Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
File: 2PcA7rBSdLMdwdrzDNfIExCrRS0.mft (raw, json)
Hash identifier: mVqqeVFTfvJ0JmtiSakyGAdd9d6xwu2ak/x+JVyGjlk=
Subject key identifier: 04:46:C4:01:AC:C2:15:40:90:BA:25:03:82:61:74:E9:70:FA:51:D2
Authority key identifier: D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
Certificate issuer: /CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Certificate serial: 0196760C47DD19034947B8AFBA961804A109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
Manifest number: 074B
Signing time: Sun 27 Apr 2025 07:00:38 +0000
Manifest this update: Sun 27 Apr 2025 07:00:38 +0000
Manifest next update: Mon 28 Apr 2025 07:00:38 +0000
Files and hashes: 1: 2PcA7rBSdLMdwdrzDNfIExCrRS0.crl (hash: yv90sxMAnc1qAswc4gDK/yYbR2vFazOmGMda7jHmnBo=)
2: xZeFO5Zwl5xEF1LyaSp03R5_7jg.roa (hash: IWeEq50Ry3wHX8kf3jXxRipWlWHUzhkegAPH2nDXTxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:47:dd:19:03:49:47:b8:af:ba:96:18:04:a1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Validity
Not Before: Apr 27 07:00:38 2025 GMT
Not After : Apr 28 07:00:38 2025 GMT
Subject: CN=0446c401acc2154090ba2503826174e970fa51d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:b1:b8:42:0d:ef:81:33:10:13:9a:64:ce:
14:e3:02:cb:4d:f0:4c:27:2f:b4:11:5b:d3:08:86:
d4:ce:bc:ea:80:97:10:bf:33:45:00:2d:af:be:5b:
92:50:89:8a:b5:65:2f:a4:f1:1d:06:ca:8d:a7:8a:
b7:bd:0f:d0:c6:73:9e:f6:b5:46:6a:9b:b3:99:e3:
82:5e:60:f6:08:d5:9d:98:69:11:c1:34:54:b2:ba:
95:52:40:df:2b:91:f4:0c:44:8e:1b:00:3a:9d:f3:
07:d9:89:87:e8:01:af:ca:84:ee:de:b2:5a:84:99:
a1:28:2f:27:04:f2:6f:4c:a0:b2:30:f5:fa:b8:96:
69:36:c8:48:30:72:99:4d:79:af:2c:ef:43:c6:f3:
39:8b:7f:fd:b7:3b:61:f3:6f:5a:b0:b3:d0:23:62:
ed:fe:ec:a6:9a:3d:7f:36:7d:09:c5:6e:48:a0:1a:
9e:a5:75:de:cc:71:e6:cf:8b:f2:82:2e:5a:45:3d:
ed:8e:09:6d:22:f3:7a:39:3c:5a:34:49:0d:0f:ac:
ae:78:c6:63:2c:c0:b3:bc:b5:e3:30:16:f8:10:4f:
6a:e9:2e:6e:ac:d4:11:f2:b9:12:50:56:05:5a:6e:
fe:a0:ac:6f:8c:0b:ca:46:a2:1c:c8:36:3e:c7:1f:
99:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:46:C4:01:AC:C2:15:40:90:BA:25:03:82:61:74:E9:70:FA:51:D2
X509v3 Authority Key Identifier:
keyid:D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:16:50:4b:8b:e6:6c:12:cd:58:1e:dd:8b:5e:32:2c:c1:d6:
79:ec:5a:df:7d:63:47:7c:ac:ba:b2:59:22:db:24:9b:95:59:
9b:ea:50:1e:42:64:6d:26:00:bb:ff:e5:b2:ed:cb:e8:73:a1:
f9:1e:d5:df:72:ab:bf:6e:b1:f1:b9:21:4d:ec:97:ea:cc:c8:
e9:a1:cf:6f:b9:c2:c0:c5:30:ca:1d:d2:62:5b:eb:aa:12:0f:
37:34:ae:09:d8:08:0e:16:b5:fd:3e:03:9f:70:4b:ff:68:af:
19:9b:35:82:be:56:f0:3c:21:81:85:09:07:bb:62:23:f5:26:
a4:4d:21:f8:1b:46:36:a8:bf:41:06:94:51:f2:9a:82:8b:af:
10:8a:5e:54:2e:d7:46:c1:65:6d:6f:8e:27:76:56:e8:ab:19:
bb:3b:c4:23:6f:19:18:71:fc:36:15:ce:3d:b3:be:b2:9c:47:
5a:5c:09:5a:a7:d5:6c:2c:e8:56:b8:fc:6c:91:e0:a8:74:85:
e6:11:70:e7:9c:55:d7:bb:d8:db:14:36:c7:80:4d:61:9e:9c:
3a:5f:b6:b7:47:42:3b:36:e4:de:f4:89:bf:9a:7f:51:69:e0:
17:43:29:a3:03:03:22:1f:28:fc:28:c0:3a:aa:2c:09:e8:26:
6b:80:86:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:44:02 2025 by rpki-client