Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier: vPWn8t4yJo/VZZBBP6dZ8y5Zos1nQJSph+kal4qg378=
Subject key identifier: 8C:B7:4B:9B:54:09:34:A3:71:90:89:AF:71:12:29:AE:5F:C8:2B:A5
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer: /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial: 01967C457C7D7C2D286E592B7B94BE62C5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number: 05AD
Signing time: Mon 28 Apr 2025 12:00:50 +0000
Manifest this update: Mon 28 Apr 2025 12:00:50 +0000
Manifest next update: Tue 29 Apr 2025 12:00:50 +0000
Files and hashes: 1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: /TeWl+vc162z3wrMrbgXe5bX3T4B9bbWTbufgp2FtB4=)
2: g6X_lRYXDJRZnC8lMpbRmD7fpGU.roa (hash: hq/bivbA56Qmzu+4HRNaps/x/ti0y7YbNHmOsoCnEhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:7c:7d:7c:2d:28:6e:59:2b:7b:94:be:62:c5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
Validity
Not Before: Apr 28 12:00:50 2025 GMT
Not After : Apr 29 12:00:50 2025 GMT
Subject: CN=8cb74b9b540934a3719089af711229ae5fc82ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d8:d9:b1:e0:d2:17:d3:22:ea:39:d3:84:bf:
0f:f1:77:97:82:40:45:7c:d7:9d:82:0e:08:0d:2e:
a4:22:e9:4b:18:dd:eb:81:1d:af:db:b1:6d:15:5d:
31:75:7d:46:f5:91:16:fe:4c:bf:80:5a:fd:f4:7e:
4d:aa:df:c4:43:67:a8:68:87:07:c5:52:af:7e:8c:
fd:d8:e6:a3:01:3a:3a:14:e3:37:40:8c:2a:51:5f:
45:e3:8e:e9:52:a4:e4:c7:ca:15:c6:74:75:5c:39:
73:d0:52:40:c8:27:18:e7:f7:23:67:1c:61:bb:68:
93:65:85:65:8b:f5:c4:3d:8c:d4:3c:7e:e6:8f:9b:
04:34:a5:79:88:8a:d5:d7:8b:1b:db:69:d9:81:a8:
34:97:c1:74:94:0a:8a:d6:cf:88:60:68:7a:60:5d:
40:08:39:60:5e:48:46:9b:85:ad:d1:d0:81:11:fe:
c3:6a:d8:fd:d5:7d:3f:9d:5e:1c:a4:a1:43:92:25:
24:26:a1:21:97:f0:42:27:1d:fd:38:d9:1f:29:4d:
e5:b0:27:d1:cb:dd:80:dd:4a:2e:db:03:7b:bf:a2:
3c:a1:7a:60:77:96:b5:2a:f6:17:15:d2:a6:a1:75:
40:89:bf:f6:ee:bd:b6:68:5b:d5:30:fd:d6:fc:9e:
28:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B7:4B:9B:54:09:34:A3:71:90:89:AF:71:12:29:AE:5F:C8:2B:A5
X509v3 Authority Key Identifier:
keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:93:e5:12:cd:75:40:37:66:b3:af:4f:78:74:6f:c3:49:9b:
71:60:bb:d9:f1:21:9c:e4:2f:92:92:29:cb:bb:67:2d:ec:8b:
a0:2a:94:84:82:9f:1a:86:d2:29:90:20:da:d9:92:92:f2:82:
10:49:d0:e4:d1:6b:c5:c7:8c:ad:94:3e:0e:a6:6e:63:1a:59:
0d:9a:0f:ef:a9:d3:c9:3a:d6:a6:c4:70:f6:3f:50:d8:dc:14:
c7:cc:d3:30:65:cd:32:f7:77:80:08:c2:9d:cb:90:dc:35:91:
f5:52:44:ce:7a:4b:28:6e:ce:08:1a:2e:82:1c:ac:89:9a:09:
9a:15:aa:27:87:9e:45:e6:23:ed:e3:a3:50:cc:2c:9b:e7:aa:
14:2d:91:92:47:49:51:62:19:b6:31:76:f7:78:c9:02:f0:dd:
20:a5:c9:87:98:e0:a4:34:64:52:da:e3:ab:98:a2:83:22:a1:
cf:15:28:67:3d:6b:ae:d4:03:a1:5c:b9:d2:d1:a6:75:44:3d:
9a:0b:bc:8c:e1:49:95:a9:33:b9:a5:5e:d6:d1:92:4f:35:cd:
d0:ad:93:34:c9:42:b8:dd:de:54:e0:b7:18:fe:68:02:04:9d:
72:13:7d:05:5e:3c:b3:7e:e3:81:43:63:0c:96:cb:4e:97:65:
45:4f:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:17 2025 by rpki-client