Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
File: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft (raw, json)
Hash identifier: Ncdf4m+UGnwcsPakfz/Pq5EiIqmCKj+hbBT1vuTJZ9E=
Subject key identifier: 37:AD:0E:09:E4:B9:EC:00:B5:A8:06:6D:A7:0C:F2:31:A8:AC:1B:3A
Authority key identifier: DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
Certificate issuer: /CN=daddd1b636fe3df1df3d811f644583312a651337
Certificate serial: 01964D7E9C27E28FC54C36707F493627C6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
Manifest number: 1161
Signing time: Sat 19 Apr 2025 10:01:05 +0000
Manifest this update: Sat 19 Apr 2025 10:01:05 +0000
Manifest next update: Sun 20 Apr 2025 10:01:05 +0000
Files and hashes: 1: 2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl (hash: ThGM6OMzi98c7E5Nv/G28q7WD09JBQnPYJI+dwyUkO4=)
2: Ayr05U3NKAd6mblS63pAVZbHnEI.roa (hash: PYCcEhQQfZIx55w6ukJcbUlLU5BAsDen0FIJwdgcRtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:9c:27:e2:8f:c5:4c:36:70:7f:49:36:27:c6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daddd1b636fe3df1df3d811f644583312a651337
Validity
Not Before: Apr 19 10:01:05 2025 GMT
Not After : Apr 20 10:01:05 2025 GMT
Subject: CN=37ad0e09e4b9ec00b5a8066da70cf231a8ac1b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b8:89:5d:94:28:9a:c3:f3:88:48:03:7a:32:
cb:d9:b7:eb:e6:18:c7:60:40:3e:9c:4c:f2:83:a5:
29:a6:ea:92:c4:cd:0f:8e:e2:22:a5:b7:d6:58:c2:
4e:ef:86:5e:12:e2:5c:0e:62:c6:75:98:c9:e8:9d:
02:92:19:92:eb:23:13:65:bb:e9:f1:b9:64:b2:a6:
76:1a:ae:60:41:cf:ca:02:9b:ed:c7:13:19:b3:6a:
15:e0:34:bd:ad:c2:b5:9a:8d:54:72:17:61:a2:c9:
b0:74:6d:33:cf:e0:d1:c4:33:16:1a:d4:26:2c:3a:
c5:c1:61:53:52:77:42:7b:03:f5:3f:63:a1:7c:0a:
b8:0f:23:f6:c7:e2:4b:c4:ad:81:52:f0:39:7b:10:
fe:57:c5:fe:28:f7:57:b8:8b:08:8d:4e:90:2d:bb:
e0:8b:32:16:82:a1:4b:4e:aa:fe:e1:a1:31:46:8c:
1f:53:58:c7:38:8c:0d:d6:11:25:ec:6c:c1:2b:12:
d6:13:7b:e5:f7:c3:87:b0:d5:83:0d:a9:66:a4:90:
87:24:7c:01:74:d8:f4:13:ce:22:a0:93:c9:80:a0:
f9:4c:d8:58:46:dc:5f:86:f6:4d:d8:e4:b6:f1:af:
23:83:48:a9:66:48:44:4e:00:41:3b:23:0f:d6:7e:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AD:0E:09:E4:B9:EC:00:B5:A8:06:6D:A7:0C:F2:31:A8:AC:1B:3A
X509v3 Authority Key Identifier:
keyid:DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:12:44:bf:94:b1:76:c5:16:7c:e2:f6:48:16:ae:56:63:7a:
0d:2d:a2:79:19:60:06:e1:e4:ee:42:93:2b:90:b2:3d:09:65:
c2:76:c5:2f:65:bb:fb:41:0e:29:2d:49:14:e8:ca:50:bc:cb:
7a:69:68:d8:62:cb:16:b6:43:7e:d8:ec:2f:c5:bf:ef:28:b3:
1a:88:88:4a:1f:7b:fd:71:5d:74:35:92:f9:c1:fe:db:b3:e5:
39:63:57:cd:3f:df:33:82:a4:a5:6e:2e:45:a8:51:f1:ce:14:
a6:ff:3e:a7:d6:a8:be:b8:b8:cd:74:1a:a1:7b:40:42:f5:69:
29:ad:20:1a:8b:55:d0:e5:66:54:f2:3f:68:52:4c:52:75:ec:
c7:7f:53:6b:b3:17:6b:61:c6:bd:e5:69:ac:c4:ed:3f:b7:9b:
55:ae:ba:23:fe:1f:79:37:f1:88:c3:a4:a7:49:69:3e:da:d4:
c3:bb:04:5e:91:e9:db:6d:5f:a6:6a:53:1b:d1:86:fd:d8:db:
a8:90:b6:a2:65:bc:1f:33:e9:a6:8d:67:10:78:d7:9e:04:0f:
95:04:e5:0e:ec:ae:cd:59:a5:1a:6e:64:6a:63:4a:70:a4:a7:
c8:6e:e2:5f:a5:1f:b0:33:83:1a:6e:38:dc:93:19:f6:d8:12:
a9:02:ad:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:03 2025 by rpki-client