Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: 5F6sx3/h+4NmSRD7x59ZZTL282WFER9T58hKbI3I9jU=
Subject key identifier: 1F:14:3E:47:F0:C7:C9:4E:18:C1:9E:F4:2F:AD:D3:7C:C5:E1:8B:07
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 01965A5E1435193ED77BD77A2DEB04A6959C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 1504
Signing time: Mon 21 Apr 2025 22:00:37 +0000
Manifest this update: Mon 21 Apr 2025 22:00:37 +0000
Manifest next update: Tue 22 Apr 2025 22:00:37 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: bDE5Vf2GMsrOOM+6+p6FJE15iDVBOg99Slp6ZKfcNTQ=)
2: W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa (hash: H3aapZtXnHfhVIDiayaGFZvNcV7JScFiYfbfDkzVZMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5e:14:35:19:3e:d7:7b:d7:7a:2d:eb:04:a6:95:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Apr 21 22:00:37 2025 GMT
Not After : Apr 22 22:00:37 2025 GMT
Subject: CN=1f143e47f0c7c94e18c19ef42fadd37cc5e18b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:a3:48:6a:99:57:80:60:7b:cc:d1:f3:f2:
ed:24:8b:49:93:0e:45:ae:dc:41:c4:17:b0:30:c9:
c4:f0:77:80:43:07:cd:14:80:2e:d8:17:33:c1:d7:
9c:c6:c6:af:83:ed:2d:be:d2:c8:c0:69:9c:78:ff:
db:72:7c:31:5b:8e:d2:c7:75:b5:53:42:66:34:7a:
71:33:b2:10:6d:7d:85:ab:1d:3c:f6:d1:6d:83:6d:
6b:13:be:4c:f8:81:f6:c4:83:37:75:74:75:c7:e9:
3a:2c:82:4c:47:8f:d2:ab:cc:d8:d1:fd:7f:be:b8:
58:68:22:c0:57:6a:6e:d4:30:79:43:5c:a1:27:02:
4c:57:6d:95:5c:02:95:94:12:c8:5a:a2:e2:43:d4:
5a:31:21:dd:46:b5:03:91:da:f6:df:7a:1f:1b:23:
cc:5b:68:0f:53:ca:04:9f:5d:89:f0:5d:97:9f:a7:
43:e4:a7:2b:2c:af:9f:90:3a:59:50:35:25:d7:1c:
c8:f1:60:08:16:72:56:c8:03:48:76:29:ac:27:71:
b2:3c:2c:56:d3:6f:b8:af:0c:19:97:f9:fd:8e:14:
9b:50:84:8d:eb:35:cd:6e:00:cc:21:89:56:73:bd:
86:59:8d:57:33:b9:58:4b:43:e3:48:bc:5b:94:f0:
d4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:14:3E:47:F0:C7:C9:4E:18:C1:9E:F4:2F:AD:D3:7C:C5:E1:8B:07
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:dd:23:f5:a8:e2:d5:ec:40:f3:f8:d3:1a:65:8a:f5:af:c0:
46:8c:84:a9:15:9c:a4:9c:d4:31:d3:59:bb:f9:7b:4c:5e:f7:
70:e9:49:d5:de:20:77:c8:47:00:a6:8c:77:58:fe:e7:50:f8:
0e:4b:bf:14:08:39:56:0a:71:68:a9:70:61:5a:77:de:2f:35:
b3:e0:1c:5c:97:91:e1:8a:89:a6:f2:d9:c7:ab:7e:f3:b8:3b:
d9:8c:ba:2e:3f:9b:44:24:eb:b7:8b:78:f8:ad:9a:a3:b7:15:
b1:f6:f2:fc:48:6a:50:98:8b:4f:2c:07:14:aa:36:55:66:e4:
11:a3:33:f8:cd:1c:ad:28:0e:0c:a2:f0:a6:5f:35:1d:14:74:
c8:48:15:c3:4a:ed:80:a0:48:41:fc:b6:2a:27:10:af:85:e8:
70:9c:3f:b4:73:f9:63:67:70:1b:55:f6:3e:73:f6:66:4f:84:
f4:ae:1d:f7:8e:46:aa:b8:52:04:be:5c:91:9b:41:25:db:6a:
12:9f:7f:c8:5b:fd:84:cd:79:19:21:eb:1b:33:ad:d6:f9:51:
5b:d2:34:d4:74:cc:fc:95:0a:8e:e9:64:bd:10:52:20:75:49:
c4:ca:09:cd:7d:f7:5c:28:69:00:aa:f6:9d:19:68:3c:0a:9e:
37:e6:58:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:43:48 2025 by rpki-client