Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
File: 2JW-5WBWMPcEix_7PwA7OdKeR6A.mft (raw, json)
Hash identifier: n+04iM+jzrpIoRVLPb1Jcn61PBPXpUI2ePrN8RaS8uQ=
Subject key identifier: 44:0F:D4:F8:AD:C4:2B:A0:E6:D6:FB:45:D4:AE:B2:51:2B:2C:C9:14
Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Certificate serial: 019680FD8DA437449BB25603CB980F0F4323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
Manifest number: 0496
Signing time: Tue 29 Apr 2025 10:00:22 +0000
Manifest this update: Tue 29 Apr 2025 10:00:22 +0000
Manifest next update: Wed 30 Apr 2025 10:00:22 +0000
Files and hashes: 1: 2JW-5WBWMPcEix_7PwA7OdKeR6A.crl (hash: Mb8E8VTL3Z9weR3xKNHs68IK+KLBDFyol/xsugp7LVE=)
2: JfVg2a5pAi61HF6W0lENi_X8DUc.roa (hash: Mi/UBjA1CVg3EI0zZ/Mvz8hNoPR4p0IzucKiACeunmw=)
3: sLl8IyRQ7O2V3aDprs2XcWd9-Fc.roa (hash: Q0fY46XPSxXWXxA2rseUn7tBmmNzqG29JtQSVk/FutE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:8d:a4:37:44:9b:b2:56:03:cb:98:0f:0f:43:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Validity
Not Before: Apr 29 10:00:22 2025 GMT
Not After : Apr 30 10:00:22 2025 GMT
Subject: CN=440fd4f8adc42ba0e6d6fb45d4aeb2512b2cc914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2f:a8:c6:a3:c2:9f:9c:c2:35:19:e4:25:d3:
f0:54:c2:92:2b:0d:d2:e7:5c:bd:05:3e:67:10:3e:
24:a7:d4:51:4b:0b:c2:ef:96:29:69:30:32:6e:1d:
74:6f:ab:aa:bf:18:0a:26:81:74:0d:36:aa:c7:ff:
7b:a0:71:55:39:4e:64:8a:49:e3:06:f9:9a:7c:c4:
b9:ab:4b:fd:7d:d2:c1:17:5d:72:03:dd:4a:c7:a8:
6f:68:07:1d:27:92:a1:14:66:d4:ca:77:54:ed:22:
45:d6:dc:7e:d8:3c:fe:52:42:09:91:07:23:dc:b8:
7c:bc:67:77:38:00:2b:b6:2a:9a:e9:17:22:cd:24:
ed:9f:91:83:8a:66:8d:ab:3e:1a:42:cf:87:df:02:
9c:49:8f:b1:3d:fe:17:57:75:61:87:b1:86:a7:f8:
ab:2b:d4:b5:b7:12:bf:88:0e:0a:e6:96:f4:6b:c5:
3d:98:33:ee:c0:bc:4c:17:17:9e:8b:12:a6:e0:c7:
ff:8d:d6:7a:8c:d3:70:90:dd:7d:ac:a7:eb:5a:4d:
47:57:e0:83:c0:05:bc:45:b5:4a:8b:54:8c:c4:0c:
ef:73:d9:5b:1d:3e:e7:2c:39:2c:90:c9:59:39:2b:
b3:8e:43:ac:f6:d1:46:fa:69:e8:70:36:e1:7f:6e:
bf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0F:D4:F8:AD:C4:2B:A0:E6:D6:FB:45:D4:AE:B2:51:2B:2C:C9:14
X509v3 Authority Key Identifier:
keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3c:68:ef:f6:92:5b:c2:0d:a7:27:64:f7:b2:c5:c2:f7:da:
8e:0c:25:d1:de:34:d9:ed:71:8b:6d:b6:7b:bd:f0:77:00:70:
fb:47:7e:a2:a7:5b:aa:90:81:91:be:c1:02:cc:e2:4d:4e:bd:
35:48:4a:5a:f1:d3:c3:28:d8:14:3f:4a:d5:a2:fd:fc:97:df:
75:37:40:47:ae:07:95:e2:0a:88:2e:34:7b:e2:00:3a:cb:2d:
b0:07:81:97:d9:0b:f8:64:7b:5f:45:89:f3:8c:14:f2:83:e7:
6d:81:68:25:23:84:84:29:ba:71:9a:bb:6a:53:76:3d:d1:18:
ad:94:e4:99:e9:44:5c:0d:12:3e:c5:74:72:9c:dd:ef:98:3a:
b0:ac:bb:94:ab:8d:47:a8:11:73:6b:31:81:7d:63:79:d7:3d:
f6:5d:cb:13:4e:7e:43:d3:85:8c:11:6e:53:a2:be:56:6f:bc:
7f:0d:af:4f:f6:c0:54:8e:e6:73:1c:1c:f0:b7:28:0b:10:ea:
fd:e2:b9:8c:98:fc:39:27:03:98:dc:3a:f5:3b:4a:b6:40:fd:
e7:eb:43:65:8e:dc:29:62:ce:8d:0e:d9:92:2d:30:08:24:67:
f3:b4:b3:80:63:06:b2:9e:78:14:6e:1b:2e:88:ac:fe:f7:2c:
76:5f:40:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:24:34 2025 by rpki-client