Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File: 2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier: rLJpSM7Nv6HQsQcuFkwxVve/i9zLCeJOX3JEf5YgowM=
Subject key identifier: F1:42:1D:D8:75:81:BB:51:19:35:AF:5E:9F:01:C0:59:48:6E:E1:50
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial: 01968A6EAA9357A617DECAF92B498EBCCFDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number: 0948
Signing time: Thu 01 May 2025 06:00:30 +0000
Manifest this update: Thu 01 May 2025 06:00:30 +0000
Manifest next update: Fri 02 May 2025 06:00:30 +0000
Files and hashes: 1: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: xU4FKqdFX5/MSPfTRFoD4UCu9jINXKLNKOsJiZup4J4=)
2: 5NIsqkc9vMkUbKJISITWHR80lnU.roa (hash: rTtJCCn1pALK1KK1DzvSGITMJEp2xHDofmUm8fwxCgg=)
3: QX8KqylAM3f1Syx-djrWntCvrqA.roa (hash: m6udoP2gq2mRFJ54qIBjTU0GJ3xy3ZdgKfydTJt14l8=)
4: fWxAWe7FNQHl72525jh3CvQUjPI.roa (hash: wZ498wFmeXSTeDsoNJdQ0818F8qSsmRp/ozGqSUyBQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:6e:aa:93:57:a6:17:de:ca:f9:2b:49:8e:bc:cf:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Validity
Not Before: May 1 06:00:30 2025 GMT
Not After : May 2 06:00:30 2025 GMT
Subject: CN=f1421dd87581bb511935af5e9f01c059486ee150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f5:fe:fd:c6:03:6b:18:47:db:1d:ae:e8:9e:
14:d8:ee:29:9d:18:dd:08:7f:17:99:10:f9:67:49:
df:94:f9:b9:90:27:84:98:c1:61:74:89:31:7d:23:
5d:bc:e7:75:45:94:50:d0:61:67:75:1b:55:e8:22:
7e:07:a5:53:3e:6b:57:d9:5b:17:d0:78:f6:50:bb:
13:81:9e:92:64:a3:87:46:1b:30:03:e2:b0:27:6b:
f1:f5:5d:f0:4d:f9:cc:1b:6b:df:17:46:50:d8:79:
03:82:80:eb:35:6e:fa:83:77:7a:fb:49:16:e2:4e:
f6:b2:e4:7d:83:88:26:8e:1f:0f:d9:d0:d2:e0:4c:
89:2a:bb:0d:44:c3:ee:38:08:cc:44:24:14:f8:93:
2a:fa:36:5f:a0:8a:76:d3:79:ba:20:b7:8f:8f:6e:
53:de:a4:83:f8:3a:bd:10:bd:0d:b3:0e:5a:53:d5:
69:bd:f1:eb:fa:7f:24:39:bf:3b:19:d4:63:51:09:
37:99:90:21:17:33:f3:dc:a4:e5:7a:9d:89:03:17:
44:92:1c:a0:5d:41:ac:c5:1c:84:2b:2c:0a:45:1c:
22:e2:cf:a7:3b:64:0c:6b:7a:89:ca:61:f8:af:32:
b3:97:c5:9b:76:db:ec:e7:09:61:bf:22:33:20:64:
9b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:42:1D:D8:75:81:BB:51:19:35:AF:5E:9F:01:C0:59:48:6E:E1:50
X509v3 Authority Key Identifier:
keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ba:d3:53:21:87:73:e8:7e:f0:cc:06:0d:5d:b3:63:c8:ec:
86:1f:8c:2d:14:26:83:d7:51:ce:85:f8:85:03:7d:32:7a:41:
df:de:8d:9a:d2:e0:3c:f6:c8:5d:7a:25:c2:59:7f:b4:e6:c5:
f0:37:5f:49:b3:cb:aa:6f:22:44:15:93:50:a6:be:07:48:02:
e3:78:93:f7:9c:e3:25:fb:8c:1b:5d:da:cd:6f:05:99:ba:48:
71:22:91:a7:c2:23:df:b8:e1:7a:b1:7a:a0:87:f2:6c:47:41:
5b:0e:33:61:fc:a5:6b:74:65:61:da:8e:21:b2:81:2c:63:98:
7a:08:e9:26:27:9f:b7:9e:ad:a1:fb:79:f5:50:02:ca:79:b8:
d8:21:b5:df:88:0f:e0:08:1d:7a:bd:58:94:09:c8:17:16:7c:
88:ab:b2:64:1c:a8:9b:e7:27:e7:12:1c:9f:aa:30:0d:1d:08:
3c:0b:4c:6c:64:a6:1f:a5:5f:e3:6e:e8:77:83:6f:b0:bf:5b:
f0:a6:da:ee:4a:4a:5d:6c:d9:b4:3b:67:62:57:46:32:93:7a:
b1:9b:ed:42:99:16:1c:b3:0b:6b:3b:54:9f:f1:f0:c5:ec:44:
49:92:74:87:93:37:6d:89:93:a3:d1:cd:53:8a:90:24:27:8b:
ff:e7:0d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:49:45 2025 by rpki-client