Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
File: 2q4t5U2ijHPxmz4E75V06ZBX8aI.mft (raw, json)
Hash identifier: SQVgVRbxYqyK62b0H0LxhDTSNhGszW3T3gCupGqHOoA=
Subject key identifier: 81:E4:F4:1C:67:DA:54:B0:B3:98:2B:99:BF:95:98:76:B0:19:46:E3
Authority key identifier: DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
Certificate issuer: /CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Certificate serial: 019653B796068148584D34139FB7EDF0818F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
Manifest number: 0158
Signing time: Sun 20 Apr 2025 15:01:02 +0000
Manifest this update: Sun 20 Apr 2025 15:01:02 +0000
Manifest next update: Mon 21 Apr 2025 15:01:02 +0000
Files and hashes: 1: 2q4t5U2ijHPxmz4E75V06ZBX8aI.crl (hash: lRHBXrkt/syFLx29kQa21UsRtQK7jnEXZf92T7msGJc=)
2: do4MLi2XOROC_5hp-i0wtkMXxiI.roa (hash: XtNQLEaSVJ/naERfmHPmWmnX71JF7xa9zoeT8jSVaYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:96:06:81:48:58:4d:34:13:9f:b7:ed:f0:81:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Validity
Not Before: Apr 20 15:01:02 2025 GMT
Not After : Apr 21 15:01:02 2025 GMT
Subject: CN=81e4f41c67da54b0b3982b99bf959876b01946e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:db:42:8b:5a:83:d2:3b:c8:89:33:e3:dd:
f5:a9:8f:53:1b:b5:d5:83:71:65:d7:64:ce:f6:95:
f2:61:a0:e2:fc:b5:21:c3:ca:94:12:00:c9:20:64:
53:f1:69:ce:c4:93:71:39:43:f9:55:06:e6:20:56:
bb:f5:a2:77:b6:1c:2f:e4:51:f8:d8:ec:26:44:8b:
db:46:3c:5d:a3:81:c3:2c:5e:38:ff:4e:7b:fa:64:
6a:6a:05:d8:d6:e3:ca:2f:11:24:a5:3b:5b:98:c9:
9e:f9:57:59:4a:c0:17:e1:5b:c7:3d:61:a0:de:15:
80:18:4b:03:4b:02:50:30:36:48:01:63:6f:85:cb:
ba:db:85:d0:5e:96:b0:45:db:b0:29:a9:d7:ae:9f:
1d:09:de:14:1a:92:f1:6e:08:81:0c:7f:3b:a1:cf:
9b:6e:17:21:69:e1:c4:6f:c7:32:04:71:b3:83:33:
99:6c:eb:7e:43:1d:16:33:3c:61:5c:67:4d:7b:20:
1a:b5:71:58:ca:d6:b2:d0:c1:40:3d:78:ac:a8:7b:
80:ea:7e:33:38:a3:12:73:28:21:14:43:35:61:78:
8e:16:9d:c8:f4:ae:62:57:c6:cf:c0:8a:ab:68:30:
f0:ff:78:bd:b2:93:fe:64:b6:7e:b8:0d:7c:29:55:
82:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E4:F4:1C:67:DA:54:B0:B3:98:2B:99:BF:95:98:76:B0:19:46:E3
X509v3 Authority Key Identifier:
keyid:DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:79:5d:27:ac:c2:41:26:32:71:31:e1:e7:59:67:ab:46:70:
8a:a1:13:e2:4a:85:10:d0:b0:8c:88:c3:44:e5:54:22:cf:71:
a2:02:cd:b4:95:44:27:f9:a9:74:8c:fe:7d:13:17:06:82:2e:
d7:9d:5c:21:38:4f:84:9c:0a:44:2a:1b:3e:e8:ea:04:00:b1:
5b:86:6c:56:3a:df:1c:02:8a:4c:0e:7f:bc:8f:0c:80:f1:c6:
95:bb:d7:18:80:7e:d3:10:6b:3a:0f:4c:c3:39:c1:00:50:3d:
64:3e:14:a6:98:5b:f6:8b:73:6d:86:8a:4b:bc:71:b8:d7:32:
33:fa:94:e7:a5:02:88:b1:e6:f1:3d:60:68:49:15:75:09:7b:
a0:8b:f6:dc:ba:a1:7e:8a:b8:48:40:2b:03:ba:26:65:fa:30:
d6:72:5d:00:c0:e3:d7:9f:41:ad:45:60:2f:df:97:2d:ee:76:
ce:c2:90:bd:12:5f:54:c2:23:d1:ab:54:22:fc:63:10:1d:39:
b2:e1:b4:d1:db:36:45:1a:5e:7e:f6:fb:f4:fa:3c:d1:73:74:
c1:7a:ce:2b:6e:b2:5c:73:8e:0f:62:6d:ac:0a:1f:65:de:7c:
54:09:c1:df:93:d9:01:2f:7e:6c:e6:c7:55:b8:6d:e5:87:7b:
a1:16:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:55 2025 by rpki-client