Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
File: 2tegsAECooQW4wk7V2WgsndVzPM.mft (raw, json)
Hash identifier: 6w0SHTI2fpQB7VoM7VyDCs6uJxKzYEcSK2mDyg5KD/k=
Subject key identifier: 91:53:47:45:3F:54:C9:B4:A8:97:AF:BF:15:32:37:B7:BF:89:E1:E1
Authority key identifier: DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
Certificate issuer: /CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Certificate serial: 019654C9745F3D7F7F2D3936EC8A56703257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 20:00:10 +0000
Manifest this update: Sun 20 Apr 2025 20:00:10 +0000
Manifest next update: Mon 21 Apr 2025 20:00:10 +0000
Files and hashes: 1: 2tegsAECooQW4wk7V2WgsndVzPM.crl (hash: ibfbwblSlENfomwSvUuOVXIxVNuCCcBA3xmqtCBY1kk=)
2: 5ZXhnjW9kmttlUXf2RDTyr9aXfs.roa (hash: vPUm/BYZ8ccBTBvwoMgmMnzKo9RChAfgHExaHYb8jn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:74:5f:3d:7f:7f:2d:39:36:ec:8a:56:70:32:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Validity
Not Before: Apr 20 20:00:10 2025 GMT
Not After : Apr 21 20:00:10 2025 GMT
Subject: CN=915347453f54c9b4a897afbf153237b7bf89e1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:86:dc:a8:de:6d:eb:36:0a:3e:d1:f4:b1:
dc:4a:a6:93:ae:a9:42:3c:52:a2:18:e0:be:3c:ac:
f2:80:39:a4:ab:b2:29:60:66:56:81:c3:72:97:6f:
53:82:86:db:1c:89:fd:9a:f9:2b:46:88:70:ae:12:
4c:64:d2:79:2f:b6:82:6e:cd:92:6c:65:20:8f:3f:
f9:bd:8d:48:be:7f:78:c8:ef:bb:e1:98:ae:b3:9c:
91:b2:7f:4f:8a:1f:3d:cf:d4:94:7c:c3:41:12:72:
40:ff:1e:cb:44:41:e9:95:87:75:78:eb:d7:c4:e5:
a8:5b:56:87:ee:a5:16:e2:07:8a:6a:29:ee:9e:fb:
0a:ed:0f:74:8c:58:53:cd:27:62:f8:60:a0:d8:67:
94:df:4d:d3:60:ab:a8:70:ce:1f:99:84:78:8b:39:
17:43:70:e3:c0:51:5e:b1:a2:f7:a3:cb:a0:d0:85:
14:bb:f3:7b:62:03:f5:63:71:e9:42:d3:5e:4f:b1:
a0:a4:6e:47:df:a5:55:66:ac:e6:0c:f6:23:c4:66:
4e:62:1c:42:ec:5d:c9:97:09:90:0a:55:88:50:d2:
1f:cf:f5:7d:aa:ca:35:03:f2:3d:31:eb:1b:58:e4:
5f:36:68:71:ef:67:20:46:fe:1b:e8:a8:5a:0e:24:
81:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:53:47:45:3F:54:C9:B4:A8:97:AF:BF:15:32:37:B7:BF:89:E1:E1
X509v3 Authority Key Identifier:
keyid:DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9d:17:22:fd:b7:0e:d0:2b:1f:09:79:64:83:0d:6b:17:56:
60:e5:4b:22:69:7f:e2:fc:78:22:5b:6c:ff:03:0b:91:fe:dc:
42:48:e4:4f:c7:fb:c5:46:7a:21:e5:58:09:ce:9f:bf:b6:b3:
b7:e5:11:1e:00:90:dc:fc:c4:96:09:40:b0:0f:ee:01:59:fe:
a8:a6:e6:9f:a9:01:c7:97:f1:c4:8b:87:55:2b:2f:f1:3d:51:
5e:7a:5b:a3:44:fc:05:83:dd:5b:db:91:77:18:60:4e:98:e5:
24:0d:d9:61:f5:11:33:4d:d4:10:f5:44:01:e0:86:4b:4f:82:
5f:d7:51:f5:07:98:dc:71:92:f0:14:ed:04:cd:44:f2:1a:dc:
78:c6:90:72:bf:05:fa:4a:4a:ed:39:12:b5:1c:84:e4:6f:e9:
ae:b2:b4:e3:5b:b2:b2:ab:1d:db:57:e7:b8:6a:37:b9:1c:8b:
57:3a:00:42:bc:4d:ef:65:3d:2e:ce:8f:83:65:37:69:da:ed:
38:0d:39:79:f6:56:5d:ee:8c:dd:26:8b:89:a0:4c:ba:af:52:
d6:a0:21:d2:6c:e3:17:ef:6e:32:0f:fb:3b:bd:f6:4d:dc:46:
a9:ea:d3:8f:22:30:00:8c:7f:7b:e6:d0:4a:b8:a8:8c:b6:67:
59:63:16:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:52 2025 by rpki-client