Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier: StEOJNrUtVoqlVM9KhfZ56Vy5rrIFpARX5KdLpSN1Mo=
Subject key identifier: 8D:DD:F5:F1:27:73:8E:00:A9:09:65:5F:1F:B0:16:26:B2:B2:60:45
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 0196748BBB9796BF5F4BF668847B3926AE48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number: 0713
Signing time: Sun 27 Apr 2025 00:00:36 +0000
Manifest this update: Sun 27 Apr 2025 00:00:36 +0000
Manifest next update: Mon 28 Apr 2025 00:00:36 +0000
Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: UjG0cxQy2v4X5y1q/gFqTYSnON+a6KIovQA4rbZBEAo=)
2: N6LVOXDpApHcakcmSkzmPFC6k_k.roa (hash: JBlMcthOLqVJmLIR25J/oCOwYGgINMhp1piHtiBmVPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:bb:97:96:bf:5f:4b:f6:68:84:7b:39:26:ae:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: Apr 27 00:00:36 2025 GMT
Not After : Apr 28 00:00:36 2025 GMT
Subject: CN=8dddf5f127738e00a909655f1fb01626b2b26045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:92:fc:28:5a:e2:1a:d4:0d:19:57:43:06:
13:17:3d:48:70:3d:06:2e:ea:bd:ad:38:59:1a:14:
51:f9:0a:8a:7a:5c:ea:54:de:01:58:b5:81:87:a9:
07:4d:e9:dd:f8:ce:37:02:9e:82:bc:d0:0c:30:89:
2b:b9:46:5f:b4:75:cb:70:ac:40:17:5d:54:ff:ce:
cd:ab:b4:9e:4c:b8:15:e7:38:99:07:64:67:11:74:
61:53:3e:81:1b:b5:e5:0c:31:b0:6b:a0:33:7e:70:
ca:0c:e6:7e:e0:6b:af:c8:03:6b:49:4c:16:5d:ac:
c2:ac:a1:d9:49:ee:40:24:1e:65:a7:b7:8b:7d:1d:
2b:2e:20:3c:11:2c:3c:5a:e2:8e:74:1e:e2:92:a8:
ef:5a:6c:ba:11:e1:e0:1c:50:c6:51:30:b8:92:01:
02:91:9c:17:d0:a9:1b:a4:5b:a7:58:0d:89:e5:18:
98:84:39:3f:76:f5:df:75:17:84:17:1d:80:b3:0b:
0d:42:a3:41:b0:a3:c8:6e:46:67:e1:df:71:b3:90:
e9:d8:31:21:97:b4:34:1c:88:b2:9a:61:73:0a:72:
2d:05:22:3b:a1:42:29:fa:77:92:89:f5:c7:82:5b:
c3:a4:db:f3:a3:0e:0c:1d:a1:37:5f:b3:41:b7:4f:
44:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DD:F5:F1:27:73:8E:00:A9:09:65:5F:1F:B0:16:26:B2:B2:60:45
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cc:88:00:be:ca:f0:48:31:d2:b8:fa:1c:e9:3b:18:c0:11:
cd:30:5f:33:f9:ab:a6:f3:05:9c:af:a4:f1:a3:0d:4a:57:a9:
87:a9:58:7a:84:30:c9:09:35:8b:4a:05:6c:22:09:3c:89:37:
8e:61:e1:71:36:ef:2e:c8:eb:15:15:1d:92:c4:b0:f6:81:62:
e0:ad:56:fd:42:1b:ca:95:33:3c:36:70:73:59:2a:75:36:25:
cb:25:eb:56:ac:6a:52:51:f8:1b:2c:bf:ec:1f:1d:68:06:9e:
5a:93:5d:5f:98:ee:53:3d:d9:23:6f:ee:ae:3a:25:e0:b1:6a:
c6:ce:b9:80:64:46:22:70:af:da:89:34:50:34:53:90:58:04:
07:ef:85:e6:b9:02:a2:9a:ba:c9:82:88:a8:96:61:c3:e8:c5:
a9:0a:e0:68:1a:a7:23:16:02:cf:63:ef:ef:43:64:bb:95:6e:
37:14:81:e3:82:42:da:ae:0e:83:1a:1e:6b:b9:4c:d2:9d:86:
78:3f:00:2f:9c:55:87:c3:a4:77:23:96:39:26:47:77:78:1c:
7c:bf:dc:5f:95:d8:a1:97:20:b1:ec:93:28:61:68:07:48:da:
7b:2c:c4:66:96:59:06:68:e3:bc:42:3c:01:b4:69:29:28:4f:
a8:d0:64:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:25:45 2025 by rpki-client