Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
File: 2n1fyh5GmSnUqLb1evPLzcY5o14.mft (raw, json)
Hash identifier: v/7RbsL78YF5H1ayFuJUTJoKZjveeg2dRkhv+/oQlnc=
Subject key identifier: 17:D1:B8:48:66:92:A1:FC:4B:E9:0A:E3:EC:14:37:BE:18:50:20:1B
Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Certificate serial: 019679B228789C64C175314F6DDC851BA21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
Manifest number: 017F
Signing time: Mon 28 Apr 2025 00:00:41 +0000
Manifest this update: Mon 28 Apr 2025 00:00:41 +0000
Manifest next update: Tue 29 Apr 2025 00:00:41 +0000
Files and hashes: 1: 0hXs769ouX7ZtQTTiOLlFP8mh8M.roa (hash: MgGCpokd8fHgthtlPirKAzSDRHQrtYokNuVt7GJrmes=)
2: 2n1fyh5GmSnUqLb1evPLzcY5o14.crl (hash: gaFXxvR7or8TMorpoKreUFRI7buzOKrRBeFCBSsZ4hQ=)
3: IaGPCdtFo7YJnFhk0N9F9EeLT9Q.roa (hash: TIaLTE20N+Zb0MJFSwKsXKIcPMWOp3mDxoElESAnpSc=)
4: rE3YGSYa3-bNZwq4ObURWaa3KnA.roa (hash: F8J3J+O4LkFYMHHtAnSrkI4AkbqzBr4SRDcT8pExP58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:28:78:9c:64:c1:75:31:4f:6d:dc:85:1b:a2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Validity
Not Before: Apr 28 00:00:41 2025 GMT
Not After : Apr 29 00:00:41 2025 GMT
Subject: CN=17d1b8486692a1fc4be90ae3ec1437be1850201b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:78:94:ea:ed:59:cd:6b:74:51:46:08:53:
56:22:3c:2b:6c:99:cd:6b:00:f3:67:51:43:9f:d7:
48:b3:cc:94:57:b8:c6:84:5b:50:73:eb:18:2a:77:
d6:57:8e:b5:d6:35:8e:3d:9e:e4:0b:29:2f:b7:70:
c6:49:58:ba:58:d0:97:1c:d2:08:93:21:ee:b4:a1:
73:1e:72:41:16:b4:1a:90:ee:8e:ba:cb:de:71:b9:
19:06:04:96:c7:99:09:05:bb:b0:f5:e6:62:de:3f:
6e:73:34:40:8d:c3:57:cf:7a:b0:17:a0:04:b4:64:
c5:29:b3:72:0e:f3:11:09:01:e3:a5:6b:27:5f:c3:
96:02:41:81:36:60:bf:fa:26:9b:18:f3:ca:47:ef:
bc:65:bb:42:06:66:15:76:e6:89:ab:42:42:f8:3a:
6e:06:8f:5a:15:e6:1f:d9:e6:99:44:70:37:d0:96:
9e:13:b2:3e:a5:db:f7:88:b1:be:fd:0e:03:96:dd:
1e:97:6a:40:ae:9d:b9:74:8d:a4:45:21:c5:7a:e9:
07:de:09:ce:93:51:9e:89:74:8d:26:a2:f8:ff:a9:
d7:23:95:01:f4:72:43:ea:31:6f:76:35:91:06:3f:
d0:4c:10:e8:3b:d3:3a:f6:36:c8:e2:4a:74:02:10:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D1:B8:48:66:92:A1:FC:4B:E9:0A:E3:EC:14:37:BE:18:50:20:1B
X509v3 Authority Key Identifier:
keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:64:e0:e6:34:7d:3d:d4:28:56:15:80:7a:1a:81:53:89:1e:
58:e9:1b:74:4b:16:f8:8e:15:23:6b:a4:3c:41:44:ae:6b:75:
04:5a:cd:d2:b0:a6:ea:2d:53:a1:d5:3b:8a:84:2f:9c:1f:36:
ee:13:52:0f:1a:98:0c:02:6a:78:df:66:15:0f:23:79:aa:40:
2c:39:69:2d:d9:ac:e0:ce:6e:0b:03:f5:67:8b:2b:ed:bb:8b:
98:72:52:f6:35:20:7c:2a:27:ac:8c:9b:bc:75:c9:bc:86:1c:
9a:96:a3:3e:4f:9e:15:07:a8:e8:40:25:56:37:27:87:a2:e4:
2d:df:30:90:6f:64:bb:96:97:cd:89:42:a2:ff:ea:fc:17:a4:
d1:49:f5:85:55:5a:26:10:a4:04:b6:1e:e5:6f:ca:f7:e8:8b:
df:ec:1e:16:ad:5e:b4:8e:76:f2:ff:7f:a5:c2:cc:eb:01:5f:
99:e4:dc:b5:95:9d:c1:24:49:9d:98:4e:4a:bd:5d:ee:99:e4:
78:8c:5a:67:a3:32:da:71:29:5c:44:d2:67:87:1c:d0:db:0f:
bd:30:0a:60:93:86:cc:e0:2e:21:c7:34:3d:9c:ef:28:79:b5:
e5:ca:5b:de:f8:8c:57:eb:88:2b:9b:37:e6:d7:a8:94:05:c7:
75:a9:b7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:31:28 2025 by rpki-client