Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: QrD1xzIFJhgBQ9qyp6SG2KhOiNcGbOYqB3gNyATTTZI=
Subject key identifier: FB:81:7E:BD:F3:21:09:7A:1C:4D:96:1E:C8:17:A8:5D:6A:E0:E4:AB
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 0196790D2490B32BED85E9ED0B29E947DB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 1521
Signing time: Sun 27 Apr 2025 21:00:26 +0000
Manifest this update: Sun 27 Apr 2025 21:00:26 +0000
Manifest next update: Mon 28 Apr 2025 21:00:26 +0000
Files and hashes: 1: 1-ANTwxkMiMKQB8xGwWXlceOK28w.roa (hash: CGGHdGVU7wSNMOEYT0PFZuvvNwO+aPmiIHIahEg7OsM=)
2: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: 97dShU2KBA0leoot/nJBMKAHLVOrrB7xain5RRuqrpI=)
3: OVvSE0umfCafdF8GBhnUzkw6GgQ.roa (hash: uBO3ZxlAsPptAYBmUB8o0+apZBCG8SM73O12SZ0wtoI=)
4: PB7iIGKrDK97LW2R8MB2s86RYac.roa (hash: WmZvf5hoyroankBIMBpV0PHxkWR9+aExsWVo3nYOgg0=)
5: S7t59LlNCvxgMI7DsGNSR4qMw34.roa (hash: 4sO8Qj6ryDL8EQZQIGGVCpEKJDIwq55BmcA8TSzv0hc=)
6: bPTKlYF7fifjOqSTQNeQoeP_kuk.roa (hash: Ig5CuSUtEUSpLkPiPPlcB0rfKh8VZMxcp4q355338uk=)
7: k2MwpYy3078S260mykYqGyjDM9M.roa (hash: B5YQnM96hhYb/liddrILOeInZbquc/XQMtKwLnspcOk=)
8: tDMe4xxusG4_nRn5fi_c_u7WdKk.roa (hash: mHno5k7JcmFvfoqPEzv0djEKAYVxO3uLY89gsIjau0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:24:90:b3:2b:ed:85:e9:ed:0b:29:e9:47:db:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Apr 27 21:00:26 2025 GMT
Not After : Apr 28 21:00:26 2025 GMT
Subject: CN=fb817ebdf321097a1c4d961ec817a85d6ae0e4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:c2:70:16:67:c7:46:28:86:89:d2:53:72:
f3:36:ec:43:c2:be:06:b0:57:4c:7d:4c:8d:0a:18:
f2:ed:dd:59:ab:d5:e8:ca:ac:21:65:1a:ee:bd:6e:
88:f4:a9:10:0a:12:46:79:78:c0:05:78:51:db:fe:
e6:14:37:ce:ae:90:5e:14:2c:77:73:f4:f4:48:9a:
8f:4b:3d:be:9b:cb:91:e6:db:aa:f6:bd:6b:35:fa:
e7:f7:cc:78:66:d9:ba:88:da:ae:66:41:00:aa:8b:
ca:6b:fc:f3:2d:25:62:18:5d:92:7e:ee:24:4b:4a:
be:62:a7:e4:1c:a5:96:bc:8f:24:a1:32:9d:ca:05:
7b:3c:a3:bf:1d:20:43:31:08:70:b9:30:47:e4:c9:
92:5e:92:d1:92:55:90:99:f9:a4:92:6b:38:bf:21:
e2:5b:7a:dd:73:20:c3:e9:f7:c8:05:a4:dd:88:7c:
7c:25:05:c6:85:a2:5e:7c:86:30:59:d3:d8:bb:82:
0e:5e:e6:f5:e4:88:08:c4:d3:7b:71:c3:93:7b:a0:
13:f5:68:90:a3:dd:b0:74:7c:d9:88:77:db:fb:90:
3e:c7:47:6e:92:fe:df:05:35:ce:15:aa:ec:08:bf:
cd:99:74:6f:76:50:d6:41:da:9f:d1:00:5c:87:a2:
3e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:81:7E:BD:F3:21:09:7A:1C:4D:96:1E:C8:17:A8:5D:6A:E0:E4:AB
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9b:bd:62:8f:6f:ff:08:81:c5:44:c1:05:08:7e:19:e3:43:
e9:e7:a6:c9:3c:04:ac:53:e6:ea:80:61:d8:1a:08:9d:b1:23:
23:be:4b:c4:1e:14:e0:fc:fd:3d:6f:d5:46:95:7d:33:0c:33:
06:0a:87:01:17:cc:79:36:6c:35:81:0d:0b:84:94:a7:f8:56:
07:fb:c1:9a:97:61:93:91:98:67:49:d5:3a:18:14:a5:5f:db:
d9:c1:69:10:91:c9:fc:5f:bc:19:29:03:6e:34:fe:1b:b9:f5:
cb:aa:80:de:0c:b9:73:09:17:ec:48:1c:34:19:d0:51:ee:f7:
f8:89:c5:f0:6b:16:e5:1a:d9:0e:23:ff:46:c1:ad:71:d8:e2:
5d:c2:a5:1b:64:af:ad:8a:a5:cc:a6:5d:e0:19:15:e0:1c:1d:
a7:9b:36:79:31:e6:b9:75:d9:64:95:dd:a2:40:6b:64:0a:4a:
ad:17:8b:bc:15:47:58:1c:34:19:ee:76:16:4d:bb:8e:7c:12:
91:b8:08:1c:44:59:9b:01:de:f6:38:76:ed:96:10:c2:55:ac:
6b:a7:49:0a:46:d6:7f:04:a7:b0:86:9d:31:a1:53:ea:c5:c1:
35:ca:87:71:3a:1e:1b:e2:48:5e:df:c2:4c:06:04:99:0d:8a:
a2:f8:59:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:57:07 2025 by rpki-client