Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
File: 2SuKXtRqwwRtRQFHI6C5L6zypJs.mft (raw, json)
Hash identifier: yNciuMUNQrW/iKOd4P4YSlTRzb67W3pcb0F5gZrOHjY=
Subject key identifier: 85:A9:0B:38:74:0E:28:1C:A0:1B:EC:5E:4B:7B:B7:78:C2:B7:21:7F
Authority key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
Certificate issuer: /CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Certificate serial: 01959073A69075FE50D3AC87E6F5E982DC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
Manifest number: 0447
Signing time: Thu 13 Mar 2025 17:00:53 +0000
Manifest this update: Thu 13 Mar 2025 17:00:53 +0000
Manifest next update: Fri 14 Mar 2025 17:00:53 +0000
Files and hashes: 1: 2SuKXtRqwwRtRQFHI6C5L6zypJs.crl (hash: HM/5ALRybJsR3n9nHRFgPlnFm25roltfuQEhJw7jU4k=)
2: RCxUccFlj404n0PDXIwSW9a1Qu8.roa (hash: Q9ghLq/JOpXpWGcxR9wqNLzzbYm0DOwnIjt6pVt6/x4=)
3: wMjtT9e8Q5MbpNdpKyJa8rSAUGo.roa (hash: 2d2qxPNtY9fysBuRUtCzO2NCNWMGcOf5j1D1Gmd73dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:73:a6:90:75:fe:50:d3:ac:87:e6:f5:e9:82:dc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Validity
Not Before: Mar 13 17:00:53 2025 GMT
Not After : Mar 14 17:00:53 2025 GMT
Subject: CN=85a90b38740e281ca01bec5e4b7bb778c2b7217f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:ce:c5:c3:d5:5e:ac:98:11:8a:62:1d:2c:
db:b9:db:64:5c:86:9a:9f:ac:1d:5a:80:e7:04:ef:
39:7d:f9:0c:fa:53:99:84:7f:2d:f4:53:33:83:74:
11:06:41:f7:ac:17:73:50:15:db:b5:6a:a0:5c:29:
c9:bd:fc:de:47:a9:ea:92:2a:08:00:aa:2f:05:98:
ea:b8:ea:7a:d6:b6:58:28:af:d3:f5:46:c8:19:5c:
cd:0e:ec:2a:08:56:27:bc:65:9b:30:8d:cc:6c:5e:
b2:8b:21:11:a2:8f:0b:b8:7d:da:e3:04:e4:63:47:
27:6b:29:91:ac:41:a6:34:b7:58:f8:f2:bb:9b:12:
d7:53:f3:3e:46:a6:ff:2d:e1:96:b7:3c:0c:f8:db:
20:df:55:3a:48:39:d9:0e:b2:4b:a9:11:40:e6:0b:
4e:fc:0b:f5:61:68:d8:d2:77:d2:f1:4b:21:4a:83:
bc:fe:37:14:0e:21:c3:74:57:50:b9:6d:14:9a:38:
88:27:11:2d:67:65:1f:54:3f:95:4d:1d:41:bd:36:
38:02:73:ab:15:3b:0f:99:82:90:b0:08:a4:13:e3:
35:2c:ca:4c:01:2d:74:fa:a0:e9:74:95:11:ee:36:
3b:62:3b:4c:c4:a6:f3:63:33:9a:3c:89:60:57:90:
5a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A9:0B:38:74:0E:28:1C:A0:1B:EC:5E:4B:7B:B7:78:C2:B7:21:7F
X509v3 Authority Key Identifier:
keyid:D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:de:18:5d:03:dd:e6:a3:65:1b:41:de:5b:e3:f2:5a:e1:75:
fe:61:b1:1f:75:cc:1d:ea:63:23:e8:7d:1e:09:6f:1b:ed:e5:
64:31:a7:ef:94:64:3e:e2:6e:b4:a3:5a:75:18:f7:42:20:ae:
6a:54:c2:96:4d:c4:1f:b4:75:eb:f0:ed:d4:4a:ff:84:18:ac:
9f:1e:dc:5f:69:cd:a0:e0:96:22:5a:db:bf:a0:68:da:1d:8d:
66:62:d0:49:02:fc:7a:cc:92:52:3b:be:34:36:81:24:93:82:
70:00:c5:51:ef:90:f3:14:27:d3:5d:dd:05:62:15:f7:c1:6d:
a2:db:ae:47:3b:37:de:30:08:85:94:d3:44:e5:a5:19:03:45:
49:07:e2:57:a2:19:cc:7d:a3:51:ae:b9:6c:83:4e:d6:ef:93:
59:ac:7f:c0:d2:4e:f5:9f:68:f3:31:b7:42:44:9a:e5:5d:8b:
06:7b:13:87:5b:53:8c:91:59:c5:bd:13:1d:a2:0f:42:18:ae:
27:10:de:5e:e8:5a:08:12:c6:03:af:ae:b5:e7:3b:d8:16:66:
58:ad:b3:ee:d4:26:71:c7:3d:ee:5a:d3:d3:fe:75:4d:6a:2a:
1a:5d:0d:0e:19:a0:4b:da:c5:aa:3e:c5:ad:ec:8d:a7:32:e0:
12:93:18:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:36 2025 by rpki-client