Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
File: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft (raw, json)
Hash identifier: rKEnJiPIvPO8L1l320OQqd9Pw31uBIsD1oR60dmqd4Q=
Subject key identifier: 27:39:A4:09:19:46:38:D5:E4:0D:B4:BB:D7:B8:7D:1B:01:DB:DE:EE
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 019683FF63334D60794CDCADB0C742FDD389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
Manifest number: 116D
Signing time: Wed 30 Apr 2025 00:01:14 +0000
Manifest this update: Wed 30 Apr 2025 00:01:14 +0000
Manifest next update: Thu 01 May 2025 00:01:14 +0000
Files and hashes: 1: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl (hash: 7LNDJl5/LEC3OFXd4TXoX4QLKvF4Aw13WTv2BlTl01E=)
2: a0IOHkR8Hy4G4S5yuBNMKITBrOY.roa (hash: 1vK3mpE9sJgd81KLmucTH/3OWCFME4WKb3CLP0pv4Go=)
3: rYY4LoHLKvwtUeUNSpp95Qcfcq8.roa (hash: /s16opQaCPrDK0FCkiKZL+BAqy0vK7xfbC0nU+PFPrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:63:33:4d:60:79:4c:dc:ad:b0:c7:42:fd:d3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: Apr 30 00:01:14 2025 GMT
Not After : May 1 00:01:14 2025 GMT
Subject: CN=2739a409194638d5e40db4bbd7b87d1b01dbdeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2d:44:ba:ab:63:13:9f:f8:dc:62:14:a7:17:
c2:d7:61:d6:8f:8f:90:0b:f4:9e:c5:ed:e9:12:5b:
a4:94:0c:41:54:d4:f6:8f:75:13:4f:b1:1f:88:5d:
48:6e:9b:d2:40:0b:dc:d7:d7:d8:06:cf:b3:3e:7a:
cb:8f:17:a3:32:8e:f5:9e:05:93:20:4d:f7:80:33:
30:0f:95:2f:cd:4e:93:fa:85:e3:0f:0d:80:f5:cd:
ea:73:ae:9b:9c:21:33:aa:75:2a:77:70:f3:81:97:
f5:66:63:84:0a:30:d2:0d:04:f3:bf:70:ca:16:54:
c1:cf:31:37:ee:0f:da:fd:fa:49:19:78:a2:4a:9f:
db:e3:7c:05:6b:ab:fb:02:2e:7e:95:90:c8:71:ba:
20:50:e6:75:9a:57:ed:4d:4e:38:a8:58:e4:67:11:
58:27:d0:d0:99:8e:cb:d9:dd:69:09:c1:51:08:04:
fc:9e:63:4e:5d:d2:29:ff:f1:d5:e5:46:ac:99:9f:
33:33:84:84:c2:75:67:0d:1d:ed:7f:d0:9e:84:82:
03:69:a5:d0:23:5b:98:60:66:29:6e:cb:35:89:4a:
90:2e:79:db:a7:46:05:c6:85:d5:58:8e:cd:03:87:
61:0c:30:d6:da:29:af:60:f1:55:2e:7e:92:02:ba:
03:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:39:A4:09:19:46:38:D5:E4:0D:B4:BB:D7:B8:7D:1B:01:DB:DE:EE
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5d:63:7d:de:80:d2:1c:cd:b7:26:b2:32:a6:b7:df:32:b3:
f9:9b:5f:0e:c9:f2:a2:be:18:f4:d8:a6:8a:0a:be:dd:9a:b0:
b2:a5:00:08:29:b6:61:9f:60:62:66:4d:5b:41:14:45:51:1d:
11:db:f1:c5:1f:07:58:fc:0d:1b:1e:84:4a:41:92:c5:6d:3f:
4b:3d:e8:ed:78:a7:3e:df:e0:4f:86:ee:84:0f:6b:fb:45:9a:
f8:29:e2:65:11:29:da:b1:05:27:f3:07:6e:b9:83:d6:32:4b:
e0:88:85:6e:56:ce:b7:6b:98:2e:47:dc:6a:ed:8a:48:87:0f:
58:ef:9a:e3:ae:0e:08:15:f3:08:f0:58:4a:0f:75:da:3d:1e:
12:6f:c5:8a:76:5c:7a:f1:d3:d6:cc:a2:be:66:44:18:24:90:
4a:b7:59:94:b8:2b:90:d0:57:34:3f:d8:3d:71:48:05:bb:df:
bf:58:19:46:98:94:49:a1:f5:c0:42:d7:47:58:11:14:74:1c:
c6:08:2b:82:c2:47:7c:50:a2:f0:02:de:21:f0:9c:5a:d8:02:
50:fc:d6:d0:ee:44:6b:b3:53:22:17:43:bf:d2:96:ea:d5:50:
0e:b5:b6:bc:88:9a:11:a2:8e:d9:a2:94:dd:e0:e0:95:12:e7:
4e:ce:f6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:47:46 2025 by rpki-client