Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
File: v2SXmq7U54jkUQ7fi2lr2WysdzI.mft (raw, json)
Hash identifier: dfvSJoH6TpqN2CGQtqwIJH0/hh20fOPud24dTUD1rKs=
Subject key identifier: 82:BA:29:C5:87:09:3D:A2:89:A0:70:31:C1:DB:30:F6:D6:BA:73:1A
Authority key identifier: BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
Certificate issuer: /CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Certificate serial: 01967C0E74CB80845871ECCE6D202135F05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 11:00:44 +0000
Manifest this update: Mon 28 Apr 2025 11:00:44 +0000
Manifest next update: Tue 29 Apr 2025 11:00:44 +0000
Files and hashes: 1: 5Gr2PKrQucQP8LHQL3W9WQyLZws.roa (hash: kX33qTBwgcLJcP02UZ6CIBiA/b6h+JlM7lkLX4HUf9k=)
2: v2SXmq7U54jkUQ7fi2lr2WysdzI.crl (hash: R6DaJH4Qga5t5RdoaScNNH26srgq1xY200WJ57u4Ltw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:74:cb:80:84:58:71:ec:ce:6d:20:21:35:f0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Validity
Not Before: Apr 28 11:00:44 2025 GMT
Not After : Apr 29 11:00:44 2025 GMT
Subject: CN=82ba29c587093da289a07031c1db30f6d6ba731a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:a9:c1:00:02:13:8e:21:7b:89:b7:4b:03:
d5:95:12:a5:5f:e0:05:98:65:69:7f:4a:5b:4e:9b:
56:8a:e1:52:ec:c8:bc:9d:c1:fc:a5:7b:88:ba:b1:
e9:2b:a4:78:a8:5f:d9:87:f0:5f:89:ba:38:2e:2c:
50:68:c9:59:6b:70:be:98:2c:48:cc:c6:12:29:cc:
2b:fa:33:5e:47:38:37:f0:97:ac:5e:36:5b:68:64:
fe:1b:b3:7b:c3:bf:c8:a1:cd:8d:b0:74:a4:d8:d1:
45:dd:50:a3:61:f5:6d:04:43:09:93:77:39:be:37:
d6:bb:0f:0a:47:b2:3e:aa:72:4c:f1:d1:69:50:eb:
16:85:a6:71:c9:db:69:d3:3c:7f:d2:bf:22:7a:56:
fe:b7:14:83:62:11:33:7e:84:6f:89:7b:26:0a:8b:
8e:5b:0a:af:96:dc:4a:ac:91:85:fa:86:e5:a2:d9:
d7:55:cd:0f:6c:c2:ab:1d:69:e8:c5:3f:a9:83:ca:
45:92:f7:1b:1e:47:66:94:c1:ee:f0:0c:ea:f7:39:
a4:4d:f9:55:3f:83:91:3f:75:0e:fa:7f:94:7c:5c:
ba:63:f1:b0:64:68:de:ed:f3:4d:fe:7a:f8:b7:f5:
9b:c3:87:80:44:64:3a:0b:22:6a:fd:54:df:99:ea:
40:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BA:29:C5:87:09:3D:A2:89:A0:70:31:C1:DB:30:F6:D6:BA:73:1A
X509v3 Authority Key Identifier:
keyid:BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1b:73:dd:65:7c:bb:31:f1:92:90:aa:a2:47:6e:d4:17:4e:
43:15:87:14:79:5b:f1:e7:55:9f:dc:67:82:92:f5:e5:0e:a9:
ea:5c:0b:49:40:11:6b:91:23:4a:ae:64:f0:dd:d4:e0:31:00:
5e:6a:e3:5b:51:84:74:df:62:8b:b6:5c:41:68:5a:4f:4f:00:
b3:4d:1b:91:48:cc:28:d4:84:43:08:e1:bd:e9:46:b4:e9:d6:
9d:a8:92:b1:a1:3d:b7:10:6c:ec:98:85:52:15:e7:a5:16:40:
1a:9f:2d:ef:4c:99:94:0b:1a:82:46:16:38:2f:59:48:ae:65:
cd:b0:a0:6e:a3:08:b2:1d:17:56:43:a5:2a:d9:db:ee:ce:c4:
3a:19:09:28:ea:dd:a9:c8:84:c8:a1:ca:72:a5:8c:8d:79:a4:
6a:42:18:06:ea:5e:a6:cc:26:9d:2e:2b:10:b1:c1:85:0e:4a:
4d:84:47:38:85:19:0f:87:01:c2:95:29:74:69:c4:04:59:aa:
10:f6:a9:a7:45:7d:7a:5a:ec:32:ae:c2:7d:48:43:f5:e7:9e:
b5:f9:27:0f:ba:2b:57:5b:8f:87:69:82:ac:5d:ef:a5:b8:01:
b1:a5:df:5c:d5:9a:3c:89:fb:77:72:b5:e2:65:0d:c4:2d:7b:
c7:d4:1c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:03:23 2025 by rpki-client