Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
File: 2fkESVCev547D0LBzcIuPvQAdCY.mft (raw, json)
Hash identifier: /OaD1mHymZQxJMecq2XtraJShtCnwLbNYDM9wStXHy0=
Subject key identifier: 90:22:76:C4:D2:43:76:5A:83:5E:67:24:2C:59:37:87:C7:53:73:51
Authority key identifier: D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
Certificate issuer: /CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Certificate serial: 019650115A18684307F38B238AD0430A06A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 22:00:36 +0000
Manifest this update: Sat 19 Apr 2025 22:00:36 +0000
Manifest next update: Sun 20 Apr 2025 22:00:36 +0000
Files and hashes: 1: 2fkESVCev547D0LBzcIuPvQAdCY.crl (hash: me0TU0GWuPa/c3DVnZ4UyBqT/Z22+fQP/T+tfYzljdg=)
2: Kz3po1HxXV0o_QrY9XITSTFXVJI.roa (hash: VAFUPoAe7hllDMdDCgHvMZTasRHVjamq6QvBPj1A6Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:5a:18:68:43:07:f3:8b:23:8a:d0:43:0a:06:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f90449509ebf9e3b0f42c1cdc22e3ef4007426
Validity
Not Before: Apr 19 22:00:36 2025 GMT
Not After : Apr 20 22:00:36 2025 GMT
Subject: CN=902276c4d243765a835e67242c593787c7537351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:a0:8f:d9:11:5d:8b:0b:ff:dc:70:99:bc:
61:db:6b:7f:a5:1d:20:62:a7:07:4b:e7:d2:1e:3e:
55:d1:ab:91:e4:bc:cf:a4:01:4b:1e:17:a9:c0:4b:
38:4a:64:59:de:0a:b5:88:42:53:84:1b:ac:b5:99:
65:30:79:52:64:b1:c7:81:ab:87:ab:10:ba:35:2e:
16:cb:fa:7f:b9:34:37:a1:08:08:1f:bd:db:03:9f:
e2:18:52:b7:88:3b:3c:fa:9f:77:36:57:37:b8:fe:
1e:70:99:fe:df:8d:79:50:59:e0:b3:3e:8f:73:e9:
b8:6d:e7:86:25:8f:64:59:bf:a3:e1:84:e4:53:4d:
ab:ce:12:0d:88:10:96:6f:82:df:60:2d:3c:c4:7f:
a7:9f:a0:0d:bf:12:b6:10:e2:83:69:3e:9f:a7:be:
49:2b:b9:33:23:95:3c:a4:1c:82:3b:b3:df:9b:0a:
2e:30:c5:eb:d0:01:73:f3:ca:cc:33:de:e4:e0:71:
5f:a2:17:24:be:fe:13:35:41:eb:8a:e7:f7:5a:f0:
ec:87:85:e2:9d:7f:40:4b:9d:5c:78:62:42:5b:0b:
c4:74:fd:35:bf:58:36:93:ff:29:d7:26:bc:dd:b6:
ac:a5:0f:1f:e8:68:1b:de:14:3f:e9:31:c1:9a:5b:
a4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:22:76:C4:D2:43:76:5A:83:5E:67:24:2C:59:37:87:C7:53:73:51
X509v3 Authority Key Identifier:
keyid:D9:F9:04:49:50:9E:BF:9E:3B:0F:42:C1:CD:C2:2E:3E:F4:00:74:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fkESVCev547D0LBzcIuPvQAdCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c5cef-d4e4-44e1-abf5-bb48828c9f05/1/2fkESVCev547D0LBzcIuPvQAdCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1d:c7:83:5e:93:bc:8b:fa:83:fd:7a:62:86:fc:66:25:31:
76:b6:42:5b:66:83:7a:13:01:ba:38:e7:ca:ed:5a:9b:0d:b5:
73:ab:59:7c:ba:4d:74:d5:a6:a4:8e:41:ab:f1:19:31:28:49:
5f:5b:4b:03:ea:24:e6:90:d0:a0:3e:6e:10:b6:f9:47:35:d3:
47:4a:ac:fe:b1:ec:7e:99:06:16:2d:54:2c:1c:61:80:74:f0:
c8:43:87:4f:6b:55:3f:48:9d:6b:e5:55:0d:05:70:60:37:96:
57:9b:e5:ff:d3:b7:21:39:fe:b9:30:84:05:df:12:11:52:01:
f3:8f:06:55:7a:ff:02:ac:bf:13:09:51:02:ae:e8:8f:95:3b:
5d:45:db:66:0b:dc:95:7d:bb:65:c9:1f:c2:7c:8c:ad:79:7b:
bc:58:9c:88:cd:37:c2:99:bd:94:f9:20:a7:4c:62:f4:26:e4:
f0:e6:40:32:3b:6e:bf:12:a2:b3:71:27:be:50:a5:73:94:4c:
7a:16:d2:46:9c:20:c0:3e:f2:5b:d1:ac:4e:3a:23:50:fe:55:
21:bf:32:a8:f0:d6:e4:e9:f8:e8:5d:ea:d6:15:67:2f:59:94:
b9:6f:a6:6e:8f:ee:ee:a2:20:77:65:91:d4:5b:1a:d1:2d:4c:
32:2a:f0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:36 2025 by rpki-client