Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
File: 2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json)
Hash identifier: KM7HQgdxFgfjUPLVcSGwvqNbDVlrb8jnjLnONbrMTWA=
Subject key identifier: CB:15:E7:3C:4E:BA:62:BF:EE:EC:49:34:E5:D7:04:0C:1E:8A:1E:2A
Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
Certificate issuer: /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Certificate serial: 01968691BF8C91B1AD86C8778127602B4AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
Manifest number: 05C9
Signing time: Wed 30 Apr 2025 12:00:20 +0000
Manifest this update: Wed 30 Apr 2025 12:00:20 +0000
Manifest next update: Thu 01 May 2025 12:00:20 +0000
Files and hashes: 1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: 4C+Ruxv0+1KNibCmoIs+6EE8jS8SUjx9YOO6Rkl9WDs=)
2: qARNDLbWZGpXclqzpXtzfvYP72c.roa (hash: yeRNjTwXDaIWE/tdw8m2d67pmit4bLUSMZLje7zj8IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:91:bf:8c:91:b1:ad:86:c8:77:81:27:60:2b:4a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Validity
Not Before: Apr 30 12:00:20 2025 GMT
Not After : May 1 12:00:20 2025 GMT
Subject: CN=cb15e73c4eba62bfeeec4934e5d7040c1e8a1e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2f:6b:94:54:d1:67:46:cc:35:29:a1:f9:c7:
8a:78:22:f0:1c:2d:ac:b3:4f:84:01:eb:7a:fd:6c:
33:f4:62:75:31:aa:85:f7:57:b3:e6:aa:f3:77:59:
35:2d:70:2d:d3:14:a8:2b:17:0e:d8:00:01:7d:72:
fb:de:a3:bd:13:8e:4e:f0:33:90:c1:f3:ce:b4:b0:
ab:40:db:fb:86:84:cc:7c:19:92:19:a9:34:99:b3:
c2:e0:9a:37:e2:b8:32:a5:0f:97:8e:19:1c:17:b9:
d6:0f:c0:7b:d4:90:86:5a:51:25:64:52:1a:41:d8:
d9:eb:a7:a7:7f:49:02:f2:fa:8b:e7:88:28:4a:7e:
ba:e8:69:94:c5:77:2a:cf:73:e0:22:c2:46:2e:3d:
b9:dd:e4:af:9c:45:29:97:bf:2b:5b:75:b2:3e:4f:
ac:0e:3c:ec:2f:ad:af:d1:03:af:84:00:02:71:50:
ce:bd:5d:e4:52:dd:53:b7:61:92:de:8c:64:ec:12:
b5:08:53:03:44:23:15:6f:98:a4:4b:20:fd:22:b3:
6a:c3:05:9e:ae:d1:c9:69:e9:21:b0:15:6b:15:e1:
13:6f:9d:b1:aa:53:1c:cb:3b:47:57:8f:25:db:83:
a1:65:e6:98:51:06:10:38:ea:72:30:75:41:dc:58:
25:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:15:E7:3C:4E:BA:62:BF:EE:EC:49:34:E5:D7:04:0C:1E:8A:1E:2A
X509v3 Authority Key Identifier:
keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:38:73:b4:e4:72:96:55:32:62:66:70:23:07:1c:28:1d:2f:
03:6d:65:b8:0a:5c:f8:c1:bf:d0:8b:5c:29:50:6d:83:d5:5c:
f7:59:8b:95:a2:12:1c:ac:4e:eb:33:39:c9:be:9c:1a:65:3f:
f7:b8:67:4a:1f:ea:d0:02:a8:35:dd:5e:27:08:ea:b2:df:b5:
50:40:ac:a5:4f:00:a1:9d:5b:22:5c:a0:d7:56:1b:d8:e7:cb:
6f:3f:3b:9c:0f:69:f4:52:f9:63:3a:5a:b9:f2:5e:16:15:a7:
16:e3:15:50:c0:92:4e:96:b9:42:e1:f9:b3:c0:04:e5:31:51:
86:c2:41:87:29:67:3b:5b:65:35:9f:63:93:a4:07:fb:95:fd:
f7:76:ab:73:0c:a3:82:8b:5e:98:f5:49:a5:4e:09:2a:13:8f:
44:04:13:d0:65:38:bd:02:a0:e4:de:14:44:b7:6b:15:c5:71:
fb:18:b7:7c:ca:4c:3c:e3:cf:47:3a:ef:c5:7b:f2:be:9a:82:
b1:ab:4f:03:ae:a7:d8:2b:b5:8b:b4:5a:3f:e0:ed:97:4a:62:
52:07:b5:71:16:65:2b:9a:8b:24:91:74:6d:41:2b:1c:a8:83:
da:c3:73:b1:72:40:3e:3d:40:65:02:e5:9b:9d:74:54:c1:10:
37:ff:5f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:13:30 2025 by rpki-client