Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
File: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft (raw, json)
Hash identifier: Eb9VKBLNcQfPTi5lEUXfMq0oSsNVcUDZ9vbFUAj3NjY=
Subject key identifier: E1:99:8E:F6:EB:56:E7:46:2F:1E:3E:24:5B:76:71:50:86:7D:D1:B0
Authority key identifier: D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
Certificate issuer: /CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Certificate serial: 019679EA134BAD387479F1E83F5A19D21C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
Manifest number: 0617
Signing time: Mon 28 Apr 2025 01:01:45 +0000
Manifest this update: Mon 28 Apr 2025 01:01:45 +0000
Manifest next update: Tue 29 Apr 2025 01:01:45 +0000
Files and hashes: 1: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl (hash: FZcwTPJ8mXDb2rZI2bFNU8F7bK2XIVwrum2nGaURwW4=)
2: VyRcdQegnHw4kuW58Uqx25GobPA.roa (hash: lC++tHS3x+n6tHU4vit/ETgEcE0Z4ZJ+bg8pO+7AhEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:ea:13:4b:ad:38:74:79:f1:e8:3f:5a:19:d2:1c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Validity
Not Before: Apr 28 01:01:45 2025 GMT
Not After : Apr 29 01:01:45 2025 GMT
Subject: CN=e1998ef6eb56e7462f1e3e245b767150867dd1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:32:01:4b:3e:22:69:f4:3e:c5:1e:9e:0f:
63:c5:16:53:4b:2c:a2:e8:19:0e:59:84:d5:31:73:
81:6a:d1:51:6a:da:78:f6:02:fe:ed:55:f8:0d:b9:
e6:ad:02:f7:ef:c8:75:2b:2e:81:be:30:54:7f:35:
c9:03:d0:33:2f:9b:09:65:5a:b3:30:93:83:d3:fb:
56:9f:11:45:9b:47:d3:97:ce:f2:38:ee:25:36:e3:
ec:61:45:42:d6:4d:fe:dc:8d:b3:8c:0f:73:a8:e5:
51:6b:5d:5f:88:aa:6c:7d:26:9b:1f:21:c9:24:1c:
30:77:86:a1:f1:27:01:d8:ab:28:db:58:51:23:bd:
a9:60:d4:8e:ba:37:b1:1b:60:df:d7:8b:f2:bc:56:
af:d8:3e:67:cf:01:f1:b5:9b:4f:8b:db:9a:67:58:
ab:79:70:e1:6d:0c:bb:58:46:b9:3e:66:ca:22:b4:
8e:aa:4b:1a:e8:26:7d:24:20:50:c4:05:27:60:63:
f9:43:69:55:fe:44:54:d5:57:b6:52:e5:3f:a9:12:
90:f7:c2:cd:cd:c3:97:af:77:b7:eb:31:06:ae:fb:
d2:9b:b2:e2:b7:ed:f3:fa:33:08:ec:44:ff:a2:a0:
64:af:09:49:b8:ee:4b:64:ba:16:b2:f7:b6:6b:e4:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:99:8E:F6:EB:56:E7:46:2F:1E:3E:24:5B:76:71:50:86:7D:D1:B0
X509v3 Authority Key Identifier:
keyid:D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7c:1c:99:9e:26:b5:70:64:da:65:45:09:fd:b2:9b:87:18:
93:12:09:ca:a6:a1:4c:bc:fe:64:7b:1d:49:d6:c7:bf:10:4a:
c8:13:0c:66:3a:2a:f6:3a:33:ac:9f:a5:88:17:b0:43:a3:2e:
f2:f3:42:4b:9f:28:eb:84:d5:dd:8b:dd:37:cb:c4:eb:39:35:
98:8b:89:05:33:5e:e0:82:74:e2:1e:97:3e:20:7e:e7:d7:1a:
67:9f:69:3b:2e:9a:5c:8c:30:4f:91:08:c0:43:d6:1c:d8:4e:
33:0c:ed:6d:c6:08:f3:ad:a2:14:5c:70:07:a6:e9:c3:12:ea:
39:4a:0c:26:a1:0a:ca:2e:aa:9c:45:3f:ed:d1:5b:1a:f2:60:
99:d0:e4:cc:60:17:44:1c:ad:43:12:8e:64:20:21:79:c5:22:
b7:1d:26:20:97:d0:03:c0:c4:2f:73:0a:11:85:19:84:3c:f5:
3c:91:4f:f3:42:1e:da:46:98:23:97:ba:90:20:d9:e5:a8:0c:
63:04:94:e6:1e:a8:54:54:52:84:3b:ee:9e:54:62:9f:9a:c3:
e6:c5:97:b4:2a:0a:47:39:14:b3:a1:57:a8:2f:27:ad:3a:59:
28:a6:30:7e:5c:f6:4e:fa:e7:9e:f8:ae:55:d6:38:e8:25:86:
42:12:6e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:50:30 2025 by rpki-client