Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json)
Hash identifier: te8nwlTiuLRSIQf4wbbzOjXBhUS351M+o4vWmETdW+k=
Subject key identifier: CA:62:AF:CF:0F:D8:A6:64:C2:E3:E8:A5:14:6B:E5:1D:CA:70:E4:BB
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial: 01967230565A9F63EF7B691B9FE4D8E03552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
Manifest number: 075B
Signing time: Sat 26 Apr 2025 13:01:32 +0000
Manifest this update: Sat 26 Apr 2025 13:01:32 +0000
Manifest next update: Sun 27 Apr 2025 13:01:32 +0000
Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: tWCb4nY35Euw/GNr0/ieSj/qhjDmzjePpJ2SLcNWRG8=)
2: YJat0ypVBvGXuB7rjLWwFO_ieuE.roa (hash: Bzr6PKNVWT81WpGDtx96KwCGccLFdxLbMZpJWozgbYk=)
3: a-DVKI8WfcIKstVjJWQ3OLGtrMc.roa (hash: Os4LMnRVFwmNof1gyfyoqeIulxI3OJGZj7GrAyJ745Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:30:56:5a:9f:63:ef:7b:69:1b:9f:e4:d8:e0:35:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Validity
Not Before: Apr 26 13:01:32 2025 GMT
Not After : Apr 27 13:01:32 2025 GMT
Subject: CN=ca62afcf0fd8a664c2e3e8a5146be51dca70e4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:d0:f1:4c:1a:b2:02:02:f6:a6:20:07:fc:
de:9a:4d:d6:2a:d8:5c:17:bd:df:15:99:e9:1d:46:
33:06:14:e8:b7:38:24:d9:e1:7f:a4:cd:69:af:12:
ce:41:2d:09:78:2a:a0:30:99:01:3e:45:ef:19:04:
5f:7d:0f:f4:63:de:a0:10:43:19:bc:30:7e:0c:d7:
59:b5:58:70:ce:ef:43:8e:9a:7e:80:db:8b:15:c3:
42:01:b7:ae:fb:f4:ea:8f:2f:58:23:ff:14:50:41:
16:c2:93:7d:94:a1:d1:50:a9:19:7f:16:f4:3d:88:
07:b6:69:8b:f1:c8:05:45:87:c2:f0:e6:c6:c3:7c:
95:f5:2f:17:6c:7c:ff:bc:5f:15:99:d0:71:37:be:
38:1a:95:d8:8e:7d:4c:53:48:3d:12:50:96:a5:4a:
42:44:24:58:ee:9a:4b:74:cf:35:e9:fe:c4:fa:2d:
9b:c0:b7:8c:b8:a5:98:d8:07:7c:60:75:07:12:e4:
dd:4b:14:f4:dc:bb:ef:17:df:9c:e5:a8:4c:00:b8:
e0:63:66:96:a0:c6:30:95:64:57:da:81:b2:29:a3:
47:98:96:0c:e0:45:b1:6b:01:67:e9:d7:48:01:c8:
f1:80:e5:83:76:fe:0e:25:e7:0d:af:20:ae:65:44:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:62:AF:CF:0F:D8:A6:64:C2:E3:E8:A5:14:6B:E5:1D:CA:70:E4:BB
X509v3 Authority Key Identifier:
keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b4:e9:b2:e6:a1:36:36:fe:9b:b9:b7:c5:3c:a3:43:92:ff:
7f:a5:da:1b:5a:36:c3:23:64:2e:64:89:e1:08:52:a2:0a:b5:
d0:5c:09:92:9e:41:b5:c5:c1:96:6a:94:9e:e7:c0:66:b8:b3:
bb:05:2a:ba:c8:0a:af:fe:d1:05:ef:7a:e9:c3:05:b1:92:89:
87:3b:f4:02:ee:9b:c9:cb:32:ad:cb:3a:57:f7:fb:65:da:11:
f9:29:c5:aa:c2:25:57:79:85:e0:4b:77:e9:91:22:c4:60:c5:
c1:98:bb:ac:ff:e7:26:f4:5b:e4:36:4d:83:a0:18:b2:10:44:
55:fa:ec:e3:f4:7e:ae:53:5c:85:82:c9:2f:6a:c8:ff:48:c7:
40:9b:3d:65:c6:5d:59:8b:4a:5f:c8:23:3a:95:88:63:52:e2:
99:c2:43:5d:4b:ac:61:6a:3d:51:22:7a:0b:c9:67:fd:b3:13:
ba:11:62:f4:4d:65:5a:df:d1:61:df:85:71:f5:11:2f:ee:48:
3c:20:36:5c:a9:9e:0e:0e:5c:ac:c4:57:ee:31:f7:2b:8c:45:
6a:2e:5b:90:50:17:5e:60:52:95:bc:e4:89:12:b5:d7:9f:81:
72:39:0d:79:ca:fc:f7:4a:57:7f:4d:1a:82:dd:2a:8f:dd:f8:
64:1f:11:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:00:09 2025 by rpki-client