Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
File: 2QrRERMYMAumeOiOBQKx_FHjU3k.mft (raw, json)
Hash identifier: ghUVNdL4ZTLlJfiIc9eGIlhPHBB1dN14QsS/9Fy0g84=
Subject key identifier: 38:57:94:ED:20:F2:EE:1F:58:E4:4E:4E:3F:9F:D4:84:96:37:B7:9D
Authority key identifier: D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
Certificate issuer: /CN=d90ad1111318300ba678e88e0502b1fc51e35379
Certificate serial: 01967643595D434B343B5C640F7906C2EB6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
Manifest number: 0119
Signing time: Sun 27 Apr 2025 08:00:47 +0000
Manifest this update: Sun 27 Apr 2025 08:00:47 +0000
Manifest next update: Mon 28 Apr 2025 08:00:47 +0000
Files and hashes: 1: 2QrRERMYMAumeOiOBQKx_FHjU3k.crl (hash: i3lMTJ5Cd6iSjgt/N5iHY2v1X9QGzZTe7aFgVLhGcVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:59:5d:43:4b:34:3b:5c:64:0f:79:06:c2:eb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90ad1111318300ba678e88e0502b1fc51e35379
Validity
Not Before: Apr 27 08:00:47 2025 GMT
Not After : Apr 28 08:00:47 2025 GMT
Subject: CN=385794ed20f2ee1f58e44e4e3f9fd4849637b79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:d8:08:7b:62:fa:6b:7e:ba:4b:d2:8a:50:
fc:51:27:e8:7b:b2:1a:f0:f8:6b:9f:f9:7d:a9:ec:
2d:68:b6:68:23:5e:f2:89:82:5c:bb:4f:2c:4a:ec:
73:25:0d:c9:dd:d1:a0:a3:27:f2:b0:14:b4:ee:b8:
11:2a:7b:2c:28:54:d1:51:a1:cb:b9:a2:60:82:0b:
48:18:8c:2b:7e:2a:a8:5e:5e:5c:b4:9f:bc:85:94:
9e:e4:6b:8f:ff:ab:a7:be:6f:37:62:40:d2:2a:9e:
71:a0:db:02:bb:27:1c:a2:12:cc:5f:26:58:0f:42:
c2:e6:ed:0e:bc:d6:6d:a7:8b:ba:64:fc:c3:4e:2c:
72:60:b9:68:18:f1:2c:3a:5c:f7:e4:2d:38:38:b1:
7e:ce:83:ff:55:db:7d:9a:5a:27:c7:4e:73:08:b3:
ba:85:62:df:c6:6c:73:94:b3:6d:4b:f9:d3:a9:92:
5e:5f:1c:af:9a:0e:86:9d:fd:a0:9d:b2:b4:74:bb:
26:34:36:f9:8d:59:1a:71:1f:f3:b6:df:71:a6:48:
b6:4e:42:a7:1c:dc:04:88:c3:4b:28:75:42:58:68:
d0:b2:27:e7:5e:f6:8d:b1:49:51:f7:ac:83:f1:53:
38:45:8c:e9:73:1e:55:f9:6d:a0:30:a2:73:a7:14:
b6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:57:94:ED:20:F2:EE:1F:58:E4:4E:4E:3F:9F:D4:84:96:37:B7:9D
X509v3 Authority Key Identifier:
keyid:D9:0A:D1:11:13:18:30:0B:A6:78:E8:8E:05:02:B1:FC:51:E3:53:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QrRERMYMAumeOiOBQKx_FHjU3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/758a0f-3c4c-4310-9a72-5a27b8af28a5/1/2QrRERMYMAumeOiOBQKx_FHjU3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8f:c1:cf:65:f1:4b:e7:f5:d7:c6:6f:61:da:85:c9:40:c6:
5d:8e:27:f1:c4:29:71:87:f4:73:88:9a:d3:57:47:cb:95:42:
be:ca:ad:34:30:be:08:27:43:12:b3:8b:8a:c2:4e:e5:68:fb:
dc:15:03:ea:85:4a:14:76:6f:9d:58:25:0b:7f:bd:f1:54:41:
97:6d:a6:ff:16:04:61:e2:46:f0:a9:d5:f7:da:5e:b1:8d:f4:
bc:b6:18:29:c2:f2:2f:23:88:ff:1f:58:f9:37:ed:1f:25:93:
c2:9e:39:b2:2f:72:bf:ef:d1:1f:73:ad:2b:7b:f0:9d:38:23:
6f:4b:04:65:8b:8d:dc:f6:f6:a5:4f:d9:7f:ce:26:be:8d:4e:
71:e9:a2:50:71:39:74:d6:09:7c:7d:4f:14:02:72:24:cc:99:
e7:d6:e0:18:41:f2:41:f6:49:73:73:bf:0a:e8:e8:3d:64:7c:
ca:3c:f9:e9:98:69:0a:6c:10:15:30:f0:72:e9:4e:1a:69:6c:
2d:d2:44:2a:6d:20:61:7a:fb:ce:83:63:20:d3:3b:81:a6:01:
31:14:e9:fc:d8:60:ed:35:bb:a5:9b:7d:e1:35:2b:c8:32:d4:
95:eb:fe:bc:df:ba:1f:72:1a:fa:a5:11:b5:1c:94:5e:85:7e:
31:c5:45:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:20 2025 by rpki-client