Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json)
Hash identifier: k8cOaFjpBmm3+nBNvKqdbbrp/DVUoQUnHNXhzNHqG4A=
Subject key identifier: CE:F1:44:DC:D7:9B:13:43:D7:57:0E:3E:FA:1B:8B:D9:4B:35:76:D5
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial: 019671C224E227547550FD320CA388DB91E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
Manifest number: 0AE4
Signing time: Sat 26 Apr 2025 11:01:10 +0000
Manifest this update: Sat 26 Apr 2025 11:01:10 +0000
Manifest next update: Sun 27 Apr 2025 11:01:10 +0000
Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: xpWSzT4PHomP7dW0x5PgpzH5Adi3JgzWlpwKgcLcRDU=)
2: IS0smRtY_UHklMsTV-a11MXxvnU.roa (hash: 1NEqhD+uaMSbaGDtUxTmaG/oRgFCvJ6p9cklS658oe4=)
3: WbjFo-ltxvF-7ZrjyQy1FqeRLns.roa (hash: V+1LDHomAKK5fbX6O5ZL1HAUnZGkvTtj4L1E7oUU45k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c2:24:e2:27:54:75:50:fd:32:0c:a3:88:db:91:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Validity
Not Before: Apr 26 11:01:10 2025 GMT
Not After : Apr 27 11:01:10 2025 GMT
Subject: CN=cef144dcd79b1343d7570e3efa1b8bd94b3576d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:52:f6:86:68:7c:2f:89:78:e2:91:1e:dc:
c6:4c:2b:d4:53:22:31:2b:4f:e8:ab:e4:66:ad:79:
7b:35:15:cb:4e:e1:a5:9a:d2:a3:b6:22:72:85:47:
b6:4f:eb:8d:bb:ae:24:a5:49:8d:18:a4:ba:ba:37:
09:0a:86:c3:29:f0:c2:be:f1:f1:12:2e:a8:fc:5e:
e3:e6:80:6d:42:3d:6a:69:aa:fc:83:5d:b4:e5:77:
0c:4f:b2:4b:fc:34:5d:d6:0d:1b:c2:a3:03:53:04:
0d:3b:53:ed:ac:c4:61:35:20:2b:51:e2:8f:4e:ba:
b4:fc:55:86:ae:5b:e7:84:2f:c7:d2:13:67:56:cb:
33:4d:53:39:5b:f6:0f:d0:0d:56:ec:04:8e:c1:9f:
51:58:e3:99:f6:37:22:b8:59:a5:e8:a5:c2:9c:dd:
7e:2c:d6:65:fc:dc:7d:28:85:b8:eb:d5:3f:6c:3e:
b8:8a:2e:73:79:76:44:bd:74:9c:23:d9:b1:29:4d:
94:bd:76:95:fc:86:d4:86:2b:c3:9b:28:8d:5e:07:
bb:9c:bf:ce:93:53:0d:7b:f9:bf:e3:bc:ba:93:ec:
cf:52:dc:cd:e1:7e:eb:d8:57:ed:b0:af:68:bc:c9:
76:6c:b7:48:b1:d6:3c:cc:bd:61:fb:e9:ec:4a:8f:
e9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F1:44:DC:D7:9B:13:43:D7:57:0E:3E:FA:1B:8B:D9:4B:35:76:D5
X509v3 Authority Key Identifier:
keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:cc:24:62:17:72:5a:3a:88:1e:74:8e:e1:04:cf:05:09:b4:
80:49:e1:2c:b0:2e:bf:ec:67:6a:5b:59:9e:3e:90:98:55:f9:
06:a4:d7:65:40:9e:b3:07:95:c7:80:1c:df:ba:eb:80:c9:38:
78:ee:91:9b:85:db:c3:dc:50:2b:e1:19:09:51:fc:10:71:e9:
8d:62:84:13:3d:91:6a:1e:5f:cf:80:d4:59:7d:66:f5:73:8c:
39:a4:78:48:dd:08:60:6c:7c:23:5c:92:e1:1e:d1:dd:a5:d8:
52:bc:19:75:6d:f9:5a:75:4e:60:1b:32:0c:b8:ec:59:f0:5c:
82:11:e1:0c:84:f7:23:32:d7:e7:9f:1b:8b:27:76:58:c1:83:
57:a1:e1:a4:60:47:76:f9:3c:4e:91:65:60:e2:4e:f3:9f:57:
82:4c:cc:f6:66:01:3c:69:fa:12:40:e0:ce:15:7b:8b:7f:2d:
47:a1:f6:c2:b6:bf:0e:b7:1f:fa:2d:6b:8c:ad:e7:c5:0a:b4:
66:cf:50:6a:02:99:79:10:a7:36:13:3e:1b:6f:8b:4d:84:de:
f4:6e:2b:ac:ca:c2:d1:d1:f9:e5:bf:f2:4c:f9:e7:4b:27:42:
14:b1:dc:7c:b6:87:46:13:c8:eb:5e:47:e6:21:49:79:3e:19:
73:ed:46:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:19:20 2025 by rpki-client