Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.mft
File: es2BfyWJPn-Is_Ov-pFSxm1rZwI.mft (raw, json)
Hash identifier: kdaAdWW2OzCmZ8FedbIL2aXzEF2fJSQLknAmKbfR3pI=
Subject key identifier: 39:46:3F:DC:58:F2:EA:89:00:62:7D:AD:89:50:BF:87:AD:41:B0:2F
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01965B0C8A0159D6240B6BEC1F10C05256A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.mft
Manifest number: 0348
Signing time: Tue 22 Apr 2025 01:11:10 +0000
Manifest this update: Tue 22 Apr 2025 01:11:10 +0000
Manifest next update: Wed 23 Apr 2025 01:11:10 +0000
Files and hashes: 1: ZpHfWVjuEOKskBrtwaYIwjI0Guo.roa (hash: Wbu0UAoyfqfRNfVd83E/JzBGqxjkg6na3mvNKvAeptw=)
2: es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl (hash: r4KhFioT6iWgXh6NyDk6lM7X44Re5Kg2CqWw3hiPvIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:0c:8a:01:59:d6:24:0b:6b:ec:1f:10:c0:52:56:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 22 01:11:10 2025 GMT
Not After : Apr 23 01:11:10 2025 GMT
Subject: CN=39463fdc58f2ea8900627dad8950bf87ad41b02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:a1:20:63:4d:0d:c2:8e:0a:03:64:34:55:
fa:e5:80:98:95:35:c6:f2:ea:e3:ca:be:d7:91:d1:
26:28:aa:bb:dc:3e:d8:30:23:9d:8e:15:a4:a8:04:
bc:fc:73:24:8f:ca:45:32:33:7d:1e:f9:56:71:4f:
fa:fb:39:22:e1:86:59:ae:ed:53:f3:ba:64:ae:e5:
c0:46:4b:38:5b:64:68:26:68:0d:e8:9e:81:a0:bd:
97:11:d9:25:a0:ef:a8:9b:61:de:dc:93:93:58:5a:
84:7e:dc:34:bb:10:93:c5:9a:24:6f:98:fc:b0:b4:
97:d7:1f:73:cf:cc:29:e2:9d:59:76:ca:12:c3:70:
78:69:f4:db:1c:3b:65:b3:fb:4b:3f:50:78:fd:b4:
a1:a0:46:b8:f9:6b:54:71:64:80:0e:46:04:cf:49:
fb:b8:aa:0d:88:fd:76:39:ca:18:ba:70:45:f3:dc:
c6:bb:c8:51:83:f4:cc:54:fd:c1:24:fd:de:b0:48:
84:7e:21:e8:af:c6:75:0c:94:67:0d:10:10:7a:ba:
93:17:33:8b:6e:fa:47:15:fa:c1:1c:9a:e6:d6:1a:
11:7a:50:f0:27:98:31:8b:63:2f:53:f7:47:b0:44:
8c:06:b7:40:6c:33:22:c9:9f:11:c0:d3:7e:98:de:
30:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:46:3F:DC:58:F2:EA:89:00:62:7D:AD:89:50:BF:87:AD:41:B0:2F
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b0:3c:b6:65:c2:e1:03:c0:c1:a4:75:fc:f3:f3:24:ab:55:
48:0c:2d:27:81:81:5c:3f:cc:d6:3f:74:70:53:7c:94:74:aa:
15:3e:d1:1f:80:aa:27:93:91:5b:97:a4:16:48:b9:6e:4b:82:
37:e1:5b:9a:a7:14:7f:03:f2:be:d2:d7:13:50:d9:3e:df:8b:
93:5e:5f:49:b6:66:aa:25:76:d0:32:9b:eb:e7:41:2a:d8:40:
23:c7:7d:47:37:9f:dd:ab:22:d2:76:7d:23:bc:c8:ca:c6:2f:
51:20:d7:86:52:74:ec:03:d0:60:20:39:b3:17:92:7d:dd:82:
9f:97:40:ab:24:7a:74:f0:90:7b:f4:9f:0a:f0:62:50:28:5f:
a7:ed:e7:d0:b4:f8:3f:77:41:30:07:91:53:4f:cf:d1:f7:bd:
cb:54:99:ba:da:f2:ad:aa:e6:3d:38:a5:27:17:f5:45:67:3e:
14:d4:3d:63:b0:dd:dc:b6:da:86:7f:ab:59:2d:df:74:47:dc:
61:62:9d:07:54:71:85:47:dc:c6:05:61:3d:61:72:7c:ee:9d:
47:34:ee:6a:09:3b:87:ae:98:bd:71:d2:c7:34:0f:a1:22:b1:
58:ef:37:25:ca:2e:c4:cf:bf:54:a9:19:fa:d8:9e:0a:fe:13:
bd:ac:2f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:51 2025 by rpki-client