Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier: 4n9scK/MeF81OBmfQ3ZIT++NUP9kocgkjZ5vEbLDAFU=
Subject key identifier: F3:34:97:16:E7:27:A3:22:AE:B9:EE:CD:59:21:77:64:7D:E9:26:10
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial: 01965A5DCBF77263507ABB5D4ECC133AA9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number: 0220
Signing time: Mon 21 Apr 2025 22:00:18 +0000
Manifest this update: Mon 21 Apr 2025 22:00:18 +0000
Manifest next update: Tue 22 Apr 2025 22:00:18 +0000
Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: jfmaxmhMZr4g/E7lE1iHD0UxOrZ+hslHAPGVqCTChjA=)
2: pZjQfG12G_tUKYaEkvnLZUTVbws.roa (hash: dmPm4kVANU0TIQJn0Fmatq8TN1c2CZw4+USK4XmWGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5d:cb:f7:72:63:50:7a:bb:5d:4e:cc:13:3a:a9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Validity
Not Before: Apr 21 22:00:18 2025 GMT
Not After : Apr 22 22:00:18 2025 GMT
Subject: CN=f3349716e727a322aeb9eecd592177647de92610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ee:b0:a3:9e:06:99:9d:7f:38:a0:85:93:b7:
77:9a:ff:c2:73:17:8f:7a:ff:1e:da:1a:a7:ba:98:
fa:8b:db:85:de:ae:f7:c2:d4:69:99:e1:08:e6:85:
8f:81:49:91:e4:04:59:c3:37:54:c7:d4:47:f1:cf:
ac:04:63:bd:9e:04:cb:19:eb:ce:9d:f8:5f:e4:9e:
08:d2:1f:f0:85:31:43:91:52:08:fd:d6:3a:2b:48:
13:a8:11:15:21:d3:f1:4d:ac:b1:d9:e7:68:74:6f:
a2:38:85:e8:e9:7c:d8:3f:f7:ec:6d:22:86:d0:17:
e6:f2:09:70:0a:ff:c9:3a:94:0d:86:cb:6b:1f:96:
ec:24:a5:24:df:6a:89:34:e8:95:42:7d:98:45:f2:
1e:19:9f:6e:50:72:34:67:41:96:7c:ce:ab:95:81:
c0:b1:86:af:2e:b0:84:6d:ec:7a:24:f5:38:c4:d2:
01:05:2f:6e:b6:6a:34:e4:8d:7e:aa:f6:e7:94:47:
9e:0c:6d:f8:db:64:21:c7:8b:eb:89:2e:a0:48:d2:
b6:40:e1:2d:86:f1:03:8f:d0:77:c1:9c:f0:7d:63:
aa:e8:8a:84:b1:b4:8f:85:9d:85:fd:31:a8:2f:9a:
dc:af:49:d0:f8:3a:ce:f9:37:74:a9:63:ed:24:0e:
9c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:34:97:16:E7:27:A3:22:AE:B9:EE:CD:59:21:77:64:7D:E9:26:10
X509v3 Authority Key Identifier:
keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:48:fc:85:ae:a8:e1:e1:0a:50:94:75:55:08:81:b3:30:d7:
d1:07:47:3a:36:1a:b4:cb:b0:91:cc:80:15:f8:12:7e:93:96:
fb:42:4f:17:bb:ea:5b:ab:a7:63:b9:51:81:6a:20:57:30:90:
65:5b:54:6b:9a:be:62:7f:38:bc:4a:4c:92:8e:fe:78:db:49:
8f:25:31:5e:cd:7e:38:17:61:9b:dc:cf:cf:f1:44:b1:fe:22:
8f:96:c0:04:dd:b6:55:13:ff:4d:39:0e:2e:e6:02:90:24:b5:
aa:07:5b:77:4a:dd:18:c8:78:76:97:7a:d1:6e:95:b9:75:f1:
b7:f1:d1:2a:bb:04:b2:f2:91:0f:df:af:14:6e:ed:92:e0:6a:
2a:06:0c:04:a9:cb:7e:bb:4b:f4:28:f6:c2:7c:9f:82:66:c6:
75:68:39:48:48:6a:b8:3a:b6:da:c2:41:0f:a3:84:2c:f2:cb:
9d:80:e0:d8:9c:8f:d4:76:42:5d:44:68:93:28:fe:fd:e4:a4:
78:82:88:19:67:79:94:87:99:0d:5b:f2:69:f5:bc:6b:0c:ab:
5b:9a:0c:d5:79:22:98:b0:f3:87:e4:64:8d:a3:5c:e3:42:3f:
22:83:2e:91:14:bf:b4:27:01:d4:a5:be:7f:60:3e:eb:98:50:
a3:4c:70:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:32 2025 by rpki-client