Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
File: 2fkESVCev547D0LBzcIuPvQAdCY.mft (raw, json)
Hash identifier: n3XUC9EKHOGO65oSAtmlhBjJza6r24RiJ+DhK4Ko2gs=
Subject key identifier: 23:C3:67:87:EE:1D:D9:5C:D1:3B:29:C2:0C:FE:E6:7A:F2:CD:15:2E
Authority key identifier: D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
Certificate issuer: /CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Certificate serial: 019674C2C46238FFD4180BF59C322CDFC785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 01:00:43 +0000
Manifest this update: Sun 27 Apr 2025 01:00:43 +0000
Manifest next update: Mon 28 Apr 2025 01:00:43 +0000
Files and hashes: 1: 2fkESVCev547D0LBzcIuPvQAdCY.crl (hash: OwQGOEB82Ut7oE7eYt3eaM8r8bMO7LWuUcYNuHlkBvk=)
2: Kz3po1HxXV0o_QrY9XITSTFXVJI.roa (hash: VAFUPoAe7hllDMdDCgHvMZTasRHVjamq6QvBPj1A6Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:c4:62:38:ff:d4:18:0b:f5:9c:32:2c:df:c7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Validity
Not Before: Apr 27 01:00:43 2025 GMT
Not After : Apr 28 01:00:43 2025 GMT
Subject: CN=23c36787ee1dd95cd13b29c20cfee67af2cd152e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:af:54:06:e1:08:65:c0:a4:cd:af:ef:eb:
e6:e9:c0:a5:af:9b:df:57:da:17:21:85:16:52:f2:
6e:ee:cc:95:69:cd:f7:4b:b4:2e:f9:95:44:cb:ad:
19:2c:44:29:49:d0:d0:47:b7:d4:63:1f:55:f6:91:
d3:75:7b:4a:4d:86:60:77:a2:1e:1d:76:fd:08:a7:
5c:87:b0:be:83:50:7f:58:73:91:83:03:03:1f:a0:
01:e4:cd:9c:05:d6:d8:f1:e5:82:8d:a4:61:f2:72:
30:20:88:df:81:f4:74:64:2c:9b:48:c3:b1:d7:0a:
f0:6e:5c:90:db:ec:40:f4:4a:c5:e5:d1:fe:3d:7d:
ff:b2:e7:16:22:35:92:b0:2d:d2:ae:24:04:ae:f2:
83:c7:31:5c:a3:d4:e1:22:f1:0f:fd:8b:da:34:75:
1a:97:2f:10:3f:64:7b:2f:2c:29:9e:15:90:88:35:
a5:85:72:41:bc:ad:1a:96:46:4c:5b:b9:0e:01:5c:
5b:8a:a6:79:69:cf:7e:4f:e7:b6:b6:46:e6:db:18:
8f:94:21:75:8b:91:df:b4:8e:fe:60:0d:02:0a:0c:
75:b7:70:55:a9:14:c7:07:90:e3:61:a0:3b:ca:86:
96:60:e0:5d:00:1a:b3:e0:b8:21:e4:fd:6e:e2:e6:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C3:67:87:EE:1D:D9:5C:D1:3B:29:C2:0C:FE:E6:7A:F2:CD:15:2E
X509v3 Authority Key Identifier:
keyid:D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:da:02:39:41:46:9b:d3:70:66:7a:77:d1:01:de:0f:69:9a:
82:b2:75:77:ea:38:bd:be:48:e0:ce:b8:2c:ac:80:b9:7d:c5:
95:ac:44:7c:8a:0b:96:57:3a:bc:d7:c4:26:fc:64:31:bc:cc:
06:74:ce:6a:67:9d:0a:bf:e0:df:71:db:93:ba:a0:23:61:13:
b6:15:0f:b6:05:39:ad:b1:3a:41:fc:d0:7b:4b:7f:b6:02:20:
27:55:66:97:ec:ec:c7:19:f5:65:a6:9d:3a:65:0d:66:78:c0:
49:8a:82:46:b1:55:c1:10:4e:20:4f:a3:ad:cb:e8:f7:1f:35:
4f:10:0d:5b:31:72:11:96:48:29:a3:d2:d6:95:ec:18:b9:ae:
0a:91:fd:95:97:67:39:b9:ac:a0:0f:5f:fc:f4:be:55:41:89:
2a:85:14:b6:d9:7d:a1:e0:18:b0:df:cd:ed:1e:a2:ca:8d:a4:
56:b1:2a:10:eb:e0:d7:22:bd:07:df:b5:69:25:ab:56:c0:ca:
7e:9c:94:e6:55:57:75:c8:0c:0c:46:26:e8:ea:a2:6a:c4:d5:
b2:1b:20:28:0f:5b:5a:5f:53:c7:0a:56:7c:9c:eb:e7:e2:b9:
50:cb:5b:0e:d4:a5:94:86:b1:a6:0f:4e:89:2c:d5:fa:90:c3:
b3:33:c0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:08 2025 by rpki-client