Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
File: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft (raw, json)
Hash identifier: rNkoC/3MidANQ9wU3yPS+dN9i594ayw1tsQbaumuhaU=
Subject key identifier: 89:03:F5:56:72:CF:1D:82:9A:33:F9:F1:56:D4:4F:D9:BC:D9:4F:EC
Authority key identifier: DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
Certificate issuer: /CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Certificate serial: 0196C3F0933F320EF258D0FDD92CC7FFBF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
Manifest number: 0900
Signing time: Mon 12 May 2025 10:00:45 +0000
Manifest this update: Mon 12 May 2025 10:00:45 +0000
Manifest next update: Tue 13 May 2025 10:00:45 +0000
Files and hashes: 1: 2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl (hash: Y/jF8NdnuuRa3bLWmVWUqjpJAj8+Kt0DCZHXEUeArFA=)
2: jOjUJYKoLHn0iKDz6xmlsGUntNA.roa (hash: dqARMuMMhdUxtBH/82mhr6b+TrmEh6Uv8dt27P0LcGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:93:3f:32:0e:f2:58:d0:fd:d9:2c:c7:ff:bf:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfb6f560ec542ac66c3080203c66335873ae8ee
Validity
Not Before: May 12 10:00:45 2025 GMT
Not After : May 13 10:00:45 2025 GMT
Subject: CN=8903f55672cf1d829a33f9f156d44fd9bcd94fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:15:61:a9:4e:e9:1e:fc:b5:48:cd:33:ff:
64:a1:b6:ad:89:ec:ba:d2:dc:08:c0:61:7d:f2:3a:
e5:2b:c7:38:0a:aa:dc:c5:e4:c9:61:47:7d:3e:1a:
d1:a4:c9:b2:dc:c7:db:fc:e9:3f:c7:9d:de:b0:e3:
d6:d4:46:52:00:2b:d1:23:d2:bd:b8:9f:98:80:68:
d0:f8:6d:d3:94:61:ce:4d:65:f8:88:4e:d7:1f:eb:
fd:ee:52:67:34:d7:43:45:fc:26:fd:0b:5e:0a:22:
a1:81:79:95:9b:c2:9f:b4:6b:13:83:d9:5e:12:48:
6c:4a:88:ce:6a:7a:2a:bb:37:a7:d6:6a:f6:ce:40:
ad:5b:d6:23:a9:a8:26:f8:08:20:11:28:84:a6:a7:
47:45:ff:0a:67:49:87:eb:fa:10:3c:3c:38:d7:1e:
57:26:97:28:40:4e:e3:af:30:5d:02:bc:79:28:8b:
a7:5e:8f:be:69:2f:b1:d1:93:83:96:5d:0b:a9:75:
e9:99:91:be:10:17:c7:a0:19:e2:61:46:ee:48:70:
51:57:30:88:1e:38:96:8d:eb:06:fe:3f:1c:48:76:
73:d4:32:1e:b8:4d:f9:8f:90:03:7d:b2:42:c5:b2:
4a:1c:56:11:ec:95:6f:2a:f4:87:1b:a7:50:ae:a5:
64:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:03:F5:56:72:CF:1D:82:9A:33:F9:F1:56:D4:4F:D9:BC:D9:4F:EC
X509v3 Authority Key Identifier:
keyid:DB:FB:6F:56:0E:C5:42:AC:66:C3:08:02:03:C6:63:35:87:3A:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_tvVg7FQqxmwwgCA8ZjNYc66O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/59815b-ad0b-4a06-bbe0-b25085051ab8/1/2_tvVg7FQqxmwwgCA8ZjNYc66O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cd:0a:f6:ac:09:df:0e:7c:97:bd:93:c0:9b:76:b6:76:97:
be:3c:76:ba:fb:80:2b:a6:0c:b7:76:b2:04:a3:99:00:d8:f8:
12:d8:27:4b:05:c8:f9:4c:32:14:56:1d:02:f0:1b:3b:20:66:
c9:f9:87:4c:42:dd:c5:a1:16:f9:2a:03:83:4a:08:e9:8a:6b:
f8:b5:6f:b5:ba:88:0a:9f:0f:0e:db:21:e0:06:37:4b:7c:c8:
18:7c:e2:65:73:7b:6e:ec:ba:d5:64:cb:89:9f:67:2c:b0:f8:
e0:77:be:ac:fe:7a:d6:5a:13:43:24:78:06:cc:22:54:fc:b4:
62:88:9f:bd:18:c5:0d:ba:03:f0:26:70:90:18:82:4c:68:72:
5f:a6:6e:2d:f0:8a:d4:1a:a8:23:c3:ce:de:e8:30:c8:80:4c:
29:57:f1:e7:bb:70:3d:d4:ba:72:cf:7c:c9:72:c2:93:71:1c:
95:36:32:9f:af:02:68:a0:9d:a9:ed:b3:29:40:b8:62:e1:73:
b2:2a:d4:f6:6b:bf:53:76:9f:04:3b:06:5c:03:a7:37:dd:50:
5c:c6:7f:63:f7:48:f3:22:f3:fe:09:5b:d5:a2:bc:b9:c3:62:
63:35:c1:72:4a:c9:9b:ff:94:e0:22:7c:4c:5f:2b:e4:3e:02:
1f:52:e2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:56:50 2025 by rpki-client