Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier: 66hJCc+OSRMkETN/ODOF67uhtFnSBvdnOs8Puhut1vM=
Subject key identifier: 53:BA:E6:2F:8D:0F:DD:A1:82:FE:EF:A2:F6:27:37:8E:EA:67:AD:B7
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 01969DBE850A0D201FEDDDFAEC57303188A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number: 0DF6
Signing time: Mon 05 May 2025 00:00:30 +0000
Manifest this update: Mon 05 May 2025 00:00:30 +0000
Manifest next update: Tue 06 May 2025 00:00:30 +0000
Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: jsEAPLY0yHJO1LnKspuhSlQUgDMsGtg9SVcKdUOQlMo=)
2: AZz9ksdLlVeAbzeaU8MVCEKWTng.roa (hash: qwHNEbBQRa3YgFdH3RqllR/ytjATMfupEyjMH48twWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:85:0a:0d:20:1f:ed:dd:fa:ec:57:30:31:88:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: May 5 00:00:30 2025 GMT
Not After : May 6 00:00:30 2025 GMT
Subject: CN=53bae62f8d0fdda182feefa2f627378eea67adb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2f:b5:e7:55:c8:47:c9:95:25:76:42:48:7b:
1c:f2:b9:fe:39:77:b5:f6:7a:21:89:f6:c7:a8:73:
f7:35:56:2c:7e:1f:90:3c:cb:6c:97:fe:e1:ab:d2:
09:48:6d:1d:54:c4:7d:c5:e3:3b:2a:70:66:f4:16:
43:96:8d:e7:f5:35:bf:f6:ad:92:f8:50:70:be:c5:
2f:2c:bf:92:0f:73:01:af:ea:7e:d3:36:b6:5c:fb:
a5:68:29:92:a8:5f:f6:a1:e8:6e:5e:b8:35:73:e6:
77:83:55:59:b2:cd:64:3d:38:49:e8:96:63:2e:29:
02:45:19:5f:07:23:c7:f1:7d:b5:8c:a4:bc:86:85:
bf:74:5b:f4:92:00:fc:f4:0e:f2:38:02:3f:a3:54:
05:67:b7:3e:5c:fe:c1:09:9b:c3:11:a6:12:11:bf:
87:14:43:87:ab:03:21:f9:bd:f7:14:8d:e8:ba:84:
5c:68:a3:c2:dc:fd:2e:2c:d5:0d:12:32:b4:ed:5a:
48:40:86:9f:3d:e4:02:70:55:8f:03:78:17:db:25:
7a:ed:6a:9e:3a:a2:ff:19:9f:e2:29:07:84:79:08:
96:bd:d3:d7:83:94:38:3a:03:6c:ba:c7:7b:98:b5:
31:cd:46:19:42:ec:7f:e6:83:e0:50:cd:34:16:6c:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BA:E6:2F:8D:0F:DD:A1:82:FE:EF:A2:F6:27:37:8E:EA:67:AD:B7
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:01:3a:19:9f:c7:0c:8b:b4:12:14:28:93:70:7a:2f:bc:d7:
d0:ca:f7:f8:31:45:19:32:d5:8a:11:bf:7d:08:76:cd:21:4e:
8b:51:d3:49:ca:aa:cc:e1:21:9a:0a:7f:78:26:92:3e:71:36:
11:3c:10:3f:36:16:fa:c4:f4:10:03:ff:75:b6:00:74:59:2a:
83:cc:91:2d:a7:cf:92:72:3d:44:d2:f1:aa:cc:9f:73:90:56:
45:7b:c1:f6:7a:f8:c4:e8:36:ab:27:e0:fa:de:d7:ca:ad:31:
a5:25:b0:fa:44:89:e7:f3:20:ac:03:46:95:0f:fc:1a:b9:b5:
e2:65:1b:9b:f3:84:d5:48:5a:b6:ab:15:08:2a:39:8a:11:44:
2e:39:9b:88:a1:cd:c0:5e:09:8c:35:c0:38:6c:1d:9b:3a:60:
c0:73:cf:d4:27:b6:c6:aa:7b:1b:22:bf:48:6c:79:f5:41:99:
0c:1d:db:63:2e:e8:d1:b3:59:1e:3b:12:67:2c:48:29:69:22:
e5:a2:bd:c6:9e:b9:5b:93:af:90:a4:d6:0b:41:96:2e:44:72:
11:56:fd:f1:52:38:23:fa:8a:bd:63:98:1d:23:39:36:d4:0f:
63:d7:17:13:2d:fd:c0:33:dc:c0:bf:b0:0d:f4:25:25:36:27:
fa:89:b9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:17:03 2025 by rpki-client