Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: aG4ucdQuapDuT5iSt8fXt8sPFVfqwQM869x8QYxCKxw=
Subject key identifier: B1:68:EE:7C:E0:DE:CD:16:35:33:AD:96:40:91:BE:05:63:33:49:8F
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 019671C1FEC5D5D6D60B17E983C141EC049A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 150F
Signing time: Sat 26 Apr 2025 11:01:01 +0000
Manifest this update: Sat 26 Apr 2025 11:01:01 +0000
Manifest next update: Sun 27 Apr 2025 11:01:01 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: M8c+9AQd5zEor+dUQQcybW4Y77XLVtFfPMDR8HUnKJ8=)
2: 4E-cbgyOXJc89SUUv5sM3VxtLuk.roa (hash: D+jbZ3w2pVOtXKOqYfIoycf5LJ7PgaHCl8bnKHOQ6Cg=)
3: dQPCUyfRgXI2CJkCt0SpYUsgCvY.roa (hash: GqkrkB+v/kxjy5/qBpp0Cz+zZPTcGmByplfjUUUfttA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c1:fe:c5:d5:d6:d6:0b:17:e9:83:c1:41:ec:04:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Apr 26 11:01:01 2025 GMT
Not After : Apr 27 11:01:01 2025 GMT
Subject: CN=b168ee7ce0decd163533ad964091be056333498f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:af:75:8b:01:37:3a:6a:ef:29:dd:4a:b9:
60:62:56:3a:20:4c:f8:f5:24:83:be:f7:f5:e0:6c:
5d:c8:e0:3b:b5:8a:f1:f8:14:17:e8:e3:85:0f:62:
eb:38:82:a2:1c:c6:6a:bc:7f:49:cf:40:8a:dd:7c:
93:15:b9:21:09:80:49:e0:c4:90:40:e2:e6:ef:40:
ec:3f:91:1d:e4:96:0a:85:21:5a:23:a1:95:75:c4:
c7:c4:53:5e:f4:ce:55:19:f3:65:74:65:8d:d9:c7:
61:3f:e0:98:65:cd:cc:86:62:ac:f0:dc:5e:47:a3:
0d:2c:3a:97:24:ff:cd:5a:80:c2:45:21:1c:0b:18:
14:70:36:8a:f8:59:6c:14:09:df:00:65:0a:58:ae:
55:17:e6:c7:f8:d4:c2:01:3b:98:11:27:35:b2:d9:
bb:84:14:ab:37:cb:b7:f4:16:20:bc:e7:73:ac:76:
b3:bd:4e:a3:29:81:71:21:69:94:b0:fe:08:2c:ea:
d9:d2:58:91:5f:42:d4:2e:47:f7:ee:b0:e3:fe:cc:
b8:4f:be:12:4b:5f:05:58:c8:4d:fd:87:16:49:9c:
9c:30:d3:42:97:96:aa:cc:62:10:2a:b8:5a:f5:85:
86:d8:3f:a5:95:4e:c7:4a:e6:2d:00:46:c2:86:37:
de:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:68:EE:7C:E0:DE:CD:16:35:33:AD:96:40:91:BE:05:63:33:49:8F
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:13:fe:1c:27:12:4f:66:03:bf:38:33:07:9b:b5:72:80:92:
9d:60:71:72:c7:82:41:38:53:d8:8f:b8:c0:50:85:04:22:c6:
72:46:e3:e6:9d:c5:b5:e7:60:aa:1b:83:b9:ca:d9:60:a3:60:
c5:5b:20:04:31:33:bc:29:01:7d:f7:40:7a:74:2c:01:d2:6a:
31:2f:ba:60:c1:69:a3:ea:28:a0:dc:e2:24:21:ba:c6:26:ba:
cc:58:56:55:15:ce:a6:f3:b8:26:8a:bb:69:05:b9:ec:dd:45:
d3:d4:2a:05:26:3d:06:7d:f3:f8:c0:00:e3:cf:00:2d:ab:43:
53:07:9e:e0:b7:05:1a:87:ab:67:eb:8a:c0:ac:dc:a7:18:be:
c7:6d:a7:7f:87:19:7f:97:2e:a1:1a:dc:6f:7f:a2:3e:e6:f0:
e9:8b:47:4d:73:0e:83:8f:36:ed:68:67:66:79:a8:b8:13:81:
e0:ec:cd:a7:ce:10:05:cb:64:82:5a:53:8f:a8:5c:1e:1d:c9:
f3:8a:84:3f:9c:da:e4:cc:29:f0:d6:f7:58:33:7d:1e:63:ca:
bf:30:b5:35:1c:bd:ee:ec:68:02:d7:25:34:69:ea:b3:fb:6b:
94:69:ea:0a:f5:53:97:f3:9d:6e:d0:f8:32:3c:b5:4e:63:a9:
bd:ce:c1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:46:50 2025 by rpki-client