Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: DYF6mlFwtFeZGL6SSRyXsUO8aupZhcwzJJpKi9G9i0E=
Subject key identifier: 0A:CF:58:0F:8C:24:80:CA:49:87:25:82:B1:F8:F3:F6:3F:C8:1B:3B
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 01967E33F84CE0CE8E1A3F4AC091DB70C4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 21:00:57 +0000
Manifest this update: Mon 28 Apr 2025 21:00:57 +0000
Manifest next update: Tue 29 Apr 2025 21:00:57 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: 1kDT3hKxpBsobrrJXCWNmZei7Iu6e2dNTSGnBY/QJh0=)
2: KSXGFVryamNuJ9tAvX5j45q0288.roa (hash: oHHWqrdumFHTbledjPfN55zOWOewwfVZnbPoUEcTtJo=)
3: b_Hf4C7DHqDvU3rPrk8yR1EVzMk.roa (hash: B0oNiXflIFSUREkZoOMdxw9fvdV4h0sgQd5bJTkzRM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:f8:4c:e0:ce:8e:1a:3f:4a:c0:91:db:70:c4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Apr 28 21:00:57 2025 GMT
Not After : Apr 29 21:00:57 2025 GMT
Subject: CN=0acf580f8c2480ca49872582b1f8f3f63fc81b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:f7:ca:99:78:e1:44:42:fd:bb:62:87:88:
bf:1b:f3:f2:d6:af:6d:1d:fe:3b:e0:85:16:e4:ca:
02:27:26:da:98:12:0b:9b:e4:19:23:f2:99:47:81:
5d:17:f2:bf:50:83:a4:92:9c:3f:55:45:56:f8:4e:
25:a1:a4:93:c9:0f:6d:5d:a4:3c:6c:b2:3d:1f:68:
81:d3:13:53:7a:be:15:e6:c2:5a:54:bc:a4:95:1a:
2a:0f:3c:42:d6:41:f4:c4:79:4f:89:54:9c:f1:25:
0a:c8:86:4e:63:42:f2:d4:72:35:f9:91:4d:94:c9:
6b:c4:27:68:ca:79:31:4d:33:34:ed:0c:c1:36:83:
0b:b6:b7:f0:d5:f2:94:29:a5:87:fa:5b:25:fb:81:
74:1e:b2:0b:ff:23:ad:dc:a5:c5:10:05:4c:f9:1f:
a0:02:42:71:00:03:ce:cb:6b:9a:97:26:24:8c:57:
d3:ac:c1:f9:5b:ba:73:3f:90:68:e1:c5:0c:76:4f:
7e:50:4a:74:79:1c:af:16:35:4d:ef:28:9c:9c:49:
34:08:23:5e:b6:ee:8d:65:2c:be:0d:cc:ac:97:1a:
2c:75:58:5d:d3:48:40:b9:f1:2d:8a:18:ce:89:cf:
c2:d6:80:49:47:c3:21:41:ab:bf:38:fb:35:55:11:
49:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CF:58:0F:8C:24:80:CA:49:87:25:82:B1:F8:F3:F6:3F:C8:1B:3B
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f7:8d:83:4b:df:44:0a:e8:26:e7:07:5a:ef:c8:41:84:d4:
4b:5e:11:81:c1:d2:e9:96:55:f7:c0:89:44:34:c1:04:fd:41:
76:c8:13:95:5b:ec:2e:88:a3:0f:c4:4b:c0:90:cb:88:7a:05:
6f:7a:02:da:4a:11:9e:bb:0f:a0:46:fc:00:f9:2d:1e:6c:8b:
eb:e9:4d:77:f6:23:6f:46:4f:0f:5e:95:1f:08:6a:26:cc:13:
00:5e:b8:a6:b6:5a:75:67:fb:41:ca:16:ed:75:72:e3:22:5e:
09:e5:f3:70:8a:f6:25:5d:40:ce:88:45:2b:a6:c0:e6:ab:f8:
c4:da:5c:7b:59:f2:81:93:86:f4:96:52:7e:7b:66:c5:fc:77:
11:98:4b:20:02:5c:41:5a:f0:dc:8f:e7:02:d1:0d:23:92:d7:
10:a4:56:0d:eb:d0:f7:25:fa:25:ac:fc:15:5e:cd:76:da:c8:
26:d7:48:b4:58:42:58:99:2f:a1:33:68:d3:d6:2d:c6:aa:6c:
64:11:33:e9:81:11:ad:a6:84:2e:b2:f4:2d:5a:9c:f2:09:9d:
be:d3:12:96:bf:63:e9:e6:a0:e7:d6:35:3a:77:81:f1:df:43:
07:55:a4:2b:be:ff:b5:34:54:f9:05:cc:7e:64:d9:67:07:68:
f3:eb:0d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:43:09 2025 by rpki-client