Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: TpKxJC0/kAkE+TQ04n1V3AgpM+6cU9KixB34w+PUUUE=
Subject key identifier: 24:00:18:DB:30:33:CD:5C:C1:FE:B9:8D:E7:07:9D:A8:45:64:CB:53
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 01968B136B2E4D37544AD46F14C01E78111C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 0EBE
Signing time: Thu 01 May 2025 09:00:27 +0000
Manifest this update: Thu 01 May 2025 09:00:27 +0000
Manifest next update: Fri 02 May 2025 09:00:27 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: BlYULl+xD02/kcKVfbmZpOwOhOG3LDyS3Qs/bYDDJPg=)
2: lh0r2c2rRWOg01uWo5CM03GyM1s.roa (hash: k3pD8AzqS8DbrBmJNcxRYtTDyImlclNux7CY8s079js=)
3: uTLyh0W8m68_V2bMQcHtyK_zdWA.roa (hash: 2XUbaOIwLIl96z8qId5rz9LYBuQvv5k3VK/Av3lKN20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:6b:2e:4d:37:54:4a:d4:6f:14:c0:1e:78:11:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: May 1 09:00:27 2025 GMT
Not After : May 2 09:00:27 2025 GMT
Subject: CN=240018db3033cd5cc1feb98de7079da84564cb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:84:df:7b:11:6e:9a:74:c8:0c:64:9f:57:de:
4b:88:61:3f:33:d7:39:8b:0f:45:d8:99:09:37:a3:
45:64:6f:5a:c8:f0:10:ca:60:90:56:1f:8e:24:56:
cc:8b:ce:b2:51:09:3d:25:b8:8b:9d:fa:20:47:c6:
2b:b2:c2:49:c4:33:d6:03:9e:81:89:41:b0:de:6e:
4a:5c:ba:c0:88:5e:db:30:5e:d4:91:72:af:d0:ad:
6d:34:1d:1d:4e:7b:c5:1b:4f:35:ce:33:26:ac:56:
fd:35:93:22:1d:2d:fb:df:d4:9c:2d:9e:2f:57:44:
db:39:27:d7:b2:c1:03:7f:7e:fe:d7:37:9a:df:f5:
87:75:db:47:99:e9:2f:3b:48:ef:fa:c0:4f:7d:56:
aa:cd:3f:9b:31:34:68:c8:c8:0e:45:f6:9d:1a:ec:
59:40:d8:9d:aa:c6:e7:8f:19:86:19:19:6c:06:e8:
aa:69:b8:6a:7e:cf:b9:db:e0:9b:ce:b4:14:c1:a6:
a9:40:26:09:1c:53:ac:e0:d0:1e:bc:41:32:13:89:
e4:a9:74:b6:53:38:76:ac:88:96:a5:3a:9a:cd:d2:
61:ed:ce:f5:4a:6c:c6:30:36:5e:91:82:cd:e2:d4:
ae:0b:42:10:08:af:89:2c:1b:b0:34:60:a8:16:94:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:00:18:DB:30:33:CD:5C:C1:FE:B9:8D:E7:07:9D:A8:45:64:CB:53
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5f:af:7b:e2:3b:09:41:0e:3d:8d:23:f5:9a:ff:d6:9d:f5:
04:52:42:3d:52:c9:e1:74:e1:5a:67:1b:ec:ec:c6:0b:25:25:
4d:67:15:bf:1a:5e:7a:4c:0e:a2:8a:4a:7e:4a:95:82:d0:34:
fd:9c:53:e2:8e:a1:4d:53:93:28:2b:4e:d1:f2:41:8c:fd:f4:
19:51:df:94:25:c9:a0:f3:ec:4d:f0:bf:8b:34:a5:f5:b4:53:
5c:e8:13:cd:92:51:69:c3:7e:d3:0f:4f:57:29:62:ec:90:c0:
5f:12:b6:cf:a5:96:75:db:a4:fa:01:78:b7:94:a4:10:3f:bb:
cb:3b:3f:12:cd:8f:e8:59:aa:e0:7d:86:10:e0:94:27:d7:45:
f3:e5:c8:2e:ae:49:35:0c:05:0a:42:29:01:02:67:cf:fc:96:
b1:5d:2b:fc:a8:f1:d9:b0:79:94:84:d6:8b:78:ae:20:6e:c4:
05:90:ba:c4:5f:87:10:ce:44:ce:7e:f5:63:9c:c1:50:ca:89:
45:94:5e:fb:0d:1f:be:51:dc:79:60:08:f5:5c:44:c0:c9:71:
1b:22:18:02:fe:a5:2c:bc:71:d7:13:e4:40:23:18:0d:41:56:
7c:b6:28:55:e1:e3:ee:da:df:e9:bc:19:b8:e7:6a:47:87:b9:
e7:e3:e2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:14:34 2025 by rpki-client