Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
File: 2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json)
Hash identifier: ziP24WwBvYJYfV+rxYdzaoFIiPckE6Xp5Yg9cIgi8dA=
Subject key identifier: 22:31:41:7E:34:AF:DA:20:81:84:0A:D7:00:FF:FE:71:4C:6A:8A:14
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 019678D62C9F0E8D17F6EEE043E46477635F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 20:00:24 +0000
Manifest this update: Sun 27 Apr 2025 20:00:24 +0000
Manifest next update: Mon 28 Apr 2025 20:00:24 +0000
Files and hashes: 1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: nLGFd45otmIs7WM2Juwy0kiuC44l8FKWgjhUIRnIs/o=)
2: 7IrvKFJoIFvYm_SaTn84qzlHGRs.roa (hash: hUswVz2HCEFpTIdk0ppWtjvST0HpVnKMXk9uiSlgF48=)
3: Pn0wDf0R7ggyXj77nUxucu0roBQ.roa (hash: NJubZZJeNm/G0mSgUFXkzDPPCyG5V/8q9gt8L4huH70=)
4: f__gtya754lWl6PiypfMMRlv6ak.roa (hash: jAVZgaNPAatQgfwrckCngmAk+h006q1378mXt0WwjHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:2c:9f:0e:8d:17:f6:ee:e0:43:e4:64:77:63:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Apr 27 20:00:24 2025 GMT
Not After : Apr 28 20:00:24 2025 GMT
Subject: CN=2231417e34afda2081840ad700fffe714c6a8a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:14:a4:3a:67:47:f9:3b:f6:ad:e9:e4:89:
42:ec:3c:f4:f1:34:f1:b5:8c:a1:8b:2c:f4:6e:c1:
94:4a:23:b7:4f:7a:37:8e:3a:0b:bd:8a:cb:16:d8:
02:ea:2e:52:ea:52:7a:9d:57:e9:22:82:4a:3d:94:
58:68:e4:dd:8d:63:06:c9:7e:24:29:69:f2:31:5b:
e8:8e:a0:99:18:f5:42:37:4c:45:0e:77:90:7a:3b:
72:83:4b:c7:f0:f4:3c:f4:f9:6b:49:65:88:8c:d6:
d7:c2:3b:4a:5d:70:89:33:03:d8:c5:06:f7:ed:74:
44:ba:ad:64:d1:02:29:cd:78:d9:01:d3:0c:c1:0b:
a1:75:2f:15:0c:00:da:95:20:2e:22:bd:ea:8a:9a:
3c:27:fa:d2:bb:89:48:31:43:85:f3:f1:28:42:cc:
ee:fb:59:0d:3a:f1:6c:66:1a:24:cd:80:d0:86:7f:
bf:67:72:20:6a:5e:e9:a5:60:a4:90:77:d8:af:05:
74:b1:31:9d:2e:24:c4:44:b8:3f:f0:1d:24:1f:e0:
c0:35:5c:c9:b6:aa:c5:69:ff:e9:4b:33:15:d3:44:
39:f0:6c:17:4d:f9:89:df:c0:1c:f6:49:13:f8:9e:
f7:1c:09:51:56:eb:ee:dd:99:ab:91:4a:25:3a:af:
2e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:31:41:7E:34:AF:DA:20:81:84:0A:D7:00:FF:FE:71:4C:6A:8A:14
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0e:83:78:11:bd:8c:29:52:cb:9b:b9:08:b6:a2:5e:cf:1a:
c0:9a:61:1e:47:3d:f7:f1:bb:c4:6a:c6:79:ef:d8:91:88:14:
a2:bf:7e:c6:75:55:a8:b4:7a:b5:de:a4:a8:7c:a0:6f:b3:06:
f5:bb:0b:6c:60:25:c4:fd:79:51:db:30:13:8c:49:17:84:8b:
e2:74:f6:cc:96:e6:97:69:e5:9d:1e:4d:7b:2c:aa:b2:f2:09:
7f:10:36:fb:43:1a:29:43:de:6c:62:b8:78:df:2f:92:ca:ad:
ef:d2:e0:eb:ed:e4:ef:5d:28:17:b7:44:59:6f:3d:91:16:c7:
c3:1f:22:78:1f:f6:d3:bd:15:e4:07:ba:22:8f:48:7b:f4:14:
a4:74:37:54:ac:e2:b6:2e:52:fb:50:fc:ab:e4:0e:dc:f3:6f:
0a:55:5c:f4:ea:c0:c7:7e:e9:19:10:4c:d1:71:e3:fd:bc:45:
b9:a4:c9:b8:25:15:3c:f3:b0:e1:9b:46:7a:82:e7:37:19:45:
d0:51:ad:c5:56:e1:d5:e7:9f:47:7f:e2:93:68:b7:07:61:27:
38:67:51:80:b0:5b:11:f6:f2:f8:8a:34:f4:56:cb:07:88:8c:
19:33:0f:e8:97:3d:4e:19:83:ba:a9:b3:40:3b:2c:50:0d:47:
a2:b2:a2:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ41iyfDo0X9u7gQ+Rkd2NfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhODM0ZGYxZGFmYTdmZTZlYWQzNjBiM2VlNzVhMjkzMWFm
MWZmZTkwHhcNMjUwNDI3MjAwMDI0WhcNMjUwNDI4MjAwMDI0WjAzMTEwLwYDVQQD
EygyMjMxNDE3ZTM0YWZkYTIwODE4NDBhZDcwMGZmZmU3MTRjNmE4YTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0UUpDpnR/k79q3p5IlC7Dz08TTx
tYyhiyz0bsGUSiO3T3o3jjoLvYrLFtgC6i5S6lJ6nVfpIoJKPZRYaOTdjWMGyX4k
KWnyMVvojqCZGPVCN0xFDneQejtyg0vH8PQ89PlrSWWIjNbXwjtKXXCJMwPYxQb3
7XREuq1k0QIpzXjZAdMMwQuhdS8VDADalSAuIr3qipo8J/rSu4lIMUOF8/EoQszu
+1kNOvFsZhokzYDQhn+/Z3Igal7ppWCkkHfYrwV0sTGdLiTERLg/8B0kH+DANVzJ
tqrFaf/pSzMV00Q58GwXTfmJ38Ac9kkT+J73HAlRVuvu3ZmrkUolOq8uQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIxQX40r9oggYQK1wD//nFMaooUMB8GA1UdIwQY
MBaAFNqDTfHa+n/m6tNgs+51opMa8f/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUt
MDc1ZGM0NjA0YWVmLzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUtMDc1ZGM0NjA0YWVm
LzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgw6DeBG9
jClSy5u5CLaiXs8awJphHkc99/G7xGrGee/YkYgUor9+xnVVqLR6td6kqHygb7MG
9bsLbGAlxP15UdswE4xJF4SL4nT2zJbml2nlnR5NeyyqsvIJfxA2+0MaKUPebGK4
eN8vksqt79Lg6+3k710oF7dEWW89kRbHwx8ieB/2070V5Ae6Io9Ie/QUpHQ3VKzi
ti5S+1D8q+QO3PNvClVc9OrAx37pGRBM0XHj/bxFuaTJuCUVPPOw4ZtGeoLnNxlF
0FGtxVbh1eefR3/ik2i3B2EnOGdRgLBbEfby+Io09FbLB4iMGTMP6Jc9ThmDuqmz
QDssUA1HorKi2Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:10:41 2025 by rpki-client