Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
File: 2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json)
Hash identifier: saRzOZbjDVwsHHZoxrWEhXekhAJx+gUApx/pr7NFwu8=
Subject key identifier: CB:E1:79:86:43:89:C1:BE:6F:A5:6F:CC:2D:0B:A9:97:84:AD:A1:D3
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial: 0196A9C2A84AAF34ED37A643FECD6BECBC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
Manifest number: 0E0D
Signing time: Wed 07 May 2025 08:00:28 +0000
Manifest this update: Wed 07 May 2025 08:00:28 +0000
Manifest next update: Thu 08 May 2025 08:00:28 +0000
Files and hashes: 1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: b/qE01ZI4vVsd0qQs6E3pvwCCbissNsGE2I/rcyi21M=)
2: CYLgyzMsYi7lgn_Q5Gp7OFp3YLo.roa (hash: KpU4uZLnHzH71nuh4tR8vuJUqVXwmRrydoVr8tnF92Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:c2:a8:4a:af:34:ed:37:a6:43:fe:cd:6b:ec:bc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Validity
Not Before: May 7 08:00:28 2025 GMT
Not After : May 8 08:00:28 2025 GMT
Subject: CN=cbe179864389c1be6fa56fcc2d0ba99784ada1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:40:68:7e:01:13:79:0f:4f:27:79:52:12:
5f:13:d3:f0:ba:12:fe:3b:b2:b1:6f:27:6e:23:ca:
31:38:0b:f8:3d:4c:d2:8a:1f:41:cd:50:76:96:76:
03:6a:9a:07:59:8c:b1:5f:92:bf:3e:6b:48:63:aa:
31:f9:92:8e:a7:ee:be:36:db:fa:b0:78:fc:24:67:
a3:d0:e5:9c:e1:c1:57:99:b5:29:84:5c:23:1f:7e:
79:6f:8c:12:8f:bd:b0:38:5d:97:0d:1e:a7:9c:b4:
5d:b8:81:c2:b8:03:21:f3:06:45:c2:01:c3:85:12:
91:d9:6b:23:9d:63:37:44:5e:c7:e1:92:9c:3d:ac:
63:63:0e:35:b8:b1:b4:bd:47:e1:64:c5:b2:09:bd:
32:02:66:85:06:9f:f0:5d:2a:02:37:c0:e5:70:ba:
ea:a6:b1:6d:77:ff:19:f7:e9:89:85:87:33:fa:b8:
64:55:05:a8:e3:7b:f8:79:24:2e:fa:37:f5:50:5e:
9c:a0:48:68:70:2d:92:10:db:fe:85:e8:4b:d9:15:
a0:31:45:fd:ac:7a:42:9c:28:51:fa:3a:b4:3a:c2:
b0:d6:33:13:60:70:2b:b3:14:ea:a0:ea:35:88:24:
98:b7:03:e5:ce:69:a4:91:d1:5b:0d:06:13:bc:28:
e7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E1:79:86:43:89:C1:BE:6F:A5:6F:CC:2D:0B:A9:97:84:AD:A1:D3
X509v3 Authority Key Identifier:
keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:68:f2:0a:52:eb:32:a3:9a:4b:63:70:55:ed:5a:3a:cc:e0:
f9:04:95:94:a9:a4:c6:f0:45:d5:60:3f:01:ed:72:c8:e6:81:
e8:ad:20:f7:6e:d8:6a:20:ee:5b:84:34:3b:29:a4:e4:72:8e:
7a:37:8d:7c:a4:8d:de:14:58:c1:87:89:94:b1:65:64:f5:24:
bb:6c:16:1d:c8:2f:ae:1c:8e:5e:97:36:b2:0d:06:23:b3:89:
ce:a0:8b:c4:80:70:5c:ce:01:88:ac:8f:a0:08:91:a2:62:c2:
ed:0c:dc:be:0d:ad:7b:7b:bf:68:2c:54:8f:8d:7c:4b:e6:bb:
7e:09:63:29:5c:e0:76:1f:77:fb:13:8b:1c:42:9e:32:02:84:
88:9e:8d:43:ab:17:7c:9b:d5:5e:70:34:04:6a:25:41:d7:74:
a7:84:d0:a9:2c:b7:ff:23:56:c5:c9:98:80:36:d6:00:0e:b1:
ae:4b:b5:5a:ed:b2:00:c3:8e:df:af:93:c5:d9:a3:a7:d7:17:
81:72:06:87:ae:a7:b7:d7:23:16:be:da:30:d4:3d:ec:82:79:
46:b1:9d:f1:b3:0c:3e:b2:f0:84:2c:e7:f0:03:c3:71:8c:29:
e2:49:04:be:84:c7:54:d2:f8:01:d6:86:90:39:f7:ca:6c:64:
64:06:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:37:32 2025 by rpki-client