Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
File: 2okNBdXIi33m9bqkwdCF_nMB9dU.mft (raw, json)
Hash identifier: lTqA/f7HGVJw1yxusO+jn+nTVY3Dh5sAFkpEaoVCjbA=
Subject key identifier: F8:97:65:27:35:68:C0:37:69:07:9F:20:49:C8:F1:22:FA:8A:B3:7E
Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Certificate serial: 01969A866389E1062655F53ED725B2ABDD2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
Manifest number: 0979
Signing time: Sun 04 May 2025 09:00:20 +0000
Manifest this update: Sun 04 May 2025 09:00:20 +0000
Manifest next update: Mon 05 May 2025 09:00:20 +0000
Files and hashes: 1: 2okNBdXIi33m9bqkwdCF_nMB9dU.crl (hash: QYHjf0Cc7m+N5PsR4ORdIFlWJLvXMExo+JZ3U9BI6xc=)
2: empYwKrx4ABahFY0k2CZXZft5Pg.roa (hash: lQyRrUFjZRPH9Yib0Mwz+z/3ALSf5u0tcJRbBn2hjqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:86:63:89:e1:06:26:55:f5:3e:d7:25:b2:ab:dd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Validity
Not Before: May 4 09:00:20 2025 GMT
Not After : May 5 09:00:20 2025 GMT
Subject: CN=f89765273568c03769079f2049c8f122fa8ab37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a7:56:dd:40:2b:c1:f3:76:36:79:4f:56:8e:
81:16:54:4f:3f:c1:56:18:9b:6c:56:c5:36:b0:bb:
99:54:2a:47:ef:df:b5:8a:fd:2e:93:41:ed:a6:cc:
ad:b1:e9:b3:fb:7d:e4:2f:f6:c1:ab:b3:6c:fe:7f:
9a:54:44:94:fd:6c:18:59:2e:76:a3:a3:10:8b:87:
5a:59:7e:4f:d6:88:de:0f:97:91:5e:01:db:d4:b3:
2e:76:c9:7f:30:29:41:05:39:05:79:36:90:42:c1:
ae:b3:ec:5c:68:c9:5c:a4:3d:9e:9b:a2:5e:f7:88:
27:3d:59:97:aa:c5:28:61:38:30:43:5f:27:76:e2:
83:5e:6f:ed:a3:24:d2:2b:b8:cc:bf:33:fb:01:a3:
f2:2f:1d:6d:39:f4:9a:f5:99:f4:c8:05:6d:b5:ee:
03:83:2d:33:69:bd:52:c0:fd:61:14:6f:88:48:43:
66:41:a4:b1:dd:bb:f9:03:d8:fc:cb:5b:4f:47:b4:
ca:a2:5b:c8:4c:95:80:75:c2:7d:8b:5c:c0:fc:eb:
36:ae:83:4e:4d:42:e2:dc:17:1d:76:05:06:3a:97:
6b:ef:ec:d9:d0:fd:98:24:7f:bf:dd:95:fe:72:1a:
a9:d7:f5:c0:7e:06:11:f2:af:08:b8:a4:47:56:0b:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:97:65:27:35:68:C0:37:69:07:9F:20:49:C8:F1:22:FA:8A:B3:7E
X509v3 Authority Key Identifier:
keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:9d:3b:8a:31:a9:66:71:8e:12:f1:8a:61:b7:47:a0:86:cc:
87:c9:48:fd:05:0e:f9:af:c0:02:33:e6:79:30:0d:83:12:61:
6f:f1:ec:74:0e:38:98:fc:95:7b:a2:9a:e9:16:52:43:60:79:
e3:26:41:72:4f:2a:48:c2:3f:a9:df:7f:2b:b6:6c:1e:27:6d:
9e:ad:13:1e:2b:75:45:30:41:30:df:b6:59:b9:44:99:70:99:
e9:09:99:84:ff:f9:94:03:85:ed:c0:bf:af:11:f2:b5:42:d3:
ff:ea:c7:3a:35:41:a9:e9:e1:f7:b1:11:9d:07:36:85:c0:1b:
79:16:84:93:77:63:89:af:54:a5:ce:f0:04:37:f0:f8:2b:55:
72:35:44:7d:a2:26:d3:af:3c:4a:c1:30:3e:8c:c5:51:cd:56:
e7:69:93:b5:33:1f:f6:02:17:7f:a2:a1:80:68:be:9f:3c:07:
31:3f:73:b5:9b:5d:8b:93:bb:43:cc:00:6c:bb:59:2a:49:8a:
88:e7:d1:ed:e5:c9:c2:d3:62:db:4d:f0:b1:f7:90:1a:05:ef:
d7:24:e2:8c:43:8d:8b:1c:b4:c3:46:19:ce:a8:c9:18:b8:94:
1e:5c:b7:c1:75:50:bc:09:1b:8e:f2:15:2f:21:aa:ea:4b:1f:
b5:2c:b3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:14:08 2025 by rpki-client