Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
File: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft (raw, json)
Hash identifier: BGgWrselbJNQlzc8Xsdd59LKgNBb8kdxsI+4YDnTOGM=
Subject key identifier: F1:05:9E:87:96:8D:C6:1E:E1:C2:F5:49:FB:F9:5B:1E:6C:1F:CE:61
Authority key identifier: DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
Certificate issuer: /CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Certificate serial: 0196760D399D48924B7F8B8AF79A9CFA6629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
Manifest number: 12E3
Signing time: Sun 27 Apr 2025 07:01:40 +0000
Manifest this update: Sun 27 Apr 2025 07:01:40 +0000
Manifest next update: Mon 28 Apr 2025 07:01:40 +0000
Files and hashes: 1: 2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl (hash: qkJrK/ks7Yn/cty6VZtf4b/6/eklLUhBXYLCdQyqVgU=)
2: wHiz844bSnAZ4Nug3ceKjQdatmc.roa (hash: /mOXe5EHXrP0fFZ7gg8le5T3+NCaa6O//12eYo5yKX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:39:9d:48:92:4b:7f:8b:8a:f7:9a:9c:fa:66:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0389d85ea126e0efbebc5d8459ef709fb895cb
Validity
Not Before: Apr 27 07:01:40 2025 GMT
Not After : Apr 28 07:01:40 2025 GMT
Subject: CN=f1059e87968dc61ee1c2f549fbf95b1e6c1fce61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0d:2d:d9:fb:de:e8:94:07:fd:9e:f5:55:d0:
f2:44:3c:cb:1c:67:7f:4d:e2:ad:7d:45:34:e6:49:
bc:75:d7:c1:ae:de:5a:8b:38:87:70:ef:f4:ca:3f:
91:3c:c6:20:b1:9d:41:d0:4f:d0:86:d6:f8:8c:c2:
df:8b:ca:12:f7:04:5a:3d:c0:04:c0:9b:e1:a8:9c:
46:c8:d1:6d:ce:c7:84:21:3c:12:3c:69:41:29:57:
54:d2:65:8e:ef:81:4c:dc:c4:44:78:a2:4f:13:56:
58:fb:fa:67:72:87:22:b1:28:f2:51:d2:bd:de:6c:
19:1c:d0:ac:40:eb:83:01:d5:f0:be:9b:c3:21:47:
30:1e:4e:29:d3:33:de:41:60:5c:26:70:a8:5f:9f:
6b:2b:60:03:71:04:44:ad:12:2b:11:f5:24:a6:76:
b6:ef:72:93:9d:ca:9b:53:c0:82:a1:3c:f7:bb:b0:
f4:d6:f6:92:38:a3:d7:b7:fc:1b:0c:97:b3:93:02:
3b:ac:c5:1b:f6:72:84:01:69:6b:df:a3:eb:e1:9f:
08:70:31:40:c5:ee:42:b3:dd:d5:45:b0:bf:4d:c3:
77:b0:b2:1e:21:ba:34:e5:a7:a4:f0:c1:c9:32:aa:
d1:18:48:c7:f3:64:2f:b8:ea:5f:14:f0:00:89:1f:
f2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:05:9E:87:96:8D:C6:1E:E1:C2:F5:49:FB:F9:5B:1E:6C:1F:CE:61
X509v3 Authority Key Identifier:
keyid:DA:03:89:D8:5E:A1:26:E0:EF:BE:BC:5D:84:59:EF:70:9F:B8:95:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/27585c-b866-4962-80fd-ea6134706a40/1/2gOJ2F6hJuDvvrxdhFnvcJ-4lcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:02:8d:5a:c5:a2:10:40:40:0d:65:30:cd:33:2a:84:99:dc:
17:8f:a6:c8:44:10:a4:a1:57:6c:ea:d4:a9:4e:97:22:bd:1d:
95:d0:15:26:95:63:ad:82:ac:ce:81:ab:d5:08:ac:b8:19:4f:
d0:8f:30:7a:89:af:2c:77:c2:96:0c:45:3b:c3:24:a6:ff:6b:
84:a0:14:5b:e9:d4:89:a9:87:2d:0f:a4:22:78:a4:90:53:81:
94:a4:1f:0c:18:c5:95:1b:59:89:d3:91:2a:d4:a9:7c:50:e1:
53:21:05:d7:70:d7:fe:7e:43:13:cd:32:7e:f1:4a:a6:69:fb:
38:2b:16:4e:eb:3f:12:15:3d:f5:d0:7a:f7:e9:11:1a:56:ff:
ab:ef:56:6c:e2:65:a1:24:d4:8a:d4:be:35:39:74:2c:73:e9:
65:4b:e8:06:ce:e1:21:b9:10:92:83:e5:3d:b7:0a:e5:21:12:
d7:26:56:d2:32:3c:48:56:c2:d9:55:a6:87:4c:a2:c3:0b:b1:
64:15:31:01:34:a5:3d:2e:93:cc:9f:14:73:ac:5b:15:a9:8c:
da:e3:32:89:e4:6b:f7:48:cc:bd:78:64:5e:61:fa:f4:cf:03:
27:b0:db:ba:02:b8:30:d5:55:c2:b0:62:9f:df:da:60:9c:a6:
ad:8f:d4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:51:25 2025 by rpki-client