Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: QoLrmkjJA7piCra5FOIXDr0TlDSONo34bzKdM59QVr0=
Subject key identifier: 37:01:4B:90:9B:0F:CA:5A:72:08:03:1B:CE:FE:A2:5A:14:34:A5:CE
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 01964BFD71BC1B6314283F9A566B4D408057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 03:00:22 +0000
Manifest this update: Sat 19 Apr 2025 03:00:22 +0000
Manifest next update: Sun 20 Apr 2025 03:00:22 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: ls/0KnE232SHTkOlGWMexvCHxEWtlIA5DNGBIAtKunw=)
2: KSXGFVryamNuJ9tAvX5j45q0288.roa (hash: oHHWqrdumFHTbledjPfN55zOWOewwfVZnbPoUEcTtJo=)
3: b_Hf4C7DHqDvU3rPrk8yR1EVzMk.roa (hash: B0oNiXflIFSUREkZoOMdxw9fvdV4h0sgQd5bJTkzRM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:71:bc:1b:63:14:28:3f:9a:56:6b:4d:40:80:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Apr 19 03:00:22 2025 GMT
Not After : Apr 20 03:00:22 2025 GMT
Subject: CN=37014b909b0fca5a7208031bcefea25a1434a5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:fa:fa:6e:e1:fb:93:53:a1:2b:4c:73:a3:
24:f2:24:35:71:13:f6:0b:fb:09:74:62:42:48:e4:
2f:1c:9f:ba:9a:c5:e3:17:15:35:25:e7:30:df:e1:
c1:6d:35:98:10:6d:5d:ea:70:be:ac:84:65:47:9a:
df:b6:c6:38:af:38:7e:5a:1f:15:f3:a8:dc:0f:57:
14:78:41:48:b7:d1:1d:4d:45:fc:d1:66:87:20:a4:
37:3a:bd:c1:33:76:30:6a:28:d2:f7:2d:8b:58:15:
58:f9:d2:bc:27:0f:79:26:22:94:d1:6d:87:95:d1:
ad:12:0c:7c:5f:61:15:bf:bb:50:f9:83:28:09:b5:
cf:c9:26:02:3d:27:4c:31:8b:f6:f6:96:c1:90:ec:
4d:de:1b:d2:e3:0d:4e:fd:2e:15:96:5e:9e:93:55:
88:a5:26:d2:0c:61:43:9a:b1:32:0a:fc:f3:76:67:
40:bd:f7:18:3e:b3:8e:a8:73:2d:b5:f3:71:6d:cf:
74:b8:dd:f4:04:96:bf:51:2e:10:4b:36:56:4c:a1:
d7:26:ae:19:bd:fd:fc:18:58:db:ca:81:bc:9f:9b:
82:9f:ba:ba:29:94:28:da:52:1f:b6:90:58:63:9a:
4f:30:1d:fc:8d:4f:45:ab:a5:70:d8:bc:c8:e3:f7:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:01:4B:90:9B:0F:CA:5A:72:08:03:1B:CE:FE:A2:5A:14:34:A5:CE
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c5:42:5f:de:12:0e:ac:74:5a:50:79:be:a0:ac:33:b8:b5:
07:58:0e:b7:66:19:2f:08:ed:70:09:66:27:d9:b0:64:a8:96:
9b:1a:7b:e7:64:29:28:c9:09:92:12:24:32:85:00:8a:63:93:
be:16:c0:58:a3:10:21:f7:4a:15:99:ca:e2:ec:49:e7:c4:da:
9a:c2:38:1e:25:09:93:83:4f:d2:79:8a:ec:ec:a2:fb:de:6b:
bc:8d:b7:2d:dc:44:10:48:a1:1e:67:94:98:9c:4d:bf:5a:ea:
c0:9d:7f:f9:04:a8:73:bf:3a:2e:ed:38:16:f6:c7:00:b7:c5:
57:d8:b9:02:93:f3:87:e3:5e:6b:db:0d:a4:0e:3d:3b:6e:4b:
37:9d:d9:1b:e5:ad:26:ac:38:b3:44:78:ae:cb:6c:af:f1:04:
54:be:12:44:8f:c7:cd:56:ed:20:2e:31:03:b4:84:50:af:85:
9a:7d:38:3b:e1:b5:fd:b0:20:b4:73:d8:93:a2:f6:57:22:79:
af:24:7d:33:d0:fc:02:40:05:70:29:0d:cb:f7:64:50:e4:1e:
46:24:ee:7c:a8:15:24:4f:92:29:ce:50:3a:4b:97:30:0c:2e:
7a:a9:0f:31:ae:82:ee:bc:e4:a1:e8:94:b8:ea:a0:16:aa:bf:
b7:5f:4e:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZL/XG8G2MUKD+aVmtNQIBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWMxNWI3ODJiYzMyNzQ3YjUzOGRlYzJhMjIyNDE2Y2Q2
ODQ4MjUwHhcNMjUwNDE5MDMwMDIyWhcNMjUwNDIwMDMwMDIyWjAzMTEwLwYDVQQD
EygzNzAxNGI5MDliMGZjYTVhNzIwODAzMWJjZWZlYTI1YTE0MzRhNWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM/6+m7h+5NToStMc6Mk8iQ1cRP2
C/sJdGJCSOQvHJ+6msXjFxU1Jecw3+HBbTWYEG1d6nC+rIRlR5rftsY4rzh+Wh8V
86jcD1cUeEFIt9EdTUX80WaHIKQ3Or3BM3YwaijS9y2LWBVY+dK8Jw95JiKU0W2H
ldGtEgx8X2EVv7tQ+YMoCbXPySYCPSdMMYv29pbBkOxN3hvS4w1O/S4Vll6ek1WI
pSbSDGFDmrEyCvzzdmdAvfcYPrOOqHMttfNxbc90uN30BJa/US4QSzZWTKHXJq4Z
vf38GFjbyoG8n5uCn7q6KZQo2lIftpBYY5pPMB38jU9Fq6Vw2LzI4/dPpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcBS5CbD8pacggDG87+oloUNKXOMB8GA1UdIwQY
MBaAFNqsFbeCvDJ0e1ON7CoiJBbNaEglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYt
MTgyNDMyYTk2ZGJkLzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81NmYyZTktNzJhYS00YTQxLTg5NDYtMTgyNDMyYTk2ZGJk
LzEvMnF3VnQ0SzhNblI3VTQzc0tpSWtGczFvU0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8VCX94S
Dqx0WlB5vqCsM7i1B1gOt2YZLwjtcAlmJ9mwZKiWmxp752QpKMkJkhIkMoUAimOT
vhbAWKMQIfdKFZnK4uxJ58TamsI4HiUJk4NP0nmK7Oyi+95rvI23LdxEEEihHmeU
mJxNv1rqwJ1/+QSoc786Lu04FvbHALfFV9i5ApPzh+Nea9sNpA49O25LN53ZG+Wt
Jqw4s0R4rstsr/EEVL4SRI/HzVbtIC4xA7SEUK+Fmn04O+G1/bAgtHPYk6L2VyJ5
ryR9M9D8AkAFcCkNy/dkUOQeRiTufKgVJE+SKc5QOkuXMAwueqkPMa6C7rzkoeiU
uOqgFqq/t19OWQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:24 2025 by rpki-client