Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
File: 2vy2Q-aiHi-24hzQZTqwlenr7xM.mft (raw, json)
Hash identifier: FRNDOU1k4Z5hXspnxMFdwvG4G0QLbFTREc1bvKxsWdo=
Subject key identifier: 25:DF:DE:25:5B:39:89:17:11:F6:C9:D3:C5:F4:31:95:67:CF:00:00
Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
Certificate issuer: /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Certificate serial: 0196760D1B4A56C89A4EE6B7740EBC0626C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
Manifest number: 13A6
Signing time: Sun 27 Apr 2025 07:01:32 +0000
Manifest this update: Sun 27 Apr 2025 07:01:32 +0000
Manifest next update: Mon 28 Apr 2025 07:01:32 +0000
Files and hashes: 1: 2vy2Q-aiHi-24hzQZTqwlenr7xM.crl (hash: Zs6EFj5fFn7BOs457eRhn7Q+gDIi6S555v5kccMiLXg=)
2: XoV9N0j6H78F41W2zYIj2kSiFP4.roa (hash: XyaPIDPQv/zJjAxhNU5V2ftiSqBuA4U9SWVpvc6Tesw=)
3: cK0E2MhGVrGSWPTCnfeQC1sAuxs.roa (hash: uuk3LoGMturH/eTE0jHSUZ94kTlLI2qzp8ngct2Ku4s=)
4: dsI79c9RkSXCJw4J0k20aJh3S5k.roa (hash: WdLdZEAe44rS1q9Lslq+6ZV6nfvfr1+ikiH+EPMF39M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:1b:4a:56:c8:9a:4e:e6:b7:74:0e:bc:06:26:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Validity
Not Before: Apr 27 07:01:32 2025 GMT
Not After : Apr 28 07:01:32 2025 GMT
Subject: CN=25dfde255b39891711f6c9d3c5f4319567cf0000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:d7:27:73:24:58:b5:83:8a:6e:b9:a6:06:
e9:77:d3:62:98:dc:03:19:21:9c:be:e8:9e:ac:f3:
c7:a6:97:9c:1e:ed:cd:be:c7:a8:aa:79:d8:de:e4:
c1:fc:99:21:5a:b8:ff:77:6b:f7:65:91:65:3a:2b:
a5:51:3d:2f:97:d9:a7:7f:18:49:dc:4b:f2:9d:24:
55:14:6b:f5:e7:f7:1b:ad:7c:23:fb:7c:dc:84:0a:
00:b4:ab:76:6f:90:dd:d8:53:94:b3:cc:ad:5e:1c:
08:0a:3f:48:44:ad:e9:b0:d4:77:7b:07:92:06:d7:
e1:27:43:bd:fd:7f:f4:84:65:04:a9:bb:87:89:99:
a9:fe:1e:85:d2:d3:21:55:34:19:a4:0a:91:c0:f8:
c1:54:19:70:4d:77:a6:b8:f6:dc:fc:f0:35:8f:1b:
35:66:63:42:8b:fb:48:2c:c8:ac:45:52:d3:4b:51:
28:0f:a5:c5:af:a1:19:d5:42:4b:12:57:8d:60:5d:
6c:88:4e:16:ca:d3:ae:8b:fa:e6:20:f7:ed:14:7e:
73:34:77:57:7b:4c:a6:df:a8:28:2d:ca:b9:9b:e0:
23:3c:1c:91:c3:27:ca:79:2e:de:88:2a:34:5a:ed:
78:68:f4:da:6a:ca:4d:e4:93:14:a8:ee:c0:a2:94:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DF:DE:25:5B:39:89:17:11:F6:C9:D3:C5:F4:31:95:67:CF:00:00
X509v3 Authority Key Identifier:
keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0b:ec:7f:97:2a:fa:5f:1a:82:0b:99:94:25:2d:eb:6e:9d:
c8:d6:66:bc:cb:84:11:42:e5:c6:cd:1e:ba:12:06:f3:d8:69:
5d:ea:ae:c1:ce:8c:cb:82:3d:1c:65:11:dc:a7:96:f0:0a:d3:
fa:5a:3b:03:de:a0:64:49:04:16:7f:14:bc:a1:5d:34:a1:99:
b5:91:34:ee:c7:56:dc:56:4b:3b:63:f8:e8:e0:10:8a:be:43:
c4:c0:cc:c3:a2:fd:81:6c:98:ab:1f:e6:c3:67:01:bb:2f:e2:
49:4d:0e:e4:ab:0f:f4:b0:cc:84:7a:a2:84:f6:5f:e3:82:bb:
49:88:ca:66:e2:77:00:d7:bb:f9:cf:6d:38:5d:dd:20:93:17:
56:45:77:77:ca:d3:82:bf:42:32:3e:f8:f7:f2:f3:f1:12:81:
e3:4e:53:0a:a9:97:f1:c0:a6:fd:5a:66:da:97:b2:9c:22:71:
f1:5b:bf:58:be:94:99:87:33:8b:87:9b:62:39:60:e8:17:0b:
4f:42:8e:ab:89:d1:49:d2:ec:0c:f8:ca:61:9e:72:b6:e8:70:
71:28:c1:d9:24:d4:81:20:bd:db:77:63:d3:4c:6e:56:08:dd:
58:7c:cc:32:20:7f:b1:69:0f:0e:66:da:e6:8f:e8:9e:ac:9f:
57:08:0e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:17:36 2025 by rpki-client