Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
File: 2lLDjwx_664TXV3d2UjPJr7O87w.mft (raw, json)
Hash identifier: E8U83PHVtprCKtq6KwW75CdzQwFb8SxQrolZKJmnV+s=
Subject key identifier: A1:E4:A4:0D:34:7E:46:F8:9F:1A:A6:52:17:2B:43:A4:09:0B:8C:AC
Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
Certificate issuer: /CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Certificate serial: 0196760BE1A56CA4D93B63A2576E1848D614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
Manifest number: 0D8C
Signing time: Sun 27 Apr 2025 07:00:12 +0000
Manifest this update: Sun 27 Apr 2025 07:00:12 +0000
Manifest next update: Mon 28 Apr 2025 07:00:12 +0000
Files and hashes: 1: 2lLDjwx_664TXV3d2UjPJr7O87w.crl (hash: qrgz+0VEC29MOVP/O2aEO8mcILUUtrfjYIm3PGzETl0=)
2: ESp2P2qg1tcbnP0x2cOMAxJ9cfY.roa (hash: NXfX71EbjUbs5qPqJFV7lpPUd0bJOBkN6qOg1PkmUtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:e1:a5:6c:a4:d9:3b:63:a2:57:6e:18:48:d6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Validity
Not Before: Apr 27 07:00:12 2025 GMT
Not After : Apr 28 07:00:12 2025 GMT
Subject: CN=a1e4a40d347e46f89f1aa652172b43a4090b8cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:ce:2a:92:fb:d4:0d:67:f3:35:b8:49:2a:
56:e4:7f:72:fe:20:27:dd:92:ce:18:d3:c7:03:73:
1d:4b:4a:9b:6d:32:88:e6:a6:89:d8:5d:7c:8e:12:
3b:4f:01:fa:61:b6:97:ca:42:5e:39:ec:91:2a:d3:
c3:77:bd:5c:85:5e:b0:af:59:74:10:c8:73:83:aa:
2b:3b:c2:b7:d6:bc:6c:d1:3c:ba:93:52:04:6f:fe:
18:be:7e:94:b6:65:28:7a:a5:2e:d2:f8:c3:69:cf:
13:2d:2a:30:aa:d1:09:f6:82:d2:bb:fa:af:97:7f:
b0:c1:24:9d:2b:6e:51:ab:7c:a3:2d:b9:24:51:56:
65:7b:07:0f:29:f2:7e:28:e5:80:a4:85:31:6c:46:
77:2c:08:02:de:c6:1b:10:a2:d3:0d:7b:59:c0:7f:
5e:a4:a0:24:85:e4:fc:4c:cb:0f:06:60:ac:d6:c7:
48:d2:87:42:98:b7:c6:fc:db:e3:0a:de:ee:44:bc:
eb:ad:00:95:8c:88:9d:f8:50:5c:eb:4b:c9:97:11:
8d:bd:dd:4f:33:87:57:b1:c7:6c:b2:e2:7b:4b:74:
be:0b:a5:55:c6:4c:2b:b0:5d:0c:3a:a4:5e:a9:87:
2d:7d:22:fd:40:d7:ea:5d:08:0e:41:f3:c0:c5:1d:
c2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E4:A4:0D:34:7E:46:F8:9F:1A:A6:52:17:2B:43:A4:09:0B:8C:AC
X509v3 Authority Key Identifier:
keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:13:0d:96:52:f6:c0:bd:28:e9:a8:ed:e1:ec:af:62:b8:8c:
ea:d7:f1:70:32:c7:85:57:06:bf:14:a2:e5:ba:ca:82:fd:27:
de:84:31:18:09:8f:5f:5a:24:91:61:da:16:03:0f:2e:34:eb:
14:ab:f7:8b:e8:67:8f:9f:34:d7:dc:ef:96:a2:cf:c8:96:d1:
a1:b2:75:4c:d8:eb:b6:53:22:a6:9c:46:b0:f5:06:0a:db:ca:
34:6d:f6:a7:41:e8:bc:cb:ed:a2:5b:11:37:24:71:59:63:05:
61:3c:e0:6c:ff:ba:84:c4:75:8b:51:a0:3b:30:a2:5c:1c:b0:
61:ac:b0:e1:51:e8:88:ad:a1:fe:a6:53:ff:3a:73:52:df:8c:
81:db:34:e1:0e:77:49:cd:bb:26:39:05:64:f4:7b:f2:33:49:
0e:cd:cf:f6:9e:1d:c9:2f:ed:7c:2d:51:5c:e7:85:70:9e:e5:
db:a8:a5:2e:6d:f1:8d:42:f4:ed:73:8f:33:35:90:02:dd:49:
31:c5:32:9f:ae:0b:f1:69:93:77:4b:d3:45:9c:c7:d7:bd:dd:
5c:16:73:f7:9e:0e:c5:ed:29:c8:6c:13:bb:55:1a:f6:fc:56:
c8:d0:be:e6:73:f6:13:b6:a4:63:07:97:91:04:76:a5:e3:77:
ba:2d:9d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:48:07 2025 by rpki-client