Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
File: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft (raw, json)
Hash identifier: bhRzQPkillcg6tPRrDE76Jd7mQ70n9+qBJjf0UTZuoM=
Subject key identifier: D1:12:F5:84:59:D4:30:7C:53:AB:CF:B4:E7:AD:19:D4:F1:3E:E4:0C
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial: 019676B12F6822B2FECD78A25B000C9BF6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
Manifest number: 1228
Signing time: Sun 27 Apr 2025 10:00:45 +0000
Manifest this update: Sun 27 Apr 2025 10:00:45 +0000
Manifest next update: Mon 28 Apr 2025 10:00:45 +0000
Files and hashes: 1: 1-lNjknVKdfy9Kr1VsI-qDbAP2aw.roa (hash: 81TSb8t74pv7DR8FuAUOgo5v0MatY/lqN25mCeKA5Y4=)
2: 2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl (hash: 5oVLg6mAeBXMhUP1QqkwNp7MWn6vAig6G13R6udI0WE=)
3: 5N8M4KJwnoo1zIe2AU0xc7mnWFA.roa (hash: lGBtp9YyaPL/EXN1axw+bwNlvWuMTBB6hxeR6qmHN6c=)
4: XVhTCzbVuyZv1pRWZ6knSHc8Y2o.roa (hash: Xl7iWjENIYr9umPtNnMSeB7YWYoSDRk/+GxnMXY+clg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:2f:68:22:b2:fe:cd:78:a2:5b:00:0c:9b:f6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Validity
Not Before: Apr 27 10:00:45 2025 GMT
Not After : Apr 28 10:00:45 2025 GMT
Subject: CN=d112f58459d4307c53abcfb4e7ad19d4f13ee40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0c:83:bd:7f:b5:78:4c:a2:06:88:0d:ad:03:
f6:ff:3f:b2:ef:79:9e:6b:fe:5d:cd:64:25:3a:17:
4f:d3:dd:de:86:93:16:dd:55:e6:c4:5f:91:64:68:
e6:70:c8:03:34:0e:d2:fb:fc:db:a0:03:2d:5b:97:
ca:35:2c:3b:65:62:a3:9d:1b:b2:c5:a4:ef:da:f1:
e1:d2:73:38:fb:ba:9e:b3:68:ef:70:de:0f:62:0f:
fa:e7:bf:3a:b9:a3:ab:52:4e:23:0e:8e:07:11:6d:
3a:7f:7e:3d:37:d1:8d:ca:c6:5b:4c:74:54:ea:b7:
14:39:0f:a5:b1:70:52:fe:20:8b:e1:74:6e:94:49:
35:79:e7:30:58:4b:ec:36:8e:41:e0:11:5c:ca:2a:
c3:9a:f4:dc:e3:cc:7e:79:47:eb:99:04:bd:d2:08:
ad:d3:09:f4:02:ee:d3:b7:37:a2:55:37:b8:0d:25:
eb:3b:3e:11:f5:4e:ad:cf:84:2d:e1:5f:59:2b:31:
20:e3:78:ed:c6:c6:d5:6d:a5:96:02:8a:73:70:8b:
9d:c9:71:57:dd:92:65:ca:d6:6e:45:6c:6b:75:ea:
2c:fd:61:2a:22:3c:c5:5d:a8:fd:43:21:b6:55:9f:
d8:c5:cc:00:d8:c5:ad:f8:67:e8:e0:d5:df:f2:ed:
ab:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:12:F5:84:59:D4:30:7C:53:AB:CF:B4:E7:AD:19:D4:F1:3E:E4:0C
X509v3 Authority Key Identifier:
keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:38:e6:19:2e:63:ef:b8:65:73:d0:01:6b:03:4e:ce:88:50:
b4:ed:25:52:48:0c:1e:ce:10:94:c2:c0:8d:ed:85:6c:af:7a:
4d:36:5e:96:13:4f:65:4e:50:2a:b6:df:b2:dc:09:38:74:b3:
f5:a5:0e:17:67:f5:b5:f4:1f:5c:93:5a:02:6a:93:36:a1:e1:
1b:ea:a0:b8:42:4d:a1:ed:61:2b:0a:f1:ab:17:c5:e8:ce:11:
4e:cc:66:57:f3:40:ae:41:ef:52:41:cd:72:ec:70:9d:d3:0f:
90:b4:a2:9f:27:c3:c5:8c:a3:0e:d2:e4:f8:21:19:04:2c:46:
ad:c2:58:c3:b8:56:4d:61:cf:30:65:65:07:c4:69:a1:8c:e7:
c1:22:8b:58:19:6d:02:f0:f2:c0:60:b9:01:6f:1e:63:c4:a8:
53:8d:e4:65:a3:88:31:b1:a9:e9:c0:87:d5:7c:05:cb:42:91:
d9:b1:07:cf:4a:5e:e4:c6:65:5c:98:16:15:90:34:f3:f9:aa:
41:17:b7:aa:51:dc:83:09:69:a4:a5:6c:e8:92:da:3e:c6:f6:
18:b8:83:fe:c0:34:b7:11:6a:fa:ff:e9:7f:66:a5:9a:a0:e9:
45:a5:29:ca:3f:88:b6:21:90:ea:45:8d:ea:bc:2f:38:f6:5a:
38:a2:71:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:57:40 2025 by rpki-client