Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier: 138DSEraGl7y8PNS4za8Bieh7yQQxSEHF9lpgtpNToo=
Subject key identifier: 78:E4:0C:77:01:48:4E:12:21:44:02:A7:B2:3F:2D:56:EC:42:62:23
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial: 019677FB9D71946A487C701F97D860AADB48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number: 0445
Signing time: Sun 27 Apr 2025 16:01:40 +0000
Manifest this update: Sun 27 Apr 2025 16:01:40 +0000
Manifest next update: Mon 28 Apr 2025 16:01:40 +0000
Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: RcRC5eyCYLOtUZYDnHrOkpFU8/gPxN5cdx8v/r0gzjo=)
2: zTObV0m25qLongdbMc1UK5cdDfM.roa (hash: 4vzLfRUXikN+jtLHjiPgkfjEI9Bc4I9hoP/W6i8Z0Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:9d:71:94:6a:48:7c:70:1f:97:d8:60:aa:db:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Validity
Not Before: Apr 27 16:01:40 2025 GMT
Not After : Apr 28 16:01:40 2025 GMT
Subject: CN=78e40c7701484e12214402a7b23f2d56ec426223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:cb:62:27:61:48:33:6b:f7:04:e9:c2:d4:
d5:c5:b6:c7:66:5a:ed:90:e1:8d:5b:98:ce:1f:98:
9e:81:79:dc:52:82:6d:bc:30:f0:5f:9a:95:d1:bf:
e6:c2:0b:9c:2a:38:81:63:0c:9e:dd:5b:e1:3f:05:
b7:75:de:59:f6:7e:83:c2:98:27:2f:85:bc:d0:01:
97:30:db:e5:7a:43:38:92:81:23:ce:8d:b8:52:7e:
8c:92:8a:a4:78:e2:26:7c:20:b1:fe:90:d1:49:78:
96:7e:d0:4a:56:0e:1a:81:0d:ee:a9:0c:b4:70:79:
58:43:ff:8d:4a:b7:c3:2c:40:d0:45:5c:56:38:a7:
b8:a3:48:24:bf:04:a9:80:11:14:ca:47:a9:d3:5b:
f6:75:33:ef:a3:ec:1c:1f:19:95:76:6e:05:e0:d3:
87:2a:d9:e5:be:69:a2:e8:88:9b:50:94:5e:81:06:
44:f1:22:91:25:fa:8a:6b:65:7d:5b:54:b7:aa:42:
55:62:c2:d6:bb:f4:1b:a7:a8:a5:58:89:35:16:da:
16:0c:61:a2:d5:b9:71:70:01:06:d5:4d:c6:5b:b0:
47:2e:34:ce:cc:2b:ee:1f:29:9f:94:96:e0:05:6a:
86:b3:bd:28:12:78:f0:eb:d3:87:ca:52:6f:3b:12:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E4:0C:77:01:48:4E:12:21:44:02:A7:B2:3F:2D:56:EC:42:62:23
X509v3 Authority Key Identifier:
keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:23:79:f9:8e:a4:f3:86:af:fe:94:e4:6e:8f:1c:4e:bb:33:
d4:b9:3d:be:0a:31:81:f9:29:e5:e4:31:8b:ec:17:80:2e:90:
13:ae:b1:2d:86:b7:47:22:32:97:e3:86:62:92:e2:9b:a4:14:
19:3e:c7:cb:b6:5f:b0:8d:2f:dc:8d:53:16:ef:d1:b6:4f:dd:
88:f1:a4:0c:9d:59:5d:c1:77:bd:23:76:a8:97:db:d2:71:83:
0c:45:b2:97:df:2b:ff:e5:ff:56:08:54:4b:47:4d:82:66:74:
a4:7f:a1:f7:ad:09:e0:44:96:59:e2:47:f5:77:eb:f2:d1:50:
04:2b:b8:56:cb:d9:b0:1e:ed:a9:7d:4c:13:69:f1:c1:f7:49:
04:6a:cb:bc:2b:8f:cd:d9:ed:a0:00:60:f5:61:d0:11:86:33:
e0:6b:9a:84:a3:06:a1:86:7a:2d:68:e9:82:f3:21:0d:ea:6f:
f2:b1:62:11:13:23:ba:02:92:aa:df:c4:db:0a:ac:dd:84:a8:
0c:26:06:96:72:ba:b9:0e:96:bc:70:83:f4:fd:f9:06:1a:02:
a9:de:09:88:a4:9e:90:78:1a:c2:16:02:27:d2:45:4a:e8:eb:
cb:d5:b3:f3:7d:62:8b:bc:06:19:9a:d3:01:7b:50:75:ee:97:
5c:a8:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:19:54 2025 by rpki-client