Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
File: 2AtWXXc2dT2-f2YkvfHSvBiW98A.mft (raw, json)
Hash identifier: maP9oHm/OHPBn/SzHo2KFqspyHlNJ+CGLh+Utp+dIJs=
Subject key identifier: D4:6F:C1:03:20:58:E0:AF:B9:B2:58:99:0A:80:EE:F6:D4:82:D1:6A
Authority key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
Certificate issuer: /CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Certificate serial: 0196BB5B0CBC28CBE2EB8D4DA078C20F95CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
Manifest number: 0E8E
Signing time: Sat 10 May 2025 18:00:28 +0000
Manifest this update: Sat 10 May 2025 18:00:28 +0000
Manifest next update: Sun 11 May 2025 18:00:28 +0000
Files and hashes: 1: 2AtWXXc2dT2-f2YkvfHSvBiW98A.crl (hash: Y53QYPSVGktT33b6DPhOmOdiS7SiRGoqXxcrwAEjx2E=)
2: wpUZVReQHXzsn_DPk2ck08lBo6E.roa (hash: uqt9xMeCs/4H5VzlZsIDbAr0gO/Vsft4k85bkU/+qVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 14:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:0c:bc:28:cb:e2:eb:8d:4d:a0:78:c2:0f:95:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Validity
Not Before: May 10 18:00:28 2025 GMT
Not After : May 11 18:00:28 2025 GMT
Subject: CN=d46fc1032058e0afb9b258990a80eef6d482d16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:f6:9c:98:5a:f4:49:33:79:86:b0:9d:55:
e8:58:b9:5c:c7:5f:43:8b:b9:ab:71:d0:b2:d9:05:
5f:f7:87:2a:04:26:12:4a:40:ac:f1:de:f9:94:12:
0a:e0:b8:97:3c:e6:9d:34:20:35:13:80:f0:0d:f3:
f1:77:7f:18:64:a9:41:39:8e:f0:77:b0:7a:6e:ca:
97:0f:44:70:25:5b:33:d0:54:54:ba:d1:91:b1:a6:
28:e1:92:30:59:ee:98:e8:75:2b:3e:99:eb:c7:40:
1e:a9:6f:06:8b:95:b7:63:70:40:c1:bb:ad:72:47:
c7:5b:3c:9d:21:1b:7f:e3:a8:e4:46:df:45:c9:48:
e4:7c:73:1d:60:6a:2f:e2:9f:d0:53:36:19:74:5c:
00:88:1e:b7:52:92:72:fc:e0:28:a5:bd:1d:1c:ff:
6d:2d:e7:b3:ff:31:de:ae:2c:30:7f:3a:04:ed:bc:
b4:38:64:56:b5:cf:7f:49:76:5f:b1:50:9b:cc:ad:
81:97:76:c2:75:98:a1:37:5d:65:7d:f8:2c:1b:eb:
03:04:7d:01:c0:d5:f9:b1:12:c1:33:09:a4:11:39:
93:6c:cc:30:4c:01:31:af:3e:05:40:d3:8e:76:bc:
30:37:89:99:03:a8:4c:52:11:36:7d:5a:0e:97:cf:
ac:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6F:C1:03:20:58:E0:AF:B9:B2:58:99:0A:80:EE:F6:D4:82:D1:6A
X509v3 Authority Key Identifier:
keyid:D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b5:a5:cb:cf:c5:e9:59:c1:eb:3b:f0:be:04:8e:8f:6a:0f:
36:0e:ff:5e:e8:4f:51:75:bb:79:66:34:8b:72:83:21:54:05:
d8:b1:a6:d3:bb:48:f3:7c:fb:08:fc:d1:9a:c5:8d:7b:b2:22:
63:c9:1f:36:ec:a1:55:c2:ed:67:80:f7:13:b4:13:a9:37:ee:
8a:8f:ad:0f:45:5d:4f:04:c6:fd:fb:43:b4:91:8f:04:18:db:
ed:a6:63:ea:78:a7:53:c2:fb:76:cf:65:db:bd:15:52:14:96:
f1:0f:6b:c8:da:24:59:94:33:af:31:ea:15:72:f3:3c:81:50:
48:64:f1:37:cd:f4:7b:a4:65:94:b6:70:51:0f:32:18:de:e6:
5e:57:93:30:f6:84:c9:30:42:3d:0a:81:92:3b:dd:eb:7f:45:
48:44:97:b3:06:46:8b:04:df:57:db:73:96:06:66:a7:4d:38:
ae:7f:96:62:92:a2:ee:3d:a9:50:6e:b6:57:6a:c2:e1:ce:02:
c5:1f:3b:00:c9:44:ee:54:82:46:e0:5e:9b:fe:ff:e2:22:29:
e5:9f:28:72:94:92:64:bb:94:37:0d:4a:ce:77:bf:d3:88:a0:
9f:4f:cb:0f:ae:63:8c:f6:e8:0b:47:88:62:7b:9f:22:18:bf:
7d:43:64:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:34:10 2025 by rpki-client