Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json)
Hash identifier: +lbXNWctHwgjwrIXuk7uqgy1t7nqB3TkhIuXMSFZA3U=
Subject key identifier: 28:AE:32:22:09:40:32:2A:C6:B3:7E:7C:E9:FB:B0:4F:25:48:99:01
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 01961358233FA8CCC0F830D4B40940CD2947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
Manifest number: 14F7
Signing time: Tue 08 Apr 2025 03:01:05 +0000
Manifest this update: Tue 08 Apr 2025 03:01:05 +0000
Manifest next update: Wed 09 Apr 2025 03:01:05 +0000
Files and hashes: 1: 1F-PLkJeZsd5BhbWomZg7cLPFrk.roa (hash: yrygGJcoXqVH2Jg8Juj5GnPuSpfNJREHSoSijlooIac=)
2: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: vl/K9QEFjy68zS5HXA/wHsRz9e9IAvTSjRn1qteQO/U=)
3: 3PFyhkeygxSnr9lo2JsKv8zzptA.roa (hash: q1R0erCPFvF5C0+eg74kijSUxdckHy4082+SsXMgLoI=)
4: 5gCvrLecynoNlZqqecgbQQFoRrQ.roa (hash: 9K+m38Q0PxPs98dlo8mOUJqX2gTHhK0yh4taoKPklF4=)
5: Hgi1HuyOIm-pDNTXBi7SDeMMv54.roa (hash: 4I6w4WrI+TeCpJfBFE/CPemODRHx6exn+BxP4Gc/fZ4=)
6: TXY1I130XvsaTvWkchtuWI-PM9g.roa (hash: TIrFe9IGuWpgbdyOP5J+JnA8eNzT/AVIEYMB6nU7cvM=)
7: VTFmKW5oJe_aki7x1urblkP0Fyc.roa (hash: 2MZuFdP6pQLocFIUqAzsdUT8olNA1CbFEwyUxslWUHU=)
8: WuMjl-VoG-q9mOfKlozyoU3i5Zc.roa (hash: gMQYLpr2E7Od3N3zIX37zoUdKHUCId0XHkWxbn/9Hs4=)
9: eL6yX2gKmuR54LoAuIUZEONKX3g.roa (hash: Wq/KgDr2vwlpid8VQStYJgjmPQjXNNh76BSl9DIrTcE=)
10: hBf-hoIhETw06OBRpv7F1WdTrE8.roa (hash: LSEM+beBKj2xu4gyMsUhzku59BFOyI6BOdyKq1jM8vA=)
11: nA9xLYDfBUMTndIiuMDxngVWqy8.roa (hash: pXyFBd1rpI+yPoJu0gr4TIbRfkcbLlWRK75T9hWlGqk=)
12: ps-3dIi4E3kjzYMhNLY6gSZjzEI.roa (hash: AimvrgTPnFzv1TtjV/eH/9wijMpIF0IeujrL4F6J9qw=)
13: vWlItCBxAXeKE8gJX96SzwOKVyc.roa (hash: Y2Q+VHBMvY4aKyxjSWnm9nXu79hw6C2astvb5J8gRi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:58:23:3f:a8:cc:c0:f8:30:d4:b4:09:40:cd:29:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Apr 8 03:01:05 2025 GMT
Not After : Apr 9 03:01:05 2025 GMT
Subject: CN=28ae32220940322ac6b37e7ce9fbb04f25489901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:a0:73:5f:1e:9f:03:5c:aa:36:d7:cb:6d:
4f:12:da:14:01:e2:2d:91:48:16:ba:9b:38:88:2f:
d0:13:86:de:df:0f:3e:59:7d:70:4a:31:2e:61:4e:
b4:4f:94:7f:81:dd:7e:09:43:49:c0:39:0f:92:60:
86:e1:48:d6:f7:94:91:3f:59:61:32:66:39:3f:7c:
e1:95:e0:b4:06:a9:39:35:cb:39:52:9b:72:ce:80:
79:8b:22:5c:85:65:58:51:44:2a:1b:00:3a:2e:ee:
95:4d:a8:d2:1e:99:d6:03:fe:af:8e:f0:eb:d7:ed:
ad:29:27:ac:36:37:c6:18:67:47:7f:94:1d:92:3f:
d6:57:05:c8:c9:a8:0d:9d:3f:82:14:b8:b5:5a:ea:
27:76:64:97:9c:96:83:2e:63:ed:dd:b6:5f:c3:49:
1f:5d:c4:bf:83:b0:42:23:db:df:67:02:44:5a:98:
e2:d6:ee:6a:c9:cb:86:85:c4:62:b6:db:05:a2:6c:
16:6a:c8:1e:ca:1e:40:3b:ba:21:2b:51:0c:8b:0a:
c9:6b:78:46:1d:82:9a:ca:ba:47:12:d1:bb:d8:45:
ba:3d:11:34:4e:9b:91:e4:25:1b:58:e3:6e:7d:99:
81:a9:f4:71:af:bf:8b:7c:68:ee:85:dc:00:27:82:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AE:32:22:09:40:32:2A:C6:B3:7E:7C:E9:FB:B0:4F:25:48:99:01
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fd:35:37:dd:9d:f6:6c:2a:12:52:cd:4e:36:a7:ba:98:c7:
c8:13:45:b7:0a:b4:e9:e8:e0:7d:0c:15:eb:9c:43:bd:5a:2d:
2a:02:20:5c:8d:7c:8d:7e:80:8f:32:bd:f9:06:c7:d2:da:46:
bd:04:8a:9e:5d:9f:e2:ef:a4:ce:ea:51:d3:e1:bd:c3:52:64:
f4:2e:54:85:d4:1a:95:7e:8f:bf:c4:dd:3c:fb:6d:20:60:58:
c4:76:cc:25:c0:dc:56:11:b8:68:71:6f:8c:d1:09:d5:16:b1:
fc:6e:78:4d:3f:35:d4:5a:03:7b:05:72:b4:02:6b:9d:3e:d6:
72:ee:05:9e:19:fa:74:59:c9:b1:41:42:f2:bb:22:36:d2:36:
f2:0d:22:26:5e:6c:48:e7:84:cd:62:1f:75:b9:78:5f:f0:0d:
82:dd:9b:f8:bc:85:9f:00:2a:5f:94:d5:08:f1:20:c7:29:a6:
e9:b6:94:fb:5c:f5:10:6c:a0:97:45:bf:57:c6:93:dd:97:43:
40:de:ca:97:07:ac:42:c8:40:04:ad:9c:79:94:1c:bd:f0:8d:
1f:7e:a3:ad:73:3e:b3:c8:82:98:97:c6:a7:6c:40:34:3b:26:
fe:f8:78:26:b9:0e:22:c9:10:11:9e:d3:fe:f0:f8:99:27:6d:
d7:4e:2c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:35:55 2025 by rpki-client