Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
File: c_2uFQUEnkRtWw0USsyGDWwYFnw.mft (raw, json)
Hash identifier: pjoWPD87HUX4yFGueFyoTlFIRbBcZb4nWpeEBunbv9Y=
Subject key identifier: 87:78:63:CA:75:0B:D3:37:8D:71:90:DD:80:3B:82:9B:AF:70:D7:04
Authority key identifier: 73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
Certificate issuer: /CN=73fdae1505049e446d5b0d144acc860d6c18167c
Certificate serial: 019676433BBD4D95BC1B09F88778EC8F6659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 08:00:39 +0000
Manifest this update: Sun 27 Apr 2025 08:00:39 +0000
Manifest next update: Mon 28 Apr 2025 08:00:39 +0000
Files and hashes: 1: TTDv1twa5Oq2wS4kqb31Wa4mKwc.roa (hash: kNwC0HcE7BSu6NKB5QfTvVm3I8iIUDuBU4W9LJhw8AE=)
2: c_2uFQUEnkRtWw0USsyGDWwYFnw.crl (hash: A93dGcKKH58KdlSFh+W25EyviB4NQImvf6JICZcYc+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:3b:bd:4d:95:bc:1b:09:f8:87:78:ec:8f:66:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73fdae1505049e446d5b0d144acc860d6c18167c
Validity
Not Before: Apr 27 08:00:39 2025 GMT
Not After : Apr 28 08:00:39 2025 GMT
Subject: CN=877863ca750bd3378d7190dd803b829baf70d704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:eb:e4:dd:99:72:8f:ed:08:23:9e:1f:a3:
98:d0:6c:a0:e7:46:ad:d5:df:aa:32:98:c3:bc:87:
de:63:a0:18:ad:e9:5b:cf:81:66:42:19:4b:df:b9:
a7:e8:18:1c:cd:9b:ea:77:bb:be:bc:91:57:e9:39:
0e:c9:be:5e:22:7d:58:3f:7a:27:dd:28:b5:b6:34:
20:db:00:12:44:37:00:dd:79:bf:54:be:15:e0:5a:
8a:97:91:52:5c:a0:61:6d:b0:07:75:6e:5d:95:47:
e7:0f:24:5d:3f:5e:fb:93:62:e6:00:5b:20:1e:a9:
f4:4e:8b:c9:20:30:52:0d:ad:a2:0d:a3:47:4c:80:
de:ab:da:52:b7:86:09:de:79:b3:e8:fe:db:29:b1:
ad:d5:a5:b8:71:24:56:df:f8:90:5c:26:88:34:8b:
79:ea:90:04:a9:ce:65:7c:26:71:83:1b:8b:de:32:
8b:f0:bd:d3:92:f0:32:43:05:d5:d5:e1:2e:1d:49:
06:54:ac:91:4a:76:a3:83:99:52:ab:9c:96:bb:96:
18:56:ce:04:20:36:58:49:ac:15:5c:a5:41:68:4a:
10:13:67:16:c6:b9:bf:76:b4:cd:0f:90:0f:e0:86:
5e:8a:7c:f0:74:5d:4c:57:2e:f2:94:7f:87:9d:09:
f2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:78:63:CA:75:0B:D3:37:8D:71:90:DD:80:3B:82:9B:AF:70:D7:04
X509v3 Authority Key Identifier:
keyid:73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bd:ca:38:df:2d:30:1d:3a:11:77:c2:73:09:33:bb:28:7a:
bc:06:b9:9b:a1:d5:e5:e8:f1:0a:fe:ed:05:fe:c5:12:94:53:
cc:ff:a7:d5:00:c4:c3:20:20:24:fb:0f:ac:92:43:e4:68:30:
fd:d8:37:ea:78:e1:32:26:0a:81:dc:36:00:21:9d:19:8f:da:
4b:ba:33:41:05:26:7f:a8:68:79:2e:39:11:d6:da:ad:b1:b2:
a7:6e:40:97:7c:7e:5f:81:0f:38:10:d2:ca:09:08:a9:ea:c5:
fa:8b:ba:00:a7:35:82:de:96:c7:96:12:80:3a:99:4c:2c:05:
32:b9:29:6c:36:a4:be:42:43:a9:c6:cc:d3:d0:4b:25:cd:01:
c6:60:ba:a6:65:30:ea:eb:4b:54:25:ec:ae:cb:90:d6:2b:9e:
b0:34:b4:22:45:b0:47:f7:7b:f3:29:68:0b:b8:ad:7e:ed:bd:
7e:36:0e:de:e4:aa:8a:85:98:ec:3e:ba:68:68:24:a2:cc:34:
fc:b1:9a:0e:b4:c9:1a:0a:71:f2:e2:6e:15:09:ce:09:34:2d:
ab:69:f7:28:57:ea:b3:19:a9:e5:88:44:87:e5:38:d1:b4:90:
45:e5:37:b5:49:c0:43:f4:90:59:fa:cc:53:51:be:50:a6:ac:
b4:5b:af:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:17:36 2025 by rpki-client