Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
File: 2yadDqjKpAx6cEOCyrU-GwJta0M.mft (raw, json)
Hash identifier: 089iGMr4IaNARqcC2qBdC3sUYXqBtwWr8UA1Z/++BUQ=
Subject key identifier: C0:1A:97:A7:97:4F:7B:DE:1A:2B:FC:7C:4A:04:3B:CF:44:E4:3B:AF
Authority key identifier: DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
Certificate issuer: /CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Certificate serial: 019679B2012507A5FA17DED5DD348A031B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
Manifest number: 1104
Signing time: Mon 28 Apr 2025 00:00:30 +0000
Manifest this update: Mon 28 Apr 2025 00:00:30 +0000
Manifest next update: Tue 29 Apr 2025 00:00:30 +0000
Files and hashes: 1: 2yadDqjKpAx6cEOCyrU-GwJta0M.crl (hash: 1HNvu1XBaL49m0RHtC5oYlJBosiTl6ADMzzmFBeHVWs=)
2: RcnM5lD2VLhEfstSA8lcgXJNriA.roa (hash: GF0NRv6wYAFFTQXDxXlqCyxzESzyOdSaMUY2OronBs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:01:25:07:a5:fa:17:de:d5:dd:34:8a:03:1b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Validity
Not Before: Apr 28 00:00:30 2025 GMT
Not After : Apr 29 00:00:30 2025 GMT
Subject: CN=c01a97a7974f7bde1a2bfc7c4a043bcf44e43baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c3:3a:92:2b:8e:22:94:a2:e0:67:77:12:c6:
d6:f4:c1:e2:a9:d1:a3:76:f8:4a:52:97:e3:40:9a:
f1:0b:d8:e0:04:73:e5:db:bc:4d:d6:41:0c:91:20:
9c:42:71:3f:35:7b:fb:26:b0:ae:2b:9b:07:e4:02:
52:86:d7:46:9b:24:28:53:fd:c4:cf:da:6d:df:12:
84:0c:27:12:cf:64:17:fd:f7:6a:4d:d0:3b:39:b9:
8e:6e:ed:ab:f3:78:97:b8:ec:7b:a7:d5:b8:a5:85:
64:1d:ba:b9:9b:cf:fd:f2:88:35:a7:a0:ba:d1:53:
49:ea:81:44:6e:9e:78:48:26:66:0d:de:ac:bb:81:
fe:f3:f4:c9:e7:83:5a:5b:26:b3:e6:dc:1c:3a:8b:
c1:23:24:d9:5d:30:63:1c:1c:64:51:4b:50:0a:60:
1b:0c:7d:e5:7b:bb:cb:22:ab:0c:1c:5d:37:6c:5c:
9c:da:e3:7c:8b:2a:65:ea:2a:4d:c3:c4:c7:71:0b:
e9:3c:dc:d7:cc:20:29:39:a4:46:2f:0a:ec:32:35:
9d:3a:22:ea:95:92:bf:2c:3f:99:7a:09:7f:00:c1:
f6:70:00:20:43:ee:10:e5:83:8a:60:aa:85:05:70:
c2:52:7b:ce:54:b0:01:e4:8a:93:30:49:d5:7b:46:
c6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1A:97:A7:97:4F:7B:DE:1A:2B:FC:7C:4A:04:3B:CF:44:E4:3B:AF
X509v3 Authority Key Identifier:
keyid:DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:93:ec:c1:d6:1c:d0:39:d5:5a:44:ef:fd:90:e0:8c:46:6d:
7a:9b:81:60:f9:48:ed:a0:70:0a:bf:ce:b4:25:f4:fd:94:6e:
4f:2f:2d:af:dd:c4:72:99:6c:d5:97:e1:12:df:33:50:c0:ed:
96:4b:12:50:f0:e1:1e:5e:57:f3:f3:5b:d9:7f:7a:37:a0:7b:
a6:c6:66:68:cd:b3:45:84:75:53:e5:d4:8d:7e:a3:3c:dc:63:
76:1d:a7:2d:73:20:04:d8:f5:fa:f7:f0:8b:1a:47:d4:56:2f:
51:eb:52:16:31:a1:1b:d8:b7:82:9d:35:e6:a7:3e:54:06:8c:
81:2b:63:1b:87:7f:fa:2f:06:dc:83:a8:52:78:41:70:1c:7e:
27:bc:2c:1c:d2:77:84:18:ee:fd:7d:00:38:40:a3:45:20:69:
2e:97:23:37:13:b5:c2:ba:6f:cf:84:4c:bd:6d:b6:cf:a0:e1:
47:10:d9:f2:d2:63:00:0b:8d:b6:6f:6a:3c:4b:6e:ea:77:ba:
7e:f3:d6:36:28:9d:59:a9:e6:6c:e9:4a:bd:c4:0a:98:71:9d:
27:e7:f5:9c:2a:4a:8a:96:ce:af:ad:a7:c4:fe:80:37:52:77:
ca:73:51:71:1e:c6:51:08:28:21:2e:fd:43:19:df:05:be:57:
9d:2a:57:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:01:37 2025 by rpki-client