Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
File: 2fkESVCev547D0LBzcIuPvQAdCY.mft (raw, json)
Hash identifier: NV1H/gET9qLU8S5sgfiinS1apqQ5gSfzMFoS7QjvHXI=
Subject key identifier: 29:11:36:FA:03:F9:17:95:FD:FB:07:36:25:55:67:52:08:AD:51:F6
Authority key identifier: D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
Certificate issuer: /CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Certificate serial: 01958B16CCBAC822C0370211237A5D6EF354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 16:01:21 +0000
Manifest this update: Wed 12 Mar 2025 16:01:21 +0000
Manifest next update: Thu 13 Mar 2025 16:01:21 +0000
Files and hashes: 1: 2fkESVCev547D0LBzcIuPvQAdCY.crl (hash: ibVmFK5ugGqqC4aUFCUu55l01iiCS6hQIDvt8z809BQ=)
2: Kz3po1HxXV0o_QrY9XITSTFXVJI.roa (hash: VAFUPoAe7hllDMdDCgHvMZTasRHVjamq6QvBPj1A6Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:cc:ba:c8:22:c0:37:02:11:23:7a:5d:6e:f3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Validity
Not Before: Mar 12 16:01:21 2025 GMT
Not After : Mar 13 16:01:21 2025 GMT
Subject: CN=291136fa03f91795fdfb07362555675208ad51f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:ca:87:5d:b0:73:50:4e:2b:1a:0f:aa:c0:
ef:a7:8e:2f:3e:0b:98:13:aa:f5:9b:9d:86:7e:ee:
69:ad:56:c1:52:f4:41:e2:ad:5a:cb:39:de:5c:6e:
99:78:8c:fd:06:52:2a:dd:fa:8d:39:c3:b2:94:58:
5b:c1:d1:3b:14:7e:73:34:4f:79:06:45:05:8c:8f:
0c:ee:64:bb:e8:52:c5:c0:09:89:7c:72:b4:70:9b:
42:b8:70:94:ed:f6:36:a7:53:ff:dd:bd:e1:6b:9c:
7a:5b:6c:58:11:36:92:8b:82:32:6f:11:33:bc:c2:
90:a7:17:c1:7a:86:a1:24:78:41:e8:a1:44:63:fc:
1c:ca:91:6d:ac:13:0f:cd:5f:5e:62:bb:53:1e:dc:
ab:1b:00:01:76:8c:90:62:bf:f2:7c:ac:60:65:bd:
1c:15:1b:36:b3:21:d5:47:b8:5d:ea:4b:c9:bd:07:
65:16:bd:06:f5:e1:6c:12:70:10:bf:04:45:ce:57:
f3:ba:a9:17:3a:a5:2e:83:6c:a4:81:f8:1f:f5:c4:
83:d2:8c:c1:35:c7:c3:da:fd:d1:81:83:0d:8d:d9:
8d:e1:8a:45:c2:ff:b1:c5:82:2c:39:86:b4:c3:9c:
e4:44:a8:ed:d6:80:27:ea:ab:95:ed:4b:2b:9c:7b:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:11:36:FA:03:F9:17:95:FD:FB:07:36:25:55:67:52:08:AD:51:F6
X509v3 Authority Key Identifier:
keyid:D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:31:95:8c:44:b5:b3:91:51:ad:e9:1a:9f:39:ad:b7:f2:bd:
66:2a:89:e9:7b:78:f9:48:47:65:76:7c:e7:85:00:64:64:6c:
53:b1:95:53:87:3f:c1:fb:1c:9d:0a:c6:3e:d8:74:28:ff:12:
0d:5c:58:1b:c1:6f:c6:be:3c:f0:12:4b:28:2b:0b:f1:9f:34:
12:b9:f3:3f:f4:2e:fa:4d:a1:e8:0a:f5:f2:4c:26:7f:80:a9:
dd:dd:e8:d7:98:32:69:cb:4f:c0:74:c9:43:e7:8e:63:e3:8c:
c0:af:56:d6:c3:81:f7:20:38:21:f0:31:23:8b:eb:bf:34:0d:
64:09:52:89:8b:66:15:10:ca:fc:7b:5e:29:7b:a1:8a:94:5c:
78:49:62:78:43:d5:73:70:8c:03:dd:c7:d5:d0:3b:61:7c:78:
e7:d0:ce:9a:e1:c7:c1:6c:58:02:f5:01:ba:7c:42:8d:4d:50:
2c:2f:e2:98:82:18:9d:9f:19:59:e7:12:f1:73:e7:60:56:42:
2c:1f:a3:31:a0:96:65:e9:f9:48:dd:a1:a1:1d:f0:ea:e4:cd:
e0:bc:36:9f:42:7a:b0:08:09:81:65:2f:b5:43:1f:71:56:a7:
07:df:25:30:c1:44:e6:c2:3c:67:80:4f:41:e5:e5:56:83:c7:
3a:60:af:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:37 2025 by rpki-client