Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
File: 2SuKXtRqwwRtRQFHI6C5L6zypJs.mft (raw, json)
Hash identifier: vQ8vRS4xH+ihoiEwzQUYHSzU/yqwxm/5mbcp5wI+Wc4=
Subject key identifier: 73:7A:6A:25:BD:8C:34:00:6F:D6:D0:96:5E:3A:C6:D2:BF:5A:1F:C0
Authority key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
Certificate issuer: /CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Certificate serial: 01963E42017BACA3931D6B15C1B36EACEBD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
Manifest number: 04A1
Signing time: Wed 16 Apr 2025 11:00:35 +0000
Manifest this update: Wed 16 Apr 2025 11:00:35 +0000
Manifest next update: Thu 17 Apr 2025 11:00:35 +0000
Files and hashes: 1: 2SuKXtRqwwRtRQFHI6C5L6zypJs.crl (hash: jH0E2d4BkZ9NYtZ0rT19xQSjs6PtBsXajKg5/eypjEU=)
2: RCxUccFlj404n0PDXIwSW9a1Qu8.roa (hash: Q9ghLq/JOpXpWGcxR9wqNLzzbYm0DOwnIjt6pVt6/x4=)
3: wMjtT9e8Q5MbpNdpKyJa8rSAUGo.roa (hash: 2d2qxPNtY9fysBuRUtCzO2NCNWMGcOf5j1D1Gmd73dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:42:01:7b:ac:a3:93:1d:6b:15:c1:b3:6e:ac:eb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Validity
Not Before: Apr 16 11:00:35 2025 GMT
Not After : Apr 17 11:00:35 2025 GMT
Subject: CN=737a6a25bd8c34006fd6d0965e3ac6d2bf5a1fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:fa:db:da:e5:42:e4:a2:9e:36:72:af:d0:
41:83:39:ae:3c:b6:42:d1:59:52:5f:35:87:25:0c:
83:bf:bd:dd:ea:6a:27:99:3a:79:16:95:8c:8d:c5:
58:94:37:b9:5f:a8:16:bc:42:4d:46:03:49:87:cf:
c3:ed:41:6a:f1:e6:28:ba:73:c5:8f:38:2f:fe:3a:
21:a9:e9:bb:6e:2a:85:6d:d1:1b:1e:94:7f:b3:25:
48:98:32:3b:9b:d1:59:b8:c9:e9:2e:d8:38:44:0e:
79:be:0b:ea:52:ca:af:cd:cb:4e:d5:4c:43:11:4f:
58:7a:1b:b5:d0:81:7a:01:2c:31:c3:fe:08:c2:8b:
5d:69:e4:4c:3c:7d:94:77:ac:7a:fc:df:59:03:cd:
ba:e7:ad:c0:24:5d:36:91:20:23:77:d0:91:e6:f2:
cd:c0:b8:56:6a:2a:da:41:8c:e3:e6:b6:7a:78:3b:
26:3b:66:0f:68:cc:1b:f9:08:7e:5d:be:fa:96:7a:
f0:a8:d6:0e:71:78:fa:93:72:38:f0:ab:16:61:4d:
8a:af:bf:bf:0f:a4:45:0e:2a:16:cd:8e:dc:79:e7:
23:ea:66:d3:76:23:c4:8c:72:79:bf:4e:22:78:34:
e7:66:58:1d:3f:27:c9:78:70:9c:38:d2:f0:d2:f6:
b0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7A:6A:25:BD:8C:34:00:6F:D6:D0:96:5E:3A:C6:D2:BF:5A:1F:C0
X509v3 Authority Key Identifier:
keyid:D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:44:10:5b:5b:63:68:fb:1f:29:48:23:98:fb:73:02:23:5f:
99:91:ab:0d:8b:27:68:64:77:6e:18:bb:4b:c5:e6:db:c7:2d:
5b:8c:e4:e4:70:e0:f7:e2:10:f8:b7:4a:b1:c5:01:d7:53:f3:
e4:6d:c8:34:be:26:0a:de:d2:52:11:ad:31:88:51:7d:7c:3d:
c6:ba:10:ed:5d:dd:9e:eb:f9:30:9f:39:95:67:f1:2f:ba:66:
48:1a:4c:19:e4:c0:d0:77:aa:c5:ca:23:b4:d6:37:e1:df:dd:
85:9d:dd:6f:5b:ee:23:d7:a8:a2:66:0e:1e:0a:cf:72:8a:f5:
73:02:19:f7:20:8b:de:cb:b4:8c:eb:fc:e5:53:81:74:e0:eb:
ca:6a:8a:00:c8:f7:d7:9a:6d:b2:37:3a:cc:26:09:58:a1:7a:
25:17:b2:ff:f2:bf:1f:aa:8f:2d:71:6c:35:32:2f:46:58:c9:
dc:82:2d:dd:42:07:3a:bb:6d:b4:8b:81:de:32:e3:1b:a7:db:
1e:e3:65:7d:27:42:24:2c:de:f8:12:b4:cc:31:ad:b4:26:f5:
76:91:63:b7:3d:c8:df:81:69:8b:d7:e2:69:75:e2:97:7f:54:
cd:f2:bb:b6:4a:9b:8c:4e:32:be:ee:3e:ad:7a:02:72:c8:0a:
12:d0:0a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:14:35 2025 by rpki-client