Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
File: 2dHiILYBtn_jDLt7fBvyL74i-08.mft (raw, json)
Hash identifier: lSj5dYdionKYMAodxE+plZklvHysIAN4efyjdlMOCI8=
Subject key identifier: C9:A9:88:67:AA:E5:21:EC:0C:D7:B4:02:4F:42:E5:FD:0E:40:D1:07
Authority key identifier: D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
Certificate issuer: /CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Certificate serial: 019675D4EF85C43C8A543B6B6669A7C847B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
Manifest number: 099C
Signing time: Sun 27 Apr 2025 06:00:11 +0000
Manifest this update: Sun 27 Apr 2025 06:00:11 +0000
Manifest next update: Mon 28 Apr 2025 06:00:11 +0000
Files and hashes: 1: 2dHiILYBtn_jDLt7fBvyL74i-08.crl (hash: 1kfilH0/HZhfF9hsBq60U0vbupQVwiuoQlJ/q8mHl4o=)
2: jIeL0Ff1YswP2z65Y_1AGOy9fmw.roa (hash: OwVjmKWjz0aDaa4mX/kuMdsef7BkmTlqjQTaGRRWwQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d4:ef:85:c4:3c:8a:54:3b:6b:66:69:a7:c8:47:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Validity
Not Before: Apr 27 06:00:11 2025 GMT
Not After : Apr 28 06:00:11 2025 GMT
Subject: CN=c9a98867aae521ec0cd7b4024f42e5fd0e40d107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:57:62:ab:f2:fb:20:83:8b:10:be:cf:d3:
c6:0d:cf:e8:f3:6e:48:80:bf:c8:bd:95:cf:3d:f9:
7d:6d:81:f0:de:c3:86:3f:54:07:d6:1a:5e:ff:f9:
07:64:28:44:7e:da:a9:25:1f:0d:8d:de:83:80:f6:
ac:1e:a6:1e:db:3a:99:00:7b:fc:5c:19:5f:59:7c:
8d:d1:cd:bb:22:c5:65:ae:da:8b:61:78:f7:67:60:
dd:cb:c5:91:12:60:27:20:2f:7d:32:24:69:df:be:
23:48:ca:5a:39:94:81:98:23:68:81:2e:83:57:ed:
fe:ee:64:fe:e0:38:7e:8f:fc:d0:cc:94:ab:ed:37:
1f:22:52:73:72:ac:1f:fe:47:55:39:c3:49:84:cb:
33:9f:0d:9c:83:9d:db:5e:1f:99:58:c6:4a:8b:4d:
47:09:d2:dd:66:78:a5:0f:46:10:6c:7c:40:f6:0f:
18:85:8c:04:7b:09:a5:cf:7b:cd:04:25:1a:82:90:
bf:6d:ca:02:76:ce:b4:ad:2a:18:5b:d0:f2:0a:cf:
94:a5:c1:d3:4f:f4:3c:95:9e:ee:8d:ea:d2:c7:6d:
ea:a5:bc:5d:75:ee:07:6a:f5:c1:2b:3c:23:1a:8c:
aa:31:be:9a:f2:41:ae:62:91:00:1f:df:eb:2d:22:
c3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A9:88:67:AA:E5:21:EC:0C:D7:B4:02:4F:42:E5:FD:0E:40:D1:07
X509v3 Authority Key Identifier:
keyid:D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ea:eb:56:3c:25:3a:e3:9c:0e:36:d7:a0:f0:59:e9:3f:dd:
63:88:0b:75:18:63:3f:0f:02:74:3f:13:eb:86:70:fb:bf:df:
83:64:d9:7e:2f:07:c4:cd:21:fd:74:65:d4:cb:45:79:01:93:
a4:dc:72:2d:c9:86:22:74:97:23:8e:c6:f9:58:a8:3b:c7:12:
a8:d2:c0:09:82:ca:34:e0:92:cc:dc:24:f5:d8:d6:2c:83:4f:
36:19:d7:4b:9e:d9:ad:f9:0c:7d:05:f4:9d:ee:ed:5c:6d:7d:
11:39:05:4c:f4:51:86:4e:b9:12:9f:17:23:f3:03:f8:ca:b0:
12:cb:df:78:b3:23:89:f0:53:ea:8f:b3:7c:8c:68:47:21:b5:
e5:55:a5:a4:f5:0e:d1:dc:c5:83:d3:b3:ca:bb:18:dc:b5:2f:
4f:92:08:11:d1:a1:dc:78:a2:7d:4b:7d:41:04:a0:3f:a9:ac:
8c:55:65:37:54:0e:a7:8d:23:9f:fc:9a:4e:2c:09:1d:86:da:
7e:aa:3b:df:0b:b9:5e:54:22:1c:a4:4b:78:69:0d:4d:f0:70:
74:69:f9:7e:f2:86:f8:88:b0:8b:4d:8c:d7:0b:42:68:ab:27:
0c:72:b9:57:0f:e8:f8:ae:73:75:5c:06:eb:12:e3:71:5b:09:
cb:e2:a1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:42:24 2025 by rpki-client