Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
File: 2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft (raw, json)
Hash identifier: z1sDUUVF4Y6M9/D5WjLH13o4Wwk+wZ1NSOkuHT0ua/8=
Subject key identifier: 1A:0F:25:CB:0D:63:E6:DF:B9:85:C9:45:0A:20:B0:52:30:75:4F:3D
Authority key identifier: DA:90:D0:4B:F5:7F:A4:86:8E:69:99:7C:83:B3:AD:77:1F:D5:0A:9D
Certificate issuer: /CN=da90d04bf57fa4868e69997c83b3ad771fd50a9d
Certificate serial: 01965613C2BF6B35174D447764FA38ED4705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
Manifest number: 0E0F
Signing time: Mon 21 Apr 2025 02:00:57 +0000
Manifest this update: Mon 21 Apr 2025 02:00:57 +0000
Manifest next update: Tue 22 Apr 2025 02:00:57 +0000
Files and hashes: 1: 2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl (hash: Qz7G4znA63q7+ZhgEV6jIGdjY6guKzyijrZpoZpYmwo=)
2: fvccoh-XRGUydolEQwVKUg__llM.roa (hash: MESTegxG3uX73jrknXUqcZY7a9Gll4oI6clWX78ISS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:c2:bf:6b:35:17:4d:44:77:64:fa:38:ed:47:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da90d04bf57fa4868e69997c83b3ad771fd50a9d
Validity
Not Before: Apr 21 02:00:57 2025 GMT
Not After : Apr 22 02:00:57 2025 GMT
Subject: CN=1a0f25cb0d63e6dfb985c9450a20b05230754f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:bd:44:c7:9d:ae:0e:c0:fd:01:03:25:f6:
e7:39:1b:3d:ff:c8:32:61:18:f0:3d:0a:e1:31:f6:
ef:80:43:79:e7:b4:81:14:19:f2:06:c5:fe:e4:96:
ca:c1:18:02:c8:a1:5f:8c:e5:7b:71:2b:a9:da:4f:
d0:2e:87:4d:27:2e:9e:c4:b5:45:bc:86:4d:65:46:
a3:9f:47:6a:c1:36:85:d1:d4:8a:02:42:7d:52:8d:
31:c9:94:99:78:8d:94:3f:10:e8:09:13:02:79:68:
24:40:8b:8e:4d:2b:76:90:d8:70:12:a1:92:3e:a0:
bb:0a:9a:d2:30:7d:ee:9c:3c:58:4a:2c:ff:59:88:
67:22:5b:a1:a8:22:b2:1c:f6:a5:23:f5:c4:f3:fd:
80:e3:a0:be:a4:c7:cd:07:64:f3:16:b6:88:24:5a:
b7:89:3e:c4:d2:5c:be:19:03:24:23:e8:8d:2f:89:
01:84:50:72:c5:b7:c3:64:95:a9:54:2a:b5:a4:00:
42:00:60:c2:cb:ac:46:ba:21:ff:ef:ef:7c:74:57:
bf:31:70:9d:f3:49:10:76:d6:d3:c6:49:9d:b6:26:
33:57:30:02:4c:5b:57:82:9a:c1:d7:68:7f:e5:95:
d9:43:ce:f4:2f:00:77:3c:2f:46:d7:49:02:9d:ff:
3d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0F:25:CB:0D:63:E6:DF:B9:85:C9:45:0A:20:B0:52:30:75:4F:3D
X509v3 Authority Key Identifier:
keyid:DA:90:D0:4B:F5:7F:A4:86:8E:69:99:7C:83:B3:AD:77:1F:D5:0A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3c:6f:15:ea:5f:fe:73:bd:4e:ff:d6:88:0a:93:17:62:d5:
7b:af:86:82:8b:04:67:54:be:34:ee:2b:f7:db:05:8f:12:2e:
69:a7:2a:83:3a:34:29:0e:79:65:c3:9f:7a:55:37:1c:24:58:
7a:89:a4:00:a4:2b:92:3e:71:2d:e5:e2:f3:e4:79:31:ba:0c:
7c:4a:4d:fd:2f:96:90:ef:ec:12:83:b4:08:ad:a2:96:0f:e2:
68:e0:23:6a:e9:f5:fe:63:07:9d:19:9c:24:0e:e9:62:c6:db:
95:48:94:00:63:ac:f1:7f:23:6b:0b:b6:4a:f7:5e:cd:e1:b3:
71:5e:70:9c:31:74:6e:ef:54:ed:a4:26:b7:af:b3:88:7e:ef:
14:cb:5b:14:c4:0e:70:19:4d:8a:39:e8:76:e0:c3:02:ea:5d:
1a:20:54:df:f2:92:29:a2:59:67:be:3a:44:dd:85:74:2e:15:
35:8c:fe:85:1d:8c:db:c6:22:55:db:b9:7a:4e:aa:fc:83:72:
ec:e6:45:7b:b0:e8:8f:ce:8d:45:0c:b5:09:08:8e:a9:b2:5d:
76:1f:3e:f5:85:f2:d6:d2:94:f3:0b:a8:5e:72:36:36:b6:c4:
f1:7d:e0:57:c1:8a:12:95:02:9a:b8:19:c1:6a:ca:99:81:26:
ce:49:55:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:18 2025 by rpki-client