Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier: qcsc84NkNCYLS6RYAt0smLoP2f/enpPLJEhL+N+2vcI=
Subject key identifier: 61:C3:2A:89:02:E2:8D:04:BF:29:F0:22:3E:4A:1C:0C:21:8C:DC:31
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial: 01962DBD062F29C4EEC4C943802DE20A8B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number: 039A
Signing time: Sun 13 Apr 2025 06:01:24 +0000
Manifest this update: Sun 13 Apr 2025 06:01:24 +0000
Manifest next update: Mon 14 Apr 2025 06:01:24 +0000
Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: ejTn4OFqG1Mm6Wzn/uyJxcdDBlKsRokECcc2u5NivFk=)
2: dVwX-cCmOxrn9_gsdwOdsiWFkY0.roa (hash: Vs+r4/uqJb40X1RP1KHDHIrHsJL+2YTLULkN+N2HJCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:bd:06:2f:29:c4:ee:c4:c9:43:80:2d:e2:0a:8b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Validity
Not Before: Apr 13 06:01:24 2025 GMT
Not After : Apr 14 06:01:24 2025 GMT
Subject: CN=61c32a8902e28d04bf29f0223e4a1c0c218cdc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:88:1d:ac:05:50:e5:1d:67:39:17:0a:20:
bc:06:d9:fe:4d:03:16:9a:90:a2:94:65:73:5b:f5:
30:a8:a3:88:10:cc:91:20:7a:1a:d7:26:ed:49:40:
5b:ed:0a:40:f8:f6:13:af:34:1c:bc:05:a9:92:42:
9b:9f:39:37:fc:ee:02:d1:40:98:41:1f:2f:bd:30:
cf:75:31:47:87:c6:0a:db:e5:b1:0e:0d:f0:bb:21:
fd:1a:fb:5c:11:27:1c:c2:21:b7:62:d6:32:e0:93:
c4:bb:36:2f:a2:b5:62:df:7b:e1:3f:37:d3:bb:50:
a3:11:25:a3:55:65:af:b9:90:93:6e:0e:56:c5:66:
c9:0f:15:c7:60:8a:c5:d8:16:84:e0:c3:fb:0e:e4:
6a:8b:d2:1d:d7:8d:4a:af:d4:1b:18:e3:b9:c1:e7:
c9:4d:99:a0:64:ae:c5:0d:19:e3:7a:8a:d0:54:29:
c4:01:73:41:b5:e3:be:26:00:19:0e:fc:40:34:eb:
9a:1a:a2:b6:c0:75:40:d5:a8:6f:43:98:ff:04:76:
db:c7:98:8a:3d:1d:8b:c8:b5:25:33:5e:75:ae:e9:
47:61:48:32:f9:65:aa:ee:d1:96:08:14:b9:04:4a:
32:56:a7:be:61:22:90:f1:c0:e8:a9:d9:f2:6f:e9:
87:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C3:2A:89:02:E2:8D:04:BF:29:F0:22:3E:4A:1C:0C:21:8C:DC:31
X509v3 Authority Key Identifier:
keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1f:68:40:a9:32:09:da:0c:a6:28:a8:c6:4b:b6:c7:78:8f:
b6:3a:ec:03:fb:42:e4:87:36:1e:a9:f5:69:2e:ec:bb:63:7a:
1f:cf:4d:76:c9:4e:09:8d:02:f4:ea:ed:38:f5:41:ac:ae:10:
3a:26:c8:35:c5:0b:a6:d1:16:44:46:ab:1d:0c:fe:50:b7:01:
2d:5f:c6:df:01:ce:c4:fe:1e:d7:1e:ef:97:1f:5d:8e:ae:8e:
15:04:7d:0e:e7:4b:d4:d0:02:bb:7d:15:a9:3d:ce:a0:db:18:
ec:ff:33:7a:6e:e1:54:76:68:be:c8:f5:e8:46:cb:c6:f1:8d:
46:f0:96:9e:c8:74:17:a6:b2:15:3f:4c:a4:41:c6:fe:f9:7b:
fc:cb:1f:b5:77:95:73:f3:95:c6:f7:84:b7:8f:d2:bd:5a:8b:
38:ff:10:41:d2:9e:a8:80:57:77:65:72:c3:8b:3c:00:c7:de:
98:63:eb:62:9f:44:89:b2:d0:51:c2:05:f6:c1:2c:77:bb:3f:
2a:2d:6b:ed:cf:23:31:48:95:97:fe:73:07:fd:37:f5:5e:9b:
02:46:f1:da:47:4b:ce:4d:03:cd:f6:e7:e7:ed:05:86:30:3d:
e6:bf:ec:89:92:15:3c:7c:31:3c:6d:9b:08:57:5d:e4:39:61:
25:b7:3f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:30:08 2025 by rpki-client