Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: prhVbl0kpQLoflrvRq2jpgjiBBYDuNuG/gcxdmjNUKk=
Subject key identifier: 9B:4E:AF:E9:1A:1D:AA:87:41:AA:44:66:58:C2:85:7B:49:61:03:E0
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 0196711D2B96D82D79F8CA62C4F910028CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 0FFD
Signing time: Sat 26 Apr 2025 08:00:59 +0000
Manifest this update: Sat 26 Apr 2025 08:00:59 +0000
Manifest next update: Sun 27 Apr 2025 08:00:59 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: 4WNpp4gazbiVpm5mlib+udnAtKdjIk5y6YVvL3dkEvU=)
2: 5r48m6LwdUF-gCceLh7AqyrOiZ4.roa (hash: no4HIwwmaMXS1bWboIJJAJUa6vaq1ilfDIOPMvTt0Gk=)
3: v3UNc2uLxbw1W395JPUfkX1XdHM.roa (hash: ONK2ss60v9RJWESExklW1BejOYwotbhdESrPsXTp27U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:1d:2b:96:d8:2d:79:f8:ca:62:c4:f9:10:02:8c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Apr 26 08:00:59 2025 GMT
Not After : Apr 27 08:00:59 2025 GMT
Subject: CN=9b4eafe91a1daa8741aa446658c2857b496103e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d2:6a:6b:b9:8e:3b:74:fa:11:73:4b:cc:38:
b9:13:2a:f4:4e:38:05:02:5b:e9:b1:4c:2e:89:63:
c8:ea:13:a2:93:58:82:30:f9:73:42:c2:38:ea:d2:
e9:d5:ea:7d:0b:47:79:42:09:dc:2b:af:d2:55:8a:
9f:bf:09:0e:25:5a:bf:16:21:09:96:96:06:28:8f:
87:40:0f:78:43:fc:81:49:9c:82:5a:cc:58:64:50:
21:c8:c4:64:97:6c:54:c8:ef:98:b8:3c:af:23:db:
7e:31:fd:e2:35:1c:a7:6f:a4:f6:c8:49:62:42:a4:
f3:b0:87:74:92:27:f7:4a:c3:52:aa:9d:2d:53:2b:
b9:d1:99:61:69:63:b8:85:46:17:fb:45:3d:55:b7:
76:72:a1:bc:28:81:52:89:58:19:dc:39:28:26:57:
9f:c8:18:fa:e6:c7:21:48:8d:dc:28:7a:93:2c:7a:
bb:9d:07:b5:45:51:ed:06:70:ce:bb:01:ba:5b:89:
b1:92:28:98:41:1d:1f:05:1f:7c:58:4d:8c:ab:ce:
ee:19:74:75:77:f7:1c:80:13:50:f7:99:24:f3:0e:
dc:cd:ff:9c:ca:16:81:a3:60:20:6f:77:98:ac:b7:
2f:d1:51:80:f9:76:80:5c:77:ec:1d:c0:29:50:a0:
7e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4E:AF:E9:1A:1D:AA:87:41:AA:44:66:58:C2:85:7B:49:61:03:E0
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:67:3d:a9:7e:77:c4:97:48:ab:09:5d:44:f7:3d:87:5b:03:
50:07:52:b7:93:e0:48:4c:a0:c2:c1:28:c9:02:33:70:f4:a7:
db:0f:71:f2:b8:0b:3f:3e:c0:e5:b7:f3:da:3e:6a:e4:cc:8a:
8a:19:ec:57:11:10:43:62:5f:80:74:50:eb:e8:d7:b2:e0:11:
23:64:21:ce:18:2e:d7:51:db:e3:ff:ad:fa:22:0d:ee:10:51:
c4:ac:df:fe:29:f1:29:2f:51:5d:29:1a:54:86:70:c1:fe:84:
62:6a:7b:2a:6f:48:98:b9:da:e7:cc:08:b0:24:aa:df:37:fd:
11:76:d6:1d:f9:b3:f8:85:28:7a:8c:30:9b:0d:90:8a:8e:29:
4c:0a:54:07:00:93:bf:64:66:bd:a5:bd:66:d8:fc:d2:20:aa:
ce:22:35:32:42:cf:0b:cb:08:a4:44:f9:6a:a4:98:5e:8a:2a:
c3:48:70:66:af:b0:92:49:5f:78:92:54:16:4d:97:da:5d:aa:
dd:4d:8f:56:9e:8f:40:01:06:ef:3d:3a:3b:d3:cb:63:9e:d3:
1d:ac:3f:0b:91:4f:50:62:4d:e6:01:c8:16:cf:3b:36:38:41:
94:54:3e:cb:13:24:a2:45:0e:29:bf:43:03:62:4d:24:90:11:
fe:4f:d4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:03:00 2025 by rpki-client