Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier: VvHw0lyfNiXp0Ijxvhh7ZQ7pqWZKP55nQV2TUKZRCkw=
Subject key identifier: 05:78:9E:F2:B3:04:D8:51:52:82:46:5C:54:0F:13:D3:64:6C:5A:34
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 019685805C58B57FF9488B4C8850595745AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number: 03EC
Signing time: Wed 30 Apr 2025 07:01:44 +0000
Manifest this update: Wed 30 Apr 2025 07:01:44 +0000
Manifest next update: Thu 01 May 2025 07:01:44 +0000
Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: kOJJRRIQikicvUI0uhYNhu2NJUX8s8XTzlYEsaY/X3c=)
2: Fx2klUP1BUQWSve4HaBQkpAiNyk.roa (hash: zJ2Tt9osikAXRixamoNp+QrAMtzbTSaAfE5Ta0gGans=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:80:5c:58:b5:7f:f9:48:8b:4c:88:50:59:57:45:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: Apr 30 07:01:44 2025 GMT
Not After : May 1 07:01:44 2025 GMT
Subject: CN=05789ef2b304d8515282465c540f13d3646c5a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6c:d6:9a:b2:a4:0e:a6:7d:34:18:6e:0c:f8:
f8:7f:1e:a5:98:44:db:34:7a:10:d5:b1:4c:24:00:
58:51:d2:c1:30:04:43:6b:1b:d4:51:f8:d8:0a:b1:
47:10:57:c9:12:fe:97:ca:c4:a7:7e:37:23:be:a7:
79:ce:1b:df:03:d5:27:d1:ae:42:c7:0e:6a:47:9c:
5b:78:1b:24:b3:62:13:1a:6c:58:d1:87:7e:b0:f6:
28:45:30:09:35:8f:f0:37:dd:72:93:91:2b:5a:78:
26:cc:d1:4c:10:cc:85:40:7e:d4:72:3c:22:ff:2b:
d3:97:82:68:c1:9c:a0:ce:1d:88:04:c7:a2:70:f8:
78:54:e8:86:43:58:2a:ae:cc:41:b3:aa:f5:90:aa:
36:88:1b:97:0e:7b:24:6a:fe:8e:c5:f5:0f:9b:6d:
0f:29:61:68:e2:73:df:62:26:34:ca:c7:9a:92:d7:
cf:2f:b4:22:57:fc:64:a6:3e:a3:42:d7:8c:7b:27:
e9:e2:e5:f7:dd:ba:ca:c0:13:ee:04:69:d0:75:94:
30:d9:eb:5f:aa:cb:c1:5e:b1:ec:04:5e:a3:b0:aa:
95:c5:df:10:cc:4e:49:cc:9e:4a:db:24:f6:df:51:
23:f1:cb:86:d4:6a:43:51:ed:aa:07:88:ff:71:be:
d5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:78:9E:F2:B3:04:D8:51:52:82:46:5C:54:0F:13:D3:64:6C:5A:34
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c5:53:e5:9c:48:bc:38:27:85:8a:f1:cb:9d:51:d4:5e:38:
cb:84:5a:6e:32:d1:c7:9f:d1:e1:79:74:ed:5a:af:e0:33:9b:
df:dd:4e:6c:66:85:d0:8a:7d:74:48:22:7e:36:54:be:fb:27:
42:17:17:fd:73:6b:65:e5:f5:69:fd:ee:9e:ff:d4:e0:1b:83:
9b:cc:36:76:11:6d:a0:25:d4:f3:96:e6:3d:16:f1:01:c8:3b:
1b:ec:2c:ca:8e:a4:4c:72:85:bf:6b:ce:8e:bb:9c:9b:8b:de:
81:b6:55:8d:4e:e5:18:58:cb:93:f9:a4:26:48:50:d5:78:a8:
4d:c4:f7:13:ed:4d:28:e3:f9:33:90:2f:32:26:c4:21:8f:03:
fe:f8:19:f2:89:85:81:cd:53:b0:bd:d1:3a:cc:c5:b4:f5:73:
ba:89:62:d5:f0:4f:03:e3:98:5b:a6:ee:ed:7e:0e:18:30:56:
4c:b6:f7:6f:53:07:55:dd:00:c4:80:43:32:f1:f6:ac:15:95:
ed:9a:02:68:c7:82:a7:a3:c7:1b:0f:4e:53:43:b6:15:04:8c:
26:30:ea:13:b4:3e:66:1e:fd:29:82:b5:34:de:bc:02:86:be:
fa:3f:9e:6a:16:a9:69:aa:78:c4:e2:01:29:12:a0:1a:b3:46:
8c:00:26:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:56:38 2025 by rpki-client