Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
File: 2Z6pWH5epOljrXrn8SV2HA4pJWM.mft (raw, json)
Hash identifier: WTHSXoobMYpdUFLExQNeIhw/pO1JdsPvW1aHmo/hWNI=
Subject key identifier: 0C:BA:39:77:E3:D3:10:DA:70:C0:81:36:7A:5B:B6:83:15:85:3F:5B
Authority key identifier: D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
Certificate issuer: /CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Certificate serial: 01967FEABEFE40EB2E20A492C326C810E840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 05:00:12 +0000
Manifest this update: Tue 29 Apr 2025 05:00:12 +0000
Manifest next update: Wed 30 Apr 2025 05:00:12 +0000
Files and hashes: 1: 2Z6pWH5epOljrXrn8SV2HA4pJWM.crl (hash: WVKm3dWvjNLNjuww1n7ZPDU47uy7CCtybrW0iDsa9As=)
2: fRfYTFrvzDmGp4DgYCf5CTa4BWk.roa (hash: 8+ivyjKOK9XU+rYZkbxFvkTVk6Yv/MHnjxmXiO2eTsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ea:be:fe:40:eb:2e:20:a4:92:c3:26:c8:10:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Validity
Not Before: Apr 29 05:00:12 2025 GMT
Not After : Apr 30 05:00:12 2025 GMT
Subject: CN=0cba3977e3d310da70c081367a5bb68315853f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:af:9f:9f:10:5b:2e:d5:58:f5:dc:dd:cb:53:
41:f6:fa:7d:fb:e9:b8:2d:ad:ed:4c:fe:d6:6c:c8:
b6:28:56:2e:e2:41:65:74:08:3f:d0:b8:13:79:e4:
cf:6e:a7:9b:0e:fb:bc:30:f6:8e:b0:a4:88:1f:95:
86:e1:49:22:4f:d8:be:5a:40:18:4b:43:d9:ac:d6:
42:ec:39:ae:e8:66:42:21:cc:82:d7:63:df:ce:3a:
75:14:f5:52:05:07:b0:1d:2c:9e:7b:f5:4c:22:06:
25:71:7d:cd:24:af:ea:20:e5:43:ab:c3:26:63:11:
8b:80:fa:63:e1:39:3f:a9:5b:08:49:ce:a7:92:1f:
bb:3d:ed:3c:ab:65:d7:be:76:28:60:af:cc:e6:f0:
4a:a6:d3:db:29:fc:fc:e4:40:a3:c9:aa:e4:c6:17:
23:bf:f5:34:16:f7:30:06:40:dd:6d:3b:b2:14:74:
f0:ca:95:be:a8:5e:43:0e:93:32:c0:da:bc:5b:1e:
5a:ef:c4:d8:07:64:92:dd:b6:9b:81:66:d2:04:75:
8b:53:b4:3a:dc:99:6a:ef:ef:2d:c0:1b:f4:f7:5a:
fe:13:55:26:fe:d8:71:cf:91:2d:c8:e0:d0:37:9f:
42:9e:75:73:1d:2f:77:6a:6f:bf:92:1c:e9:ea:e0:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BA:39:77:E3:D3:10:DA:70:C0:81:36:7A:5B:B6:83:15:85:3F:5B
X509v3 Authority Key Identifier:
keyid:D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b8:19:83:fb:ec:67:9f:26:ad:7a:c9:f3:3e:68:71:80:f9:
b2:3b:f6:19:c7:2e:8b:3b:4e:6a:b8:df:57:40:a9:76:05:8c:
46:35:0e:0d:e1:23:09:bd:38:3a:b8:1d:f6:52:02:4a:35:ee:
ec:9e:d2:4c:e5:32:d2:9e:65:9d:a6:41:60:02:d7:e4:3f:4d:
66:4f:13:4c:3e:d8:60:26:ce:ae:89:a2:4e:dc:e4:f9:99:5b:
cc:f0:af:ce:d1:6e:8f:6c:a6:9e:9d:00:25:05:05:a5:fc:45:
8c:7a:c3:2b:47:45:8e:72:56:e7:62:3d:c0:84:2d:ad:f5:35:
27:84:af:52:7b:7b:4a:1a:51:27:f1:d0:1e:a4:55:f1:b7:04:
20:5d:55:94:4f:88:78:7d:e6:92:65:dc:5e:9a:49:7b:cd:57:
e4:95:ec:ee:6c:90:b3:81:97:ee:3a:b1:ae:15:04:e0:a8:63:
0f:4b:93:11:46:4c:a6:8c:87:9f:97:05:0d:86:df:07:7c:9f:
35:d2:bd:9d:90:7a:73:d7:68:d1:bc:76:75:b2:9f:99:b7:f1:
a3:50:4f:99:92:a4:f4:ad:6e:e5:bc:6d:06:8b:f2:2e:bb:57:
ed:1a:b5:72:d4:1c:bd:fc:ab:f0:ce:18:03:6f:05:a6:4b:02:
28:87:f0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:52:54 2025 by rpki-client