Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
File: 2sTLURUIAqQBjMJWrSn1RyBnXtU.mft (raw, json)
Hash identifier: X9uZ3UHSQQLFwuZ+Er3TOI9SCt12sJ/SrCVbC56is7c=
Subject key identifier: D6:4E:38:C9:22:A8:F3:11:3B:21:10:59:D5:91:F6:6E:1D:DA:B6:BD
Authority key identifier: DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
Certificate issuer: /CN=dac4cb51150802a4018cc256ad29f54720675ed5
Certificate serial: 01958C60234847562B2E316423FA60161907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
Manifest number: 0FA9
Signing time: Wed 12 Mar 2025 22:01:05 +0000
Manifest this update: Wed 12 Mar 2025 22:01:05 +0000
Manifest next update: Thu 13 Mar 2025 22:01:05 +0000
Files and hashes: 1: 2sTLURUIAqQBjMJWrSn1RyBnXtU.crl (hash: Rae1FFo3fkrxFFunahV5Qx0IBeCZqx7Bo+b1yyjcLzY=)
2: 49hgdGQLZzb2UEr0v1DR3B_4G88.roa (hash: ieB3PoGbaENiV1L+4PpT2lhh7W1Z3Cv1HFM+GYljVmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:23:48:47:56:2b:2e:31:64:23:fa:60:16:19:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac4cb51150802a4018cc256ad29f54720675ed5
Validity
Not Before: Mar 12 22:01:05 2025 GMT
Not After : Mar 13 22:01:05 2025 GMT
Subject: CN=d64e38c922a8f3113b211059d591f66e1ddab6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:cf:f7:d3:f6:8d:57:05:b6:65:65:38:31:
5b:6c:4b:4c:3d:9c:c9:5d:25:43:9c:cf:26:51:b5:
51:24:37:a3:60:9a:49:12:39:cd:b8:6e:23:c0:8d:
75:10:0a:71:0c:54:ad:a7:5b:93:f5:64:08:7f:c1:
75:8d:21:09:d2:37:de:ed:f0:5b:5c:ea:ba:6f:18:
34:82:ab:d7:a2:48:c7:a9:ad:35:68:69:38:9e:32:
67:a5:fe:d3:16:c7:bd:b0:05:64:40:20:64:59:35:
e1:18:0c:ae:83:b6:09:aa:7a:23:99:20:9a:4c:fd:
8a:7a:c2:ea:d8:f1:c6:a2:1d:26:35:d0:36:7d:7c:
8a:db:0b:97:f5:18:1c:7c:ff:ea:74:58:c1:d9:51:
2d:eb:54:5d:83:00:bc:2c:4b:53:44:ec:89:15:00:
8e:31:a2:f6:4d:27:ce:1d:11:6b:82:e9:54:1f:77:
8c:29:66:c3:9c:23:6f:5f:10:f7:72:f9:e1:63:99:
dc:5a:ad:a7:52:ea:a6:e2:26:d5:37:a8:ef:86:ee:
e7:e3:0a:a7:8f:f8:1f:09:59:9d:a4:22:78:a6:0a:
e9:28:d6:0c:82:4b:f0:0f:36:2e:0c:60:1c:ad:d2:
40:7b:df:9c:6f:cf:91:08:17:f0:ff:ae:91:d4:0e:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4E:38:C9:22:A8:F3:11:3B:21:10:59:D5:91:F6:6E:1D:DA:B6:BD
X509v3 Authority Key Identifier:
keyid:DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:63:f2:8e:f8:cc:64:8d:cb:47:7f:97:e6:82:13:a8:71:27:
5a:4a:21:32:86:c5:d6:3c:fb:c8:a0:ee:ca:fb:3a:17:69:c4:
f9:c3:8c:ef:64:80:d7:e7:f1:45:e6:35:f8:c7:20:b9:13:0c:
78:a7:89:fc:b4:91:ae:88:03:71:00:7d:1d:b4:60:50:2c:a5:
0a:21:5e:a5:83:51:2d:26:84:c2:60:56:c5:b9:fb:db:39:3b:
e5:37:c7:9f:69:2c:67:b4:4d:5c:49:30:af:10:81:0d:f5:af:
2a:40:7e:e8:55:ff:62:e4:d6:5d:ef:09:43:2f:fe:b1:4b:20:
2d:9e:27:a8:22:9b:90:96:68:25:72:09:1b:cd:1c:88:18:d1:
53:c6:20:7f:0e:b3:34:03:0e:9e:54:a3:ed:67:01:06:f3:d7:
9c:dc:cc:36:eb:dc:d5:2a:0d:18:a9:39:0a:3d:09:2a:a9:e6:
5a:61:2a:16:81:d7:32:a4:09:71:86:5b:c4:5c:70:28:11:4a:
1e:04:27:55:af:a8:77:6e:c7:45:fa:76:14:75:6d:eb:f7:8b:
73:fa:b9:b5:80:7f:c2:34:c0:c2:10:53:f7:77:62:26:9e:48:
10:85:11:4a:1d:82:07:19:95:33:28:a3:a2:1d:5b:2a:bb:c5:
86:2f:9b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:16 2025 by rpki-client