Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
File: 2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json)
Hash identifier: lJ+iWm3rYWHzOy3ndbtY8W2croStXJ1vDUXv/JipjAk=
Subject key identifier: 94:E4:85:E7:EE:B3:09:2B:17:6C:B7:22:B3:4B:D9:08:54:41:E7:B9
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial: 019673E6D4950A3B76A9C64076A0104AF273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
Manifest number: 1513
Signing time: Sat 26 Apr 2025 21:00:29 +0000
Manifest this update: Sat 26 Apr 2025 21:00:29 +0000
Manifest next update: Sun 27 Apr 2025 21:00:29 +0000
Files and hashes: 1: 0I8Tv0UylD63i4vV2xwB6rppwxI.roa (hash: QA7YvKS+a4NHe+cVmaIAaBQvm5w2dBSibTU49pm5mxM=)
2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: CGDjKqbpnCNqlW4Jg118NjqqimEXkZEkXwHnaA8rRCg=)
3: 8Dt0TuVJVMCN6RnRhXhKGlf_lII.roa (hash: sSGLTETKxbNSq3MrBGV2DgOI7we1i0Q8mkHNa5K3SUY=)
4: BvWnnBlWW44V8sVOxm98LqahBBA.roa (hash: 6mRHK+yOMdXINEIp3lFBzgdVlSN/9ntwMd5HVLaTroY=)
5: GSlFodh40GWtFXJ0cvtNrC5QQZs.roa (hash: OLiyxfNtsv2LTCfXCwftWJpdQJ+N0fnXvmkjqgnZmno=)
6: pVnXYoxQriC-WtOLcwsA6Za2gDI.roa (hash: 1qcQ0hH+Vk55dAqX/63+B6qLf3cPHgQEfJdfgWLNx0w=)
7: q_VxYTNksLn-A2DiKrfsqvcSMaw.roa (hash: 9v/49noAVbeRiYCi+xkrBzJwESjZSadJSkvsw1PN9x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:d4:95:0a:3b:76:a9:c6:40:76:a0:10:4a:f2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Validity
Not Before: Apr 26 21:00:29 2025 GMT
Not After : Apr 27 21:00:29 2025 GMT
Subject: CN=94e485e7eeb3092b176cb722b34bd9085441e7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b0:68:c9:e1:0f:ab:15:8e:e3:e1:f0:6c:df:
6a:b0:cb:50:ce:77:be:e0:8a:c5:c3:21:a3:d2:de:
f5:1c:1d:1e:ab:e8:f3:e0:d9:fd:3e:7e:9a:2a:fd:
48:62:5c:e3:e9:1d:1d:0c:f1:7e:5d:ed:fd:4c:d4:
47:f5:9a:80:c3:f7:c4:21:ba:f0:d9:b9:43:b0:cd:
f5:f4:ae:5c:80:96:c8:ed:ee:6b:5a:2d:77:aa:68:
02:cb:51:d2:f9:13:71:5e:4c:64:31:96:4b:a8:8c:
be:51:45:9b:cc:ff:26:d9:d7:64:87:ba:bd:68:3e:
b9:4f:82:27:c8:33:c0:31:bc:36:95:56:12:59:21:
59:f2:51:58:a5:20:39:ec:c5:25:67:16:2b:81:b9:
57:41:10:2b:01:0f:bf:b8:2d:ed:93:fc:13:5e:30:
99:2f:29:24:de:95:d6:91:34:95:ec:f5:94:8a:1f:
dc:79:92:05:9e:fd:ad:ad:b5:5b:42:a2:94:01:80:
9c:14:80:dc:30:83:57:b3:00:9a:1f:d4:1b:6e:3a:
de:8b:91:85:a2:74:e0:19:47:04:ad:d8:ab:8c:79:
33:76:5e:59:61:3a:cd:e9:a5:1d:50:9e:36:9f:92:
2f:d2:db:6d:1b:9d:5e:4e:b2:76:ef:cc:a2:8a:56:
2e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E4:85:E7:EE:B3:09:2B:17:6C:B7:22:B3:4B:D9:08:54:41:E7:B9
X509v3 Authority Key Identifier:
keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:71:56:ba:8e:a2:ff:ae:53:2f:65:9f:28:b0:38:76:fc:a8:
e8:75:d5:cc:54:aa:60:97:60:cd:ba:91:b2:8c:a7:4c:aa:61:
1b:f4:07:ab:4a:eb:38:fb:ef:e3:1b:84:35:18:96:98:80:fb:
e9:86:96:25:32:0b:58:15:99:b4:ba:b1:65:67:bf:4e:8d:2b:
f5:43:ca:a6:8e:66:7b:60:db:fe:7d:86:93:0a:15:f8:6a:ed:
49:8a:b5:e0:fb:c7:e9:27:bb:39:d3:ec:ca:d1:15:7a:a1:5c:
30:fe:c5:a2:16:69:ff:83:41:5e:c5:0c:7c:8d:71:8c:ad:6a:
1e:71:f0:f9:cd:ca:fd:a2:87:37:a0:21:d5:d3:a3:81:b8:85:
d9:56:e3:bd:04:ac:18:76:e6:64:1d:2e:6c:a6:91:56:df:7d:
3a:03:96:be:3a:d2:65:82:3e:5c:14:68:a1:0e:70:fa:da:c3:
c3:d6:6e:1b:c8:fd:d8:8d:a7:31:ca:0a:3f:ba:72:8d:23:51:
f9:5b:02:e3:3f:38:dd:f0:78:bf:24:38:9e:0c:27:ce:1f:61:
64:ad:4f:73:43:3c:eb:58:c1:7f:c1:87:49:34:c4:67:0e:75:
72:36:77:06:4f:64:97:6d:d2:14:11:f4:87:8c:af:5a:d3:8b:
fe:69:82:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:15:46 2025 by rpki-client