Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
File: 2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json)
Hash identifier: 31gIKEITQXO2n05FuB6rxzA+Sw96ehtHuiVpgV2GdkY=
Subject key identifier: A7:1E:84:DF:E9:0E:46:E8:EA:89:B4:75:50:E1:0A:7F:36:23:2A:40
Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Certificate issuer: /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Certificate serial: 01964A7CCB4E2072F7C719D582B6308A0EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
Manifest number: 13BE
Signing time: Fri 18 Apr 2025 20:00:14 +0000
Manifest this update: Fri 18 Apr 2025 20:00:14 +0000
Manifest next update: Sat 19 Apr 2025 20:00:14 +0000
Files and hashes: 1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: Yg9wSDHyyOh7BaeVQX8UWrCuYU0XV/YL9WzMTU8IZx4=)
2: BMDiXoJo4mV1C1iJkyCvhb3IXbs.roa (hash: Hyio+hKHcwTFLSnvoht8aVf6SalV68I+ioT/AT6e6Ds=)
3: EDIVTzTnD9slx8_sN2MDGo10vX0.roa (hash: niRdCwbiqIr4Uo3WkGhM3gC54LX+BnKXCufZ8GceLvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7c:cb:4e:20:72:f7:c7:19:d5:82:b6:30:8a:0e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Validity
Not Before: Apr 18 20:00:14 2025 GMT
Not After : Apr 19 20:00:14 2025 GMT
Subject: CN=a71e84dfe90e46e8ea89b47550e10a7f36232a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:f6:fc:f6:a3:7d:eb:88:9d:07:f4:a2:7a:
65:a3:3f:45:98:b7:38:85:13:71:a7:43:96:db:0e:
2e:14:0e:7b:00:47:de:37:73:10:d9:0c:f6:8f:39:
a9:c0:1c:3c:79:f5:a5:f6:56:55:20:91:b5:6e:a8:
32:dc:d5:f9:ff:31:34:34:00:ac:0a:cd:b0:c6:7d:
8a:b9:b2:8a:c2:6d:08:ad:6e:fe:75:4e:f0:ba:0f:
1c:dc:8f:1e:27:4e:95:41:2e:da:33:11:9f:54:8a:
e4:90:4f:a5:9a:b2:41:ac:42:fd:2b:84:98:21:cb:
4c:01:a2:cb:bd:00:ea:e9:e2:f1:22:44:63:42:1a:
a9:8d:e1:53:40:67:af:07:7a:fe:99:85:6b:0a:8a:
87:c0:d4:fa:b3:3e:6f:8b:d6:52:ca:ff:8b:3d:b8:
15:37:84:11:60:38:e0:aa:77:74:3a:57:56:db:f9:
0d:18:04:21:52:7a:49:d8:4c:ee:77:9f:0d:1c:6a:
ee:03:80:c1:58:58:db:95:56:7f:6f:63:55:f2:b7:
d7:d9:9e:45:22:07:9e:a5:c5:a4:a4:70:1c:d4:58:
68:58:fa:72:d2:60:09:76:c6:95:7f:07:45:31:62:
8b:2d:9e:98:98:d9:28:9b:e7:40:d2:f3:04:7d:67:
6b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1E:84:DF:E9:0E:46:E8:EA:89:B4:75:50:E1:0A:7F:36:23:2A:40
X509v3 Authority Key Identifier:
keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:34:0b:aa:a6:2f:6f:d8:dd:f5:78:c1:47:83:8b:6b:5e:da:
b5:55:f5:b1:12:6f:23:ba:ab:b9:a7:cc:38:c6:68:64:d4:e4:
91:15:ab:e0:f8:4f:e8:a6:cb:6f:89:5a:a5:b9:f5:f4:df:38:
cb:b1:92:00:6d:d4:ae:31:d9:32:02:cc:cd:6c:60:4a:2f:9b:
85:fd:7a:ee:f0:6c:29:21:af:6f:48:41:29:16:b9:b7:7f:e6:
dc:7c:88:5d:97:16:e2:6e:28:13:43:9f:c4:af:e8:61:a0:f5:
47:a5:1d:69:71:3a:d8:2b:e0:fe:90:b4:71:59:c3:2e:bf:45:
e5:ad:5e:7c:e8:29:9d:ae:eb:88:6b:68:b8:3a:c7:d9:76:18:
30:27:79:89:4e:1f:7a:17:ec:a8:a6:43:01:d8:54:bd:ed:32:
e2:86:58:b0:cb:a1:d2:15:17:83:5f:ee:34:bf:a4:8b:51:9f:
d3:b8:f8:39:13:9e:3d:de:1b:29:1f:18:2b:28:42:f6:72:19:
b4:4b:5c:80:3f:68:89:39:87:db:0a:af:b0:69:e6:6e:27:a6:
3b:03:41:bc:2c:82:f7:56:cb:32:28:f0:9f:d4:34:d1:d6:2b:
c5:d3:af:c8:27:64:3c:e1:c6:c4:ba:5d:93:7b:7d:11:2e:57:
bc:e1:41:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:25:09 2025 by rpki-client