Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: zBfo6nHpcAvnL8MGYEZDkE8SaJ1b4UksiRVHwIg8n80=
Subject key identifier: AD:58:31:D9:0C:3D:7A:C2:3A:7A:ED:A5:B2:26:EC:1D:B3:9B:52:3B
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 01967F7CE916ABD9BE89C61272201343517C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 0D11
Signing time: Tue 29 Apr 2025 03:00:14 +0000
Manifest this update: Tue 29 Apr 2025 03:00:14 +0000
Manifest next update: Wed 30 Apr 2025 03:00:14 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: sY6pHH7vuq0iSpEqTsvr3UtnKXirkDA5D/lB3Gdm/yg=)
2: L4roRdlkRFF_L_7wYpfaNa1dLaA.roa (hash: KuAnzPBgxp55/NCR6oySR+pQEyeN2HDAB6NF7tBzr6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 03:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7c:e9:16:ab:d9:be:89:c6:12:72:20:13:43:51:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Apr 29 03:00:14 2025 GMT
Not After : Apr 30 03:00:14 2025 GMT
Subject: CN=ad5831d90c3d7ac23a7aeda5b226ec1db39b523b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:c2:7b:2e:46:10:32:6f:40:aa:b5:1c:82:
61:a2:21:a8:8a:29:95:d2:80:82:87:2d:a4:b7:a1:
a9:8f:08:80:20:4c:75:cb:16:d6:64:90:b9:61:1d:
a0:39:03:7e:27:df:70:58:b6:74:41:0f:61:15:4f:
8d:dc:52:b6:33:b0:f4:bc:0b:b7:a1:81:3a:e6:67:
cb:d4:b0:6a:65:dc:63:94:37:83:65:bc:38:4f:21:
0f:23:9f:9d:5e:fe:c7:48:1e:0d:ca:fd:2a:95:ad:
49:22:8a:8e:5d:47:93:95:7e:7e:d5:90:b6:5e:24:
1e:67:fb:21:5b:9a:c5:9f:5c:13:ff:a6:c5:96:20:
77:9c:91:2d:fb:18:1f:e5:94:8f:14:ec:2c:af:4a:
99:05:bd:ee:53:4f:52:58:fc:9d:29:44:55:96:63:
f8:1f:44:f7:83:28:7f:a2:75:c7:09:cd:46:32:c5:
0f:25:59:3c:60:55:3a:a8:a8:f5:ac:4a:cd:fc:9a:
93:b4:2c:7e:5b:30:5b:77:bb:00:0d:9d:7a:00:7b:
69:db:99:17:32:e0:88:a4:ca:5e:47:26:6a:4a:af:
04:23:0a:41:0a:24:4f:2c:bd:ee:6a:f3:6b:18:88:
84:94:7a:63:d5:99:e3:44:e0:4f:1f:3c:5f:73:87:
99:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:58:31:D9:0C:3D:7A:C2:3A:7A:ED:A5:B2:26:EC:1D:B3:9B:52:3B
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b6:82:4c:a0:3a:21:8c:a9:38:6c:e5:b0:43:8b:4b:96:f0:
44:3d:bb:c4:a7:6d:3f:0b:a8:6a:a9:23:7b:f0:54:58:53:01:
6a:88:f2:9e:54:7a:17:65:7d:e8:6e:1f:7d:7c:57:ef:18:ff:
a4:60:74:b1:52:3b:6b:e5:2a:2c:75:86:b1:ef:dd:f0:4f:5c:
e5:d9:2e:54:5f:73:95:9e:41:2a:20:0c:52:5c:74:50:e6:0d:
3e:df:9f:74:49:4d:7f:f5:0d:3d:b7:f2:07:25:bf:e1:c7:b3:
01:b9:8d:7e:d7:b5:ac:4a:19:b9:db:ee:4c:8b:4d:54:84:2c:
4e:99:7b:72:bc:6e:00:3e:39:60:5e:85:bf:50:68:21:16:67:
5e:20:34:36:fc:8f:21:82:87:e2:80:11:9a:6e:2f:af:6f:79:
3c:2e:0c:57:23:43:a8:fa:b5:66:37:ba:45:4c:4d:f9:44:e0:
c4:0c:6c:ee:c3:4a:ae:bc:5d:b8:33:ae:47:25:d4:7d:1f:22:
ec:2f:50:fd:ac:40:61:93:cf:ed:88:cf:4b:fd:cb:80:c2:1a:
df:f5:c6:0b:c3:d3:05:ea:d6:45:07:f9:1d:ac:45:99:14:08:
ef:32:4c:1c:ca:f2:85:5a:2a:48:b9:6a:1a:11:05:59:58:3e:
63:38:37:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:26:35 2025 by rpki-client