2e:33:e8:a5:
77:af:b7:6d:54:8b:ee:b2:33:20:2c:ab:22:dc:27:
c5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:70:F9:9A:D0:FC:90:A9:90:A1:11:C8:7A:D9:13:6F:64:BC:5F:D5
X509v3 Authority Key Identifier:
keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4d:e3:2b:9b:ad:96:fb:26:5e:64:85:6a:57:16:26:dc:d1:
3c:2f:52:66:c5:3a:6f:64:0d:ba:05:cd:23:aa:db:c6:10:12:
ff:19:aa:be:c6:0b:7d:a3:18:34:6e:b7:46:87:68:ec:25:cd:
f9:17:1b:27:28:24:85:d4:25:4e:95:01:5d:60:b7:03:05:98:
ed:06:31:d7:38:94:ef:5b:dd:35:47:54:57:d2:80:e0:c4:3b:
62:38:98:8c:35:d5:42:b7:6d:55:72:26:b8:50:6a:ca:24:38:
62:45:e4:a8:bf:5a:75:b1:95:47:12:6d:a7:96:f0:4b:72:e6:
7a:83:a9:a4:c3:f9:28:01:a2:ec:0a:dc:8f:cf:ef:70:92:d6:
67:45:03:db:11:d3:42:13:00:a7:31:6c:52:c3:4c:6a:62:01:
24:c9:f7:4b:c0:69:d4:39:95:7e:f1:f8:a1:3b:88:84:b6:b6:
6b:5f:20:d7:5a:e6:29:7a:5c:3c:39:56:1d:ca:6c:b1:bf:e3:
42:8a:da:94:16:79:65:b6:5c:53:a8:8b:3a:52:c0:36:0a:61:
e3:7a:e7:fe:93:31:1d:96:50:0d:d4:14:f6:e6:47:8b:22:8e:
90:5b:2c:1b:6f:cb:7a:ab:4d:a3:54:8a:36:86:3c:fd:f4:88:
64:e2:d7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:28:29 2025 by rpki-client