Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File: cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier: HFQz77rjqj859C/B+r0y1jXxN87Sz+FQkLRkWcV9hP0=
Subject key identifier: 8A:1A:41:D4:10:D2:8C:BD:79:14:46:EB:82:3E:4A:76:06:30:3F:5C
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 01963BE5AE35D8A802C19CD9EF7D146E6AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number: 0F22
Signing time: Wed 16 Apr 2025 00:00:30 +0000
Manifest this update: Wed 16 Apr 2025 00:00:30 +0000
Manifest next update: Thu 17 Apr 2025 00:00:30 +0000
Files and hashes: 1: 5kIp4bFmAr9lOCjBtU4-CSX7D0w.roa (hash: zS6XZLioq/dFM9rTCOe5dC9siPtnmQmcYc9glHbFesE=)
2: WZoVc8N-YD-8FMKAITneTMD8_4k.roa (hash: d546sm0t0rb46HppUnfY7MCyS/rnnp2kV23n3HY9/us=)
3: bZJxdCs0gWqYryxwQS8EGlLZ93c.roa (hash: ZMF+prTjcHa6DFcnagp286MUC0TlcS1uVKhgY1MMJNc=)
4: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: 3x7WL0e8mkc/qNm+TR1Rnkrfk6vNH1t2rpCA5H/3BGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:e5:ae:35:d8:a8:02:c1:9c:d9:ef:7d:14:6e:6a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Apr 16 00:00:30 2025 GMT
Not After : Apr 17 00:00:30 2025 GMT
Subject: CN=8a1a41d410d28cbd791446eb823e4a7606303f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:67:1f:6f:a3:48:77:18:34:ba:b5:a0:ee:29:
2b:c4:84:9f:0c:da:f4:71:fb:37:9f:a7:d8:4d:ff:
35:82:f1:43:5f:28:9f:8f:f7:3e:8d:ae:d5:59:7d:
60:aa:8a:b0:6c:fc:18:58:2b:96:e6:88:e9:ea:a6:
15:c7:3c:fe:8c:1d:b3:c4:e5:41:05:4a:f5:12:bb:
e5:c7:55:6b:ec:eb:aa:e0:c7:a8:2f:a5:59:05:17:
0d:aa:8a:60:b0:6c:97:25:11:67:8e:03:66:4e:88:
95:69:2d:37:d2:3e:78:de:2f:99:c8:21:13:ac:66:
f4:4f:04:72:59:82:d8:f4:71:0a:14:a1:7c:8a:43:
c5:4a:56:b3:44:8b:19:3a:36:f4:b1:aa:a8:f5:09:
82:13:cf:c2:7f:4c:36:78:8b:28:30:6b:9f:26:2b:
3a:87:41:7d:55:50:cf:60:41:c8:82:f9:ad:6b:37:
19:bb:cc:b4:1d:df:cf:97:c9:c7:29:b6:f7:dc:51:
c5:79:40:82:9b:1f:9e:47:4b:3f:45:df:ca:6c:55:
d5:ea:af:1c:e7:d1:63:bf:8e:ca:7b:e2:78:f4:9f:
4b:c5:bb:47:2d:d3:b2:8b:06:ef:8a:78:02:05:3a:
2f:a7:ed:6f:a8:82:b2:0b:2d:7e:29:33:57:25:e9:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1A:41:D4:10:D2:8C:BD:79:14:46:EB:82:3E:4A:76:06:30:3F:5C
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d2:d3:66:09:3a:e2:dd:65:bb:db:70:74:74:05:99:34:86:
3f:7a:c8:bb:08:77:a1:d6:c7:6b:8d:f9:30:35:8a:29:3a:a2:
a6:86:67:18:ac:35:3e:19:82:91:c7:18:31:0f:df:ab:38:1d:
68:f9:2c:e4:d5:10:d0:14:38:3f:90:73:ed:4e:12:c4:11:66:
ee:3d:f5:1a:f8:8a:f7:9e:62:21:6b:72:6f:e0:86:c5:c3:bb:
1a:94:07:18:79:49:14:e2:69:9a:d9:6b:64:ad:e4:ec:29:9c:
16:1f:c5:b8:18:f3:39:1d:84:77:45:24:c9:da:80:d2:a5:64:
28:da:62:d8:a9:ad:cf:69:f8:33:1f:ff:47:f3:33:dc:94:32:
15:8c:40:d4:55:8c:72:25:f9:3d:83:43:f1:89:a1:b9:07:5d:
20:f7:54:d0:0f:57:14:8a:ee:00:c6:f7:8c:e1:1f:b4:db:46:
14:09:b6:9c:cc:17:d7:c3:f1:84:8b:a5:5d:49:e5:b0:0b:c7:
81:55:12:63:60:9a:2e:57:d8:d2:77:41:2d:07:62:ff:08:9b:
e3:81:c9:d4:67:10:7f:21:ca:f3:03:b2:ae:9a:4b:a7:3f:1c:
97:14:f9:a0:3e:98:07:97:ed:4c:df:bd:93:81:1d:fa:66:84:
2e:20:71:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:11:37 2025 by rpki-client