Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
File: suwbpoVLv1vD7VVP9_7zul_ky1E.mft (raw, json)
Hash identifier: w8EK8t+wowYmitF61KGKfAX+yC+R9NbBIGOsazeK0ew=
Subject key identifier: 2A:E4:C3:AC:25:6F:A3:A3:17:18:84:59:11:05:41:4B:AC:E1:CD:A9
Authority key identifier: B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
Certificate issuer: /CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Certificate serial: 0196760BFADC97991FD2605CC60EE7BF5141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
Manifest number: 0F2A
Signing time: Sun 27 Apr 2025 07:00:18 +0000
Manifest this update: Sun 27 Apr 2025 07:00:18 +0000
Manifest next update: Mon 28 Apr 2025 07:00:18 +0000
Files and hashes: 1: cvFGyGJRsZnEcRCD9JCy58T9gVo.roa (hash: Yp1oBHirBIDihtEHMnqKxr3/5zdpx0QZszheovk5A64=)
2: suwbpoVLv1vD7VVP9_7zul_ky1E.crl (hash: /G31HvSG6W+bt997sGgeIfwKSkOClDalWY5rrHfbMUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:fa:dc:97:99:1f:d2:60:5c:c6:0e:e7:bf:51:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Validity
Not Before: Apr 27 07:00:18 2025 GMT
Not After : Apr 28 07:00:18 2025 GMT
Subject: CN=2ae4c3ac256fa3a3171884591105414bace1cda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:39:81:ae:60:e6:80:37:ba:d0:8f:5c:52:
aa:07:72:a3:56:e7:76:0b:19:64:a3:11:03:55:91:
68:39:a6:72:6a:b6:1a:f1:51:a0:ff:45:a3:ac:26:
d8:66:15:c0:7e:45:c2:3c:5e:51:37:da:b6:8c:7c:
2f:c8:0c:bf:aa:06:ff:a0:1b:ea:32:b7:55:44:45:
8f:14:0e:03:05:70:7b:a6:83:13:c4:b3:cd:bc:4f:
17:6d:f0:68:cb:0d:e8:c3:3d:86:cc:fc:bb:df:fb:
8c:5e:0b:82:b7:1b:98:ac:c1:1b:b6:bc:94:44:3a:
df:22:0a:f3:9b:7c:20:87:dc:aa:e8:0f:b5:37:e7:
f4:a8:2b:f0:79:15:33:a1:34:58:8e:1a:3c:c3:99:
62:02:4a:f4:97:4c:90:fe:99:e9:2a:6c:ad:05:67:
38:bc:30:5f:d1:69:c1:03:6e:3b:95:19:20:07:1b:
4a:5b:75:09:e0:10:25:74:06:51:74:37:9c:ca:83:
cb:90:31:21:a5:de:84:ba:82:2b:7b:dd:c1:54:1e:
6e:25:e2:ff:db:80:c0:7a:e7:2b:2d:95:d6:ec:ed:
29:bf:1e:18:39:01:5c:c4:1a:be:97:8b:b3:8a:a2:
33:1f:ec:11:06:49:62:ba:6b:74:26:5d:7b:b7:ab:
c3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E4:C3:AC:25:6F:A3:A3:17:18:84:59:11:05:41:4B:AC:E1:CD:A9
X509v3 Authority Key Identifier:
keyid:B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9c:9d:2f:fb:6a:e9:29:5d:88:bc:20:32:9e:81:54:cd:d9:
38:f0:5d:1a:7c:01:6d:68:fb:49:40:d0:d7:5a:60:45:1f:bc:
0b:2a:42:e3:82:96:17:d4:bb:33:73:e8:2e:e3:21:ce:91:de:
ca:98:42:16:31:85:07:56:4a:1a:c0:08:0d:e9:cf:28:48:9a:
82:e2:04:c7:c0:69:bd:89:e2:4d:0b:9d:c8:32:be:e9:ee:78:
75:e2:58:7a:3c:5f:2c:4d:2d:e3:6b:73:28:4f:83:0f:32:15:
27:b5:e0:0e:7a:4d:9e:d3:26:fc:ce:dc:71:b9:91:ef:e3:9d:
bf:b7:de:4a:66:75:14:eb:dc:78:8b:86:9f:e6:ae:99:bf:e7:
3b:87:53:dd:f1:49:50:eb:c8:35:69:66:59:80:2a:05:39:5e:
f0:2b:78:e5:29:7e:20:66:86:f6:a4:c7:4d:3e:aa:d0:65:2e:
0b:46:6b:c5:ac:fb:19:bc:70:2d:6a:2a:47:ca:42:70:bd:49:
b9:4a:d0:cd:93:df:66:ef:e8:e8:35:17:ce:7a:48:39:70:fc:
14:66:a1:e6:4f:73:f6:4e:b4:c6:34:79:24:3d:2e:82:12:67:
cf:e5:e3:d1:98:59:02:8c:07:3f:63:a3:aa:56:06:85:9d:2e:
fa:fb:1b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:42:58 2025 by rpki-client