Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
File: 2f-H9S43t2bsv0s_nLJlWN0wiCA.mft (raw, json)
Hash identifier: bG9hYjFXHujlQfb4tfQMf+YJT0IB3etPdsXDkQE7RT0=
Subject key identifier: 96:7D:F1:F0:18:06:25:6B:E0:DD:4E:8E:8F:0E:26:50:77:D3:86:99
Authority key identifier: D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20
Certificate issuer: /CN=d9ff87f52e37b766ecbf4b3f9cb26558dd308820
Certificate serial: 0196771EF1F52932302E6C8C0FB84CA24DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
Manifest number: 0ADE
Signing time: Sun 27 Apr 2025 12:00:38 +0000
Manifest this update: Sun 27 Apr 2025 12:00:38 +0000
Manifest next update: Mon 28 Apr 2025 12:00:38 +0000
Files and hashes: 1: 2f-H9S43t2bsv0s_nLJlWN0wiCA.crl (hash: FSHfhU1g2m8FuyAjivlY1pb5+x84BUAN7mumhwF0rZQ=)
2: nyss7FejNtDGTUXRBz8EpK-bUtQ.roa (hash: 1YbJTbv2jhWedSFo8tfV4w9Efzyk/as9DY0FQwn+kas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:f1:f5:29:32:30:2e:6c:8c:0f:b8:4c:a2:4d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff87f52e37b766ecbf4b3f9cb26558dd308820
Validity
Not Before: Apr 27 12:00:38 2025 GMT
Not After : Apr 28 12:00:38 2025 GMT
Subject: CN=967df1f01806256be0dd4e8e8f0e265077d38699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:c9:36:02:44:52:33:a0:d2:b9:50:09:4f:
fb:8c:82:e1:41:01:e7:d5:8d:78:3d:2b:1a:1c:0f:
d6:3b:e1:7e:5f:0e:8c:8e:02:dc:54:5c:35:21:a2:
10:b1:2d:92:cf:64:92:46:b9:d2:b5:91:c6:43:fe:
0b:9f:8b:02:b1:3a:ac:80:9a:78:4a:b3:41:1b:04:
9f:75:df:8d:a4:81:d8:2e:e2:c4:dc:73:34:8d:74:
30:0b:35:93:93:e4:34:3d:9b:b3:07:28:63:96:d7:
b1:e4:3a:d0:e9:ec:c5:ab:7a:41:07:59:b7:13:a7:
06:4b:bb:ea:b8:df:70:51:54:1f:67:ce:b0:75:00:
12:0d:d6:f3:b5:d7:5a:99:dc:db:b8:66:5b:b2:7e:
74:42:ca:73:59:46:e7:f6:27:54:ad:b8:f6:a4:0b:
29:43:6b:45:9e:f9:4e:60:72:26:d7:15:d6:07:d2:
5d:39:c5:93:43:2a:b3:26:4f:ab:08:76:24:c9:c5:
05:fa:e8:6b:c2:54:d6:c5:05:fc:f0:70:8c:12:8e:
60:19:37:dc:58:2e:4f:1d:33:83:71:c2:12:44:e7:
f6:0e:e3:c3:73:86:74:04:51:79:07:ed:01:ed:de:
0c:f6:29:05:d0:b5:a2:9c:5d:17:48:b5:f3:18:d8:
86:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7D:F1:F0:18:06:25:6B:E0:DD:4E:8E:8F:0E:26:50:77:D3:86:99
X509v3 Authority Key Identifier:
keyid:D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:62:94:90:19:66:e7:9d:c5:91:f3:13:b8:2d:6f:81:be:88:
92:28:aa:40:db:29:db:de:e8:1a:19:99:af:c0:7c:f6:8e:f3:
be:20:51:11:ca:a0:f3:5e:7b:45:02:5b:13:0a:40:5e:80:46:
fe:d4:4e:48:73:74:e9:4e:7a:3e:ab:e6:80:bb:c8:9d:47:84:
da:46:7e:98:07:6d:a4:07:0c:90:ce:71:d3:8e:65:6b:d8:0b:
c9:7c:7a:f1:e5:ce:b1:a1:cd:ab:12:7f:f7:f3:54:93:f8:a6:
6c:c5:45:de:bd:cd:65:26:42:bf:97:ce:c5:24:9b:77:20:98:
97:ab:d2:38:5b:e0:5f:48:19:0e:3f:2e:e8:81:39:18:b3:2d:
3f:c5:7f:75:40:1e:2b:a5:be:d3:f5:c8:14:4f:59:3d:3c:d9:
2b:8e:e5:92:3e:d3:ed:a2:d6:5e:de:f7:c1:11:fd:15:44:66:
39:82:59:9e:07:9e:e4:4c:b3:8f:3d:7d:39:ef:47:aa:37:93:
70:59:ba:95:26:93:51:34:f7:80:c9:40:ce:99:a4:ee:e9:6d:
ba:f2:7f:61:eb:a4:4c:2b:59:db:07:be:d0:2b:b4:94:bb:b5:
64:02:27:00:8b:e7:26:2e:57:78:98:b3:c6:62:d3:ca:60:38:
ba:33:2f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:45:21 2025 by rpki-client