Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: 76iGsasx3+yIoQKmShy05MNdCURC6fesdsX1fFkXjjo=
Subject key identifier: 0F:76:89:BF:8A:5A:9D:E7:7D:4F:C9:F6:94:3E:E3:85:1D:7B:16:4D
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 019676B101EACC2F13D4F230E9ECB8BEFE3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 0467
Signing time: Sun 27 Apr 2025 10:00:33 +0000
Manifest this update: Sun 27 Apr 2025 10:00:33 +0000
Manifest next update: Mon 28 Apr 2025 10:00:33 +0000
Files and hashes: 1: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: ZRF9ga4DIX6VnTJNJQ82V3WJEo/lrEX4gqgCJDBYkzU=)
2: Ifc9NwWgW96DB3jfdAd1eRUTItQ.roa (hash: QwQYTZsG7IIaUp2W464uVveyT3Hy95wxA6B00yVfsE8=)
3: xswOfeFYQB8__QySjxBuBlaYjZE.roa (hash: UFudVerFpyGKspIudoEvuO5xASRkVerT3UxaZZDITQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:01:ea:cc:2f:13:d4:f2:30:e9:ec:b8:be:fe:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Apr 27 10:00:33 2025 GMT
Not After : Apr 28 10:00:33 2025 GMT
Subject: CN=0f7689bf8a5a9de77d4fc9f6943ee3851d7b164d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:45:f0:28:b7:f4:8e:c5:a0:1f:2f:55:fd:8e:
2b:ec:89:e0:5a:ce:40:79:39:cf:8d:50:68:0b:3d:
75:2d:cf:a4:5e:2c:b5:a3:ed:23:e5:2d:27:7a:eb:
98:6d:3d:5b:b8:b3:16:45:98:e6:c7:90:d4:c8:2a:
6a:03:13:43:e2:c0:87:33:6f:f9:fa:a0:bb:25:47:
0e:55:76:0b:d8:83:82:43:56:89:de:62:f4:95:6b:
14:f1:70:04:14:43:71:64:0d:1a:e6:97:3f:36:42:
43:64:6e:89:17:99:33:6c:99:b4:53:b7:5c:a5:64:
78:6c:51:8c:81:f4:36:08:11:57:c8:cb:58:2c:9b:
c6:de:a5:b5:61:88:4e:8f:4e:46:57:b9:fc:7f:0d:
f8:dd:2c:bb:20:68:95:07:e5:ee:24:b7:dc:a1:f3:
9a:db:84:f6:85:eb:51:b2:ac:12:2c:05:f1:5d:b7:
40:f8:54:0a:fb:62:f7:4a:30:63:66:9e:8f:ff:c7:
15:f1:11:2d:23:41:ea:b1:58:b2:09:a5:50:fb:fc:
f4:de:aa:94:2b:8e:02:a6:95:35:89:eb:e8:f4:5b:
21:c5:74:4f:02:c6:20:83:7a:53:71:f5:36:2e:49:
e1:07:6f:30:26:8b:2a:13:13:ce:64:62:85:75:ae:
0b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:76:89:BF:8A:5A:9D:E7:7D:4F:C9:F6:94:3E:E3:85:1D:7B:16:4D
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e9:5e:60:fc:fa:7b:bb:4b:6c:a7:00:e3:fb:fb:66:1a:d0:
c9:33:55:38:c8:05:3c:55:91:cb:0d:b5:c9:96:96:75:ef:76:
53:64:41:a9:07:d8:3c:ea:36:2e:d4:45:92:ff:5e:98:66:dd:
19:34:b6:4a:8e:0e:d8:a4:82:93:83:11:84:65:3a:bf:b8:2a:
d7:83:49:ad:70:6a:40:ca:f2:2b:52:ee:24:a7:31:5e:63:71:
aa:90:89:13:f6:3d:ce:76:06:78:46:67:83:11:6f:0b:7a:12:
dc:b3:72:32:4b:1e:bc:02:e8:7f:de:00:ba:da:5b:79:60:85:
ef:52:11:38:74:73:f5:16:95:e4:96:80:24:ee:dd:bb:ee:a0:
f1:94:48:de:93:30:d2:76:33:fe:12:9f:78:77:5b:fc:dc:13:
b8:b8:2b:ed:c8:6e:ff:61:91:59:ff:73:b1:78:ef:df:3e:f1:
1e:4b:06:eb:c8:cc:8a:32:0c:e3:b5:64:fd:fe:cc:13:3f:8b:
67:51:fa:41:94:c2:47:f2:68:e7:83:b8:91:17:0b:1b:d2:6a:
4a:bf:8e:96:76:fc:5c:b3:a8:0c:91:49:1f:c7:25:f9:10:cc:
c8:98:3c:3d:1d:6c:3e:62:a5:4a:ee:7f:f5:25:dc:86:35:9a:
3e:68:6e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:03:15 2025 by rpki-client