Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: Fmczqi4EetT+QEmtbh39vg+BzfeT3CEFuQ7uyVWkNKI=
Subject key identifier: B7:BC:FE:EF:09:DE:E7:3E:E7:5D:62:C6:56:8B:95:CC:24:D7:BB:64
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 01968359C2B09B53280C8DF585EEC2B12E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 21:00:19 +0000
Manifest this update: Tue 29 Apr 2025 21:00:19 +0000
Manifest next update: Wed 30 Apr 2025 21:00:19 +0000
Files and hashes: 1: 1-73UFjQEbEaiw-VEpYxtRIeSwTw.roa (hash: Xec6kbupZB2RH/ACciM0eanhiUxUAjw16Uj0UlJXaPY=)
2: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: JrdCMeRcpgucrURkOjP74lW+Vpkq8DtvgjAcesM8WKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:c2:b0:9b:53:28:0c:8d:f5:85:ee:c2:b1:2e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Apr 29 21:00:19 2025 GMT
Not After : Apr 30 21:00:19 2025 GMT
Subject: CN=b7bcfeef09dee73ee75d62c6568b95cc24d7bb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:09:28:24:91:55:41:d3:2e:89:cf:67:fc:
13:d9:c5:10:6d:b3:05:93:c0:94:86:85:32:fc:89:
db:b1:c0:86:b6:83:1a:05:7d:08:7e:35:4a:7b:2a:
78:55:f1:00:d8:93:58:7c:d6:52:fc:a8:42:87:8b:
91:1e:d9:2b:e1:e9:78:1d:a4:ea:93:41:63:0a:3d:
46:34:cb:d5:5c:5a:ea:db:98:1d:a5:69:d3:cc:b2:
da:df:bd:2c:34:17:56:08:74:cb:ab:64:73:be:19:
6f:4f:ac:bc:d1:e8:49:21:fa:1a:a5:84:a2:a4:e5:
98:63:8b:be:bd:27:80:ef:2a:48:ab:46:4a:da:37:
51:3c:b8:4e:42:93:66:27:88:2d:23:32:cb:13:1f:
92:21:bd:20:e4:93:c3:a6:61:a5:71:54:4e:55:44:
ba:b1:1d:94:a0:34:3b:66:47:8a:95:8e:31:77:42:
02:f7:46:20:70:ee:0f:4b:f6:c7:a7:06:b5:68:2a:
f0:2d:a0:1e:66:88:0f:4f:c5:08:68:83:1c:90:ed:
2b:c7:89:94:a4:09:3f:01:06:2f:75:a2:e5:68:fa:
ab:0a:c0:62:fa:64:c3:15:2e:ad:87:94:c5:e9:4a:
d4:f3:9e:03:80:89:0e:ec:49:90:30:26:1b:1e:06:
e8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BC:FE:EF:09:DE:E7:3E:E7:5D:62:C6:56:8B:95:CC:24:D7:BB:64
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:97:26:92:4b:5c:4e:5b:3e:a1:45:90:1c:51:95:00:10:dd:
3f:dd:d6:cf:73:be:2c:d1:aa:8a:aa:0b:be:70:d7:1e:7c:b0:
60:d6:f3:4f:6e:af:d8:ae:00:87:33:e1:12:28:5a:b8:09:bf:
88:d6:20:e2:30:a2:fa:e8:0b:80:d4:55:90:2d:58:54:e3:4f:
cb:40:97:19:ad:c5:c4:a0:a0:18:dc:c6:60:17:c5:3c:50:7f:
80:1f:dc:2c:f2:de:3a:73:fd:b4:11:31:39:01:c7:bc:87:2e:
16:82:c8:5b:1b:b9:0b:94:74:29:be:33:9a:e6:c4:47:fd:43:
af:c1:16:d0:01:95:4d:89:73:88:66:19:28:06:3c:30:8f:3b:
82:37:e8:44:14:55:f5:e6:02:03:03:7a:6c:92:bc:f4:62:a1:
80:b0:20:f1:9c:6e:14:35:e1:dc:e3:eb:bb:e8:48:a4:dd:5c:
4d:d0:dd:ea:74:1d:6f:1f:b1:14:24:42:08:cd:bd:c3:56:61:
6e:f4:02:62:bd:6a:7d:c4:5e:73:01:88:c0:2a:2d:40:cb:fc:
50:f8:7b:df:16:aa:c9:f6:1e:78:9a:33:92:fa:3e:33:9b:30:
89:95:29:36:60:b3:00:cf:e2:42:c7:e3:bb:fe:71:15:ce:59:
3f:4b:24:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:37:02 2025 by rpki-client