Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
File: 2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft (raw, json)
Hash identifier: Zewg9a7CpTXr8f6KWfUQL8g8gCkExjS5nM4qIXaeIC4=
Subject key identifier: 27:53:3B:20:09:6C:4A:E5:1E:54:ED:90:8F:BC:67:30:52:1E:BB:D0
Authority key identifier: D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64
Certificate issuer: /CN=d99becd088794b11daf34c7f54e59f6939fe9864
Certificate serial: 0196564A26C774EB9D8BAE4DD5DFA137B8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
Manifest number: 021C
Signing time: Mon 21 Apr 2025 03:00:22 +0000
Manifest this update: Mon 21 Apr 2025 03:00:22 +0000
Manifest next update: Tue 22 Apr 2025 03:00:22 +0000
Files and hashes: 1: 2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl (hash: UmyFukgmFLMB0lI5+FE/I177M/h0zDr0YW8CTo7weIY=)
2: P6mLuYTWcn0KuLmD43cJ982GF44.roa (hash: lthkyf0qk/Tj3D6L/66lHDSOVo0evf5q6TD/uKiHGiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:26:c7:74:eb:9d:8b:ae:4d:d5:df:a1:37:b8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99becd088794b11daf34c7f54e59f6939fe9864
Validity
Not Before: Apr 21 03:00:22 2025 GMT
Not After : Apr 22 03:00:22 2025 GMT
Subject: CN=27533b20096c4ae51e54ed908fbc6730521ebbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:60:ec:0b:3d:f4:67:80:70:02:cf:88:4f:
f9:c8:85:a5:58:be:75:d7:95:ac:9f:cd:87:16:1b:
e6:02:37:4c:72:a4:fe:13:3d:63:af:45:21:8d:0e:
43:cf:b3:43:8a:84:38:89:83:56:8c:e2:9c:0b:1a:
f3:2f:07:ef:d2:cc:ca:b6:11:8a:d7:3e:79:70:68:
5d:f1:da:f0:72:d6:b4:1d:5c:8e:55:1b:63:c9:07:
c9:38:8e:41:be:6c:d5:c9:be:90:23:18:da:ed:56:
af:c1:07:af:c8:e1:04:ae:12:2a:99:40:44:ed:ea:
fe:c6:df:34:d7:a9:cb:1c:a4:09:c9:6a:da:c1:0b:
6d:2b:15:4c:82:d8:a5:79:80:ae:ef:61:9f:7f:a9:
e7:2e:6e:8a:a5:d2:ff:0a:2c:c9:2a:0c:d4:95:b3:
0c:9f:ca:7b:ed:0a:4b:a2:47:55:3c:d2:07:b6:05:
7c:7e:34:fb:32:c7:ea:ea:76:1b:6a:01:d7:ac:35:
2b:1e:a9:02:27:62:44:fa:52:49:6f:39:9e:f4:60:
c3:c9:28:cc:6c:c5:c5:06:d5:2d:6b:8e:26:21:ad:
df:fb:46:a9:fc:d2:03:92:ab:b2:c7:5e:32:90:df:
89:33:c6:71:6a:eb:99:44:32:92:ce:4f:91:86:c7:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:53:3B:20:09:6C:4A:E5:1E:54:ED:90:8F:BC:67:30:52:1E:BB:D0
X509v3 Authority Key Identifier:
keyid:D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:85:b0:a4:27:3d:0e:ad:1a:0a:3a:07:0d:fc:cf:15:01:f5:
55:11:8e:6e:fd:a2:09:b5:51:0d:1f:b5:d5:8b:c0:4f:50:22:
86:0f:52:4f:d2:85:9e:c4:d8:91:de:3b:4b:cb:14:20:07:1c:
c1:48:a6:98:a4:44:70:42:51:2f:87:ce:55:82:bb:0e:e2:fd:
7c:03:18:26:83:22:a6:9d:b6:e4:13:b3:40:62:bb:1d:62:79:
83:4c:ab:ff:7d:6e:f5:12:8a:65:bb:ea:76:80:9e:7b:ea:48:
71:35:81:99:a1:e1:c0:b1:f4:7e:8e:8f:45:73:d8:ca:4c:c0:
6f:d8:72:24:e6:c9:ad:ab:87:65:85:e1:5a:02:fd:5a:7f:a1:
44:ad:0a:5a:3d:6b:44:79:11:bb:65:a6:83:cb:e9:bf:57:0a:
59:f9:01:cd:64:b3:3d:94:33:9f:93:80:e3:7c:8d:c4:9e:88:
b1:17:2b:c1:d8:e7:f3:fa:58:ca:15:83:d0:74:cb:10:1b:75:
d5:ed:5d:c2:6c:49:f9:8a:36:e9:64:ed:07:e5:6f:52:46:09:
2d:bc:e7:ba:d1:b0:91:72:0b:ff:0c:0b:43:17:49:da:f1:1c:
d8:70:e3:f0:d7:ce:ca:79:00:85:52:d8:2f:dc:3a:ed:eb:b6:
2d:ce:30:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:40 2025 by rpki-client