Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
File: 2671wyvqS1TRfiQbXMyvB7wKjuk.mft (raw, json)
Hash identifier: ONpX+pTsd4ufu4IBdvZsHx8/m+y2IuOSqXqZpSWR0uQ=
Subject key identifier: 56:7C:00:2D:9F:07:9F:1D:26:C3:40:6D:1A:AA:B3:F6:07:8F:61:DF
Authority key identifier: DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
Certificate issuer: /CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Certificate serial: 0196B2FCA4CB09B13E7537EE34426F747A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
Manifest number: 0EA8
Signing time: Fri 09 May 2025 03:00:23 +0000
Manifest this update: Fri 09 May 2025 03:00:23 +0000
Manifest next update: Sat 10 May 2025 03:00:23 +0000
Files and hashes: 1: 1K5S67uusJJll8Ab0hq1pL5liKA.roa (hash: StmRzvzcRi3NdAfCMsQ2aiXFRAlDcm1+BCF0RfR6JW8=)
2: 2671wyvqS1TRfiQbXMyvB7wKjuk.crl (hash: NFyQGAn4rXg9zDS5LliDRjLCBQ31X+ELzHEeNBb3xcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:fc:a4:cb:09:b1:3e:75:37:ee:34:42:6f:74:7a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Validity
Not Before: May 9 03:00:23 2025 GMT
Not After : May 10 03:00:23 2025 GMT
Subject: CN=567c002d9f079f1d26c3406d1aaab3f6078f61df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c1:b9:f8:26:07:50:bc:77:dc:5a:c1:8b:89:
13:3c:d3:8c:92:12:64:ca:6d:63:7a:c9:a4:e0:69:
a7:b8:e6:f8:85:c2:5a:e9:69:a0:ad:b7:3d:27:f5:
d6:a4:68:87:39:0d:2a:f7:26:42:be:e3:52:40:f0:
d9:b2:03:3b:ca:71:00:3e:f8:c0:7b:81:d5:1a:14:
42:58:39:d5:a6:50:b5:b4:13:92:5e:7d:f1:3b:ec:
b8:eb:57:78:f6:56:07:a5:d7:68:5e:6e:d4:e0:ad:
9e:02:5e:1d:52:50:dd:3b:42:9c:99:dc:1a:19:76:
43:2d:c4:5b:d3:7b:2a:98:17:4e:8f:07:38:be:03:
78:25:9d:02:d1:0c:e0:aa:2e:ed:63:43:ba:d6:71:
9e:77:d5:af:dd:b7:3d:6c:a9:4e:f8:f5:77:20:5e:
fd:1b:95:50:48:f9:46:24:60:7b:c3:88:20:a5:6d:
a8:e9:e4:00:d1:6e:b7:78:eb:79:f7:f2:d2:82:7c:
1a:ec:a0:2b:74:01:05:19:de:d8:13:bc:91:f4:61:
d7:35:d7:6f:a7:18:68:58:ea:b3:02:fd:75:ff:47:
e1:31:5e:57:42:55:67:f3:73:7b:7a:c3:0f:75:02:
13:cc:47:96:26:05:6f:fe:65:b5:b0:e2:84:7c:c8:
ee:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7C:00:2D:9F:07:9F:1D:26:C3:40:6D:1A:AA:B3:F6:07:8F:61:DF
X509v3 Authority Key Identifier:
keyid:DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b8:28:70:1b:f5:15:76:60:ad:ab:50:1d:f9:43:51:65:17:
fc:6f:a6:92:c2:46:29:84:99:9f:59:5e:b9:a5:fd:00:16:99:
52:0d:fe:23:33:1b:07:a5:93:5d:d9:81:be:35:34:5b:47:db:
28:e1:6f:df:e5:49:72:6e:a5:48:b8:96:11:dd:c8:8f:c0:f9:
74:fb:ce:c6:3f:02:61:84:ec:17:84:2f:55:bb:81:bf:63:eb:
c2:a2:d7:46:42:c2:ba:23:7f:73:12:76:ad:1c:2c:e0:ab:63:
ab:f9:7a:47:e1:e2:4f:c4:96:24:ea:36:72:64:20:0f:96:25:
d5:19:2f:9e:d0:6b:7e:2f:6b:c7:c0:10:af:e2:68:d9:f9:c2:
a5:f5:72:d3:44:86:ad:9a:30:96:4f:63:d3:33:8c:0e:de:60:
a4:ec:53:f5:08:0d:29:84:c1:43:82:cd:9f:78:61:23:d3:bb:
0b:dd:90:03:ec:23:a1:5e:86:88:c2:91:61:45:28:20:08:fd:
4e:93:2c:6d:f6:f6:5e:d2:a7:4f:a6:ab:60:98:d6:05:36:eb:
0a:43:b3:16:c0:9f:40:9a:8f:34:46:dc:12:5e:28:b3:49:7a:
87:a5:be:07:38:78:aa:3d:91:9e:01:b0:ea:f0:78:81:0d:ff:
ff:33:2d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:38:06 2025 by rpki-client