Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
File: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json)
Hash identifier: LTXV8sVTLsNRXCr/fOW9aOgzLVBol1IfSESHCY49b7o=
Subject key identifier: B1:81:E3:52:98:CA:7C:9F:2C:A6:E8:77:A0:C7:F3:B3:77:8B:87:FB
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Certificate issuer: /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial: 019674F98E6B75BEFDA7FF56E6B647A95DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
Manifest number: 0A2C
Signing time: Sun 27 Apr 2025 02:00:34 +0000
Manifest this update: Sun 27 Apr 2025 02:00:34 +0000
Manifest next update: Mon 28 Apr 2025 02:00:34 +0000
Files and hashes: 1: nd2mEoM182MlqnyU97QFBEBtYLc.roa (hash: H4CTJi+dex4a2tP/U9S7boExXOmFzvTZ0iE52ANC1z0=)
2: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: DKXJip8IvDKG1ZUmZSbCEDqYy2dxEPbXAz+JXdIRK0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:8e:6b:75:be:fd:a7:ff:56:e6:b6:47:a9:5d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Validity
Not Before: Apr 27 02:00:34 2025 GMT
Not After : Apr 28 02:00:34 2025 GMT
Subject: CN=b181e35298ca7c9f2ca6e877a0c7f3b3778b87fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:23:00:24:69:a7:b4:9d:91:73:49:7e:a5:d1:
87:fe:c7:7d:71:04:7a:11:ac:bc:1b:29:2b:40:c0:
f8:e1:f8:c8:59:3e:a3:9f:4a:02:07:f0:d1:91:df:
c4:6c:66:0d:71:a8:36:d6:07:e5:80:a9:8a:51:be:
25:cc:37:b2:87:2f:14:43:8f:54:dc:79:eb:35:79:
d2:99:a0:8c:48:1b:f6:9d:d3:c8:01:82:9f:df:e4:
12:96:cd:dd:e7:67:d5:d4:2d:36:4d:42:85:f7:b6:
a6:4f:5b:ab:82:35:5e:4e:11:21:cf:3e:12:d1:7b:
dd:1a:89:ed:84:dd:8d:f0:6f:20:6d:d7:38:b5:82:
d2:7a:4b:62:7b:b4:a7:fd:15:08:96:df:dc:ba:68:
8c:5d:94:ec:ad:a1:f6:07:2a:43:3f:e9:bc:f8:a3:
40:db:29:24:cc:81:32:6e:07:8a:b6:21:2d:22:50:
5c:02:da:8a:e5:ca:cd:f3:23:05:50:30:44:2a:e6:
55:22:e9:47:4e:fb:96:c6:21:70:71:b9:b8:6a:f0:
5c:f5:12:ea:1a:8b:92:4c:d4:80:21:9f:9b:2f:8a:
0c:98:b6:3d:f1:10:86:ca:bc:b3:77:bb:0a:94:08:
18:f5:d6:4f:cc:94:d9:94:03:ef:64:88:35:a8:6d:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:81:E3:52:98:CA:7C:9F:2C:A6:E8:77:A0:C7:F3:B3:77:8B:87:FB
X509v3 Authority Key Identifier:
keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:eb:18:25:4b:ca:7a:3a:d1:59:e6:3d:4b:43:c7:0a:bc:bd:
dc:e6:60:63:2b:08:90:9d:19:00:67:db:58:54:78:f9:77:e4:
67:99:d0:1f:c0:d8:02:71:79:db:e8:5a:87:db:23:0a:1c:54:
23:f8:a4:93:00:e1:23:95:1b:78:cb:14:89:2f:2e:c1:a4:57:
77:18:95:71:a9:d0:57:74:31:09:9f:be:80:bc:fd:83:a1:ff:
de:0e:c3:ac:7c:d1:e7:cb:75:73:34:c3:b5:25:a8:3f:e2:03:
4e:80:ed:f6:ea:25:59:b9:a2:2c:1e:9b:88:8f:ab:51:34:ec:
ef:6d:6d:90:05:da:82:83:61:01:3d:cf:45:99:2a:bc:76:d1:
fd:86:91:dc:a1:77:fe:c5:78:f8:38:43:e7:08:f5:f2:5a:d9:
ea:42:4a:c7:a0:a8:ee:89:63:f5:3a:6c:c1:dc:af:86:2b:7c:
fe:3b:fc:fa:f8:22:5a:66:a5:99:85:1b:72:60:8e:56:74:e4:
73:bc:53:4e:96:cc:e7:b8:8e:09:37:f7:58:8e:0e:85:ca:80:
2b:0d:d3:30:30:33:4f:89:49:0e:17:cc:90:03:e6:09:ca:b9:
82:27:6a:8c:ae:dd:e3:4d:57:09:4b:a7:a3:be:76:34:74:60:
73:1c:a9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:40:35 2025 by rpki-client