Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
File: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft (raw, json)
Hash identifier: Z/8fFOlvQg0q2dEmoF5O4xVxq3orK90OJ246Cgaw2QM=
Subject key identifier: 27:D4:49:FC:D7:08:BE:19:4D:2F:B4:EF:8F:02:03:29:DA:22:86:EA
Authority key identifier: D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
Certificate issuer: /CN=d977120937500eb46696428962e510e02c348e6c
Certificate serial: 01968ADC7B6887175DB6E120C83FFCD3338D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
Manifest number: 0C01
Signing time: Thu 01 May 2025 08:00:27 +0000
Manifest this update: Thu 01 May 2025 08:00:27 +0000
Manifest next update: Fri 02 May 2025 08:00:27 +0000
Files and hashes: 1: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl (hash: hh8r+9BI5YGsGUpcRtmM9/0xcK4InCC3IjivmXGAVtw=)
2: ABCdWHfeRuB4x9Cfjqm_Nsu7Efc.roa (hash: bp8ugvHYl4CGZn0o8RUyCE5vXn4l+aGFTzhE2reh5sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:dc:7b:68:87:17:5d:b6:e1:20:c8:3f:fc:d3:33:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d977120937500eb46696428962e510e02c348e6c
Validity
Not Before: May 1 08:00:27 2025 GMT
Not After : May 2 08:00:27 2025 GMT
Subject: CN=27d449fcd708be194d2fb4ef8f020329da2286ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:ad:3b:a7:3f:51:96:a5:30:47:a6:c7:77:
18:df:d7:96:3c:ea:fd:7e:b5:5d:a8:eb:61:33:9f:
c4:df:c8:e3:fe:cd:ff:53:c4:99:00:3e:86:91:fd:
8e:6d:27:e0:8c:d1:eb:55:70:71:ba:31:79:9c:0f:
4d:25:39:82:37:79:f8:e0:e8:0e:ff:9d:c6:cb:d9:
ee:3d:9e:08:df:09:75:78:b4:03:d8:27:12:b2:19:
95:f8:7d:f5:fc:71:ce:f2:64:a7:58:e0:e8:e3:1f:
b3:8d:0a:ec:4a:d1:d5:51:4b:e0:af:cd:80:ed:4d:
d7:62:c4:b6:2b:6a:04:19:8f:1a:92:9a:83:f5:40:
4d:3a:d8:95:f3:d1:46:f6:cd:d3:38:23:64:12:56:
e7:d6:c7:d8:61:b2:9e:31:a7:3c:0d:22:d0:da:25:
9e:b7:1d:23:11:9e:68:c1:ac:81:8e:6d:45:6b:6b:
70:a3:c2:12:c9:66:22:8d:32:5f:e5:7e:0e:84:e6:
3f:8c:24:fb:c2:a9:3b:7c:37:b1:15:92:9f:07:90:
54:35:ab:9b:24:bc:c7:d8:95:c6:9f:0a:bf:82:e5:
95:28:b2:99:da:0b:b0:43:06:7b:0c:cb:cc:4d:de:
0d:b2:fb:97:03:98:b3:24:6a:83:65:7c:82:bd:fe:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D4:49:FC:D7:08:BE:19:4D:2F:B4:EF:8F:02:03:29:DA:22:86:EA
X509v3 Authority Key Identifier:
keyid:D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:07:a9:9c:d1:2b:9b:02:58:1a:1f:ef:e1:12:82:a7:9e:4b:
e5:be:d1:6b:7a:b2:64:3a:5c:fe:ad:20:78:3f:d0:19:14:b0:
d6:83:31:fe:48:3a:2b:19:52:e5:3b:1d:21:6b:e6:1d:a0:2f:
49:a3:0a:45:29:9b:7a:f3:80:77:0a:9d:1b:29:74:3e:0c:52:
fa:1e:18:b7:92:66:8c:58:46:11:ce:63:36:f4:c2:c5:a3:da:
38:f2:e5:87:75:6e:97:18:2f:a8:8a:e6:48:ff:b6:87:7d:e5:
b2:e6:08:50:88:90:1f:fc:f7:33:24:70:31:9f:66:ee:7e:0c:
9d:5e:08:ae:72:d9:bb:23:d5:5c:41:64:ef:62:5c:2d:6f:49:
9d:8c:89:4c:70:cb:00:1e:24:d5:26:00:bd:c8:d1:42:0b:d0:
eb:7a:23:bb:87:30:42:28:9c:78:2e:2f:84:06:26:98:19:f5:
e5:00:27:92:f7:b4:ae:e5:34:ed:40:81:d2:7c:6f:01:8a:15:
1c:5f:d5:49:66:31:0d:2d:29:a9:7e:dc:8e:a8:b9:22:1b:69:
54:7c:20:fc:13:b1:63:c3:52:69:7f:17:8b:91:c4:5c:0a:47:
8a:97:1a:32:30:cc:c2:66:42:18:48:79:3d:03:67:ea:c4:09:
91:b3:97:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:19:51 2025 by rpki-client