Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
File: 2dZJGIqqQ52FEfcOvoK6XnZshdI.mft (raw, json)
Hash identifier: Nr0NZeOjKuWVYCJa8MMazV6+zULGzGxZFvqoxLl0+E0=
Subject key identifier: 54:CB:C7:09:2E:70:43:DA:53:90:D6:B2:8B:F9:2F:AD:1C:D3:DF:08
Authority key identifier: D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2
Certificate issuer: /CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2
Certificate serial: 01967DFCA3D8F3F8469C536B43CD1FA561BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
Manifest number: 0D92
Signing time: Mon 28 Apr 2025 20:00:31 +0000
Manifest this update: Mon 28 Apr 2025 20:00:31 +0000
Manifest next update: Tue 29 Apr 2025 20:00:31 +0000
Files and hashes: 1: 2dZJGIqqQ52FEfcOvoK6XnZshdI.crl (hash: jC7cIFrjIpPESyzv397zQWp24JecERWZ7cl9W8dJShg=)
2: eiMs1L-2oXZyMFT4lsivxnF_7rI.roa (hash: 0CKxvXKh07lSdtj09xAAc1IiwY6cm22Ml7wMgfzveTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:a3:d8:f3:f8:46:9c:53:6b:43:cd:1f:a5:61:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d649188aaa439d8511f70ebe82ba5e766c85d2
Validity
Not Before: Apr 28 20:00:31 2025 GMT
Not After : Apr 29 20:00:31 2025 GMT
Subject: CN=54cbc7092e7043da5390d6b28bf92fad1cd3df08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ea:d4:00:b5:bc:f6:11:b4:41:fc:16:4f:a1:
b9:07:0e:c2:48:e1:b8:a4:c2:0b:7e:86:78:13:a2:
a5:c3:0c:82:55:f0:ed:71:f2:e0:e1:80:17:36:5a:
05:61:a5:bd:68:ba:cb:25:5b:2b:d1:4f:18:3d:1b:
cf:5e:40:8e:ce:95:7d:33:fe:76:58:74:1c:33:a4:
7c:e0:08:3a:75:84:5c:7e:e6:00:4a:64:cc:82:b3:
84:89:9f:b9:81:82:1c:e1:cb:b5:97:fa:29:d6:0f:
58:ac:65:ab:ac:90:56:75:02:4c:5b:c6:77:97:53:
f3:4c:f1:4c:27:f5:1e:89:16:56:0a:dc:3f:ee:53:
06:36:a6:db:e2:06:e6:ad:a6:49:44:6f:a2:c6:61:
4e:c6:d5:5e:07:42:d8:89:a0:92:0f:1b:27:41:9b:
b4:69:7e:64:d5:a0:7c:12:5c:9b:e6:2d:aa:58:52:
d8:56:e4:a3:be:c7:57:fb:09:fc:5b:5a:e3:da:0c:
6a:5f:3e:e6:3a:e8:30:b5:59:43:02:c5:89:e7:a2:
82:b7:08:b1:6c:73:c4:42:09:c9:de:d3:29:9f:eb:
33:fe:ef:3c:47:91:0c:06:7a:eb:9b:16:54:60:6d:
dd:cf:f4:fa:fd:01:9e:dc:f3:05:a2:14:80:0d:dd:
92:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CB:C7:09:2E:70:43:DA:53:90:D6:B2:8B:F9:2F:AD:1C:D3:DF:08
X509v3 Authority Key Identifier:
keyid:D9:D6:49:18:8A:AA:43:9D:85:11:F7:0E:BE:82:BA:5E:76:6C:85:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dZJGIqqQ52FEfcOvoK6XnZshdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/974881-4c4e-4d48-8fd3-1cc6a31b14bf/1/2dZJGIqqQ52FEfcOvoK6XnZshdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c9:bc:e2:84:5b:aa:0c:23:47:35:6f:e7:92:43:cc:1b:f3:
f3:36:c5:9b:fc:b9:e0:bc:63:4d:a7:62:28:ba:4a:77:82:b2:
08:49:29:0e:8b:b2:08:d5:bd:bc:72:65:a2:4e:d1:75:67:3a:
16:e5:b0:63:f1:86:d5:74:05:16:17:f4:64:0e:44:a9:f7:d2:
bc:c7:97:44:5a:4f:bb:35:d4:7b:22:57:f1:33:a5:51:f0:b7:
e7:6c:fd:93:88:d8:2e:c4:0a:6c:07:20:38:e4:f5:ed:03:cc:
48:9c:98:5d:19:2d:a9:14:73:c9:8e:d3:8b:51:13:df:18:eb:
01:be:4f:25:a9:dc:2a:c7:2a:e9:0e:10:f3:97:a6:eb:a2:1b:
a9:4e:5e:fc:2a:ad:d3:2a:07:ee:07:c5:8b:ff:6b:36:e9:54:
84:9f:5c:aa:54:81:76:b5:18:55:3d:54:2a:00:4a:5b:a6:2e:
cd:4f:bc:aa:ca:b2:1a:d8:25:d8:40:5c:28:7a:fa:5c:0c:11:
9c:88:df:a0:32:ab:26:cc:9a:98:a7:58:71:9d:3a:25:5e:d6:
1c:dd:8f:a0:0f:d8:e0:67:0c:04:04:66:71:7d:41:2f:60:4e:
29:21:b3:fc:45:af:54:c7:df:87:0e:57:89:d6:0b:35:f1:f3:
dd:02:b5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:29:38 2025 by rpki-client