Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
File: 1--2UOaTkstMuS-5kfzthBVsWnj0.mft (raw, json)
Hash identifier: Qfyy7+GbVKf7eyrMP/ZEayUmMaMyIbdAZtXYFuc3LIE=
Subject key identifier: 2A:E7:4E:B6:6E:A3:FA:C3:72:5B:D2:D5:35:65:25:28:B2:E4:80:D9
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Certificate issuer: /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial: 01964FDB2E18D01F4AD7CE2C5CDA1163D3E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 21:01:26 +0000
Manifest this update: Sat 19 Apr 2025 21:01:26 +0000
Manifest next update: Sun 20 Apr 2025 21:01:26 +0000
Files and hashes: 1: 1--2UOaTkstMuS-5kfzthBVsWnj0.crl (hash: T06LR9AyNpUD4+MnK8JmxSEClsXa2RxmQkZiw2pavXs=)
2: 61waeYhYDVs6iShTSFPZPK9QSkM.roa (hash: QQBDA8/+LK2nAVHB2ah071aV/uPCqnuOIT4KbDJAkyE=)
3: dCHPtj1Enu9C_p2jfaqFMRHkj4c.roa (hash: xa0IfezLBVX21PV8VhLDZSxsFF3gEUGakSX8RC4YWfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:db:2e:18:d0:1f:4a:d7:ce:2c:5c:da:11:63:d3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Validity
Not Before: Apr 19 21:01:26 2025 GMT
Not After : Apr 20 21:01:26 2025 GMT
Subject: CN=2ae74eb66ea3fac3725bd2d535652528b2e480d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:e5:2e:78:e3:6f:f0:dd:19:e2:f2:b5:71:
8f:bc:37:27:9d:82:3d:c3:9b:65:18:d1:81:00:c4:
c8:96:2e:ff:9b:a4:57:67:74:dc:0a:97:f6:af:0c:
04:1c:8c:cd:00:34:f5:16:7d:50:51:24:f7:77:4a:
92:40:ef:db:d0:4f:ef:90:20:9a:9a:fa:15:91:9d:
f7:5a:21:08:b6:99:81:99:ed:c2:d6:6a:d4:86:a1:
a5:d3:77:20:8c:d1:7f:c7:b5:bd:7b:46:46:fb:5d:
48:5e:15:39:a8:42:33:4c:a0:1b:25:f5:8c:e6:bd:
cc:3f:4f:c6:94:9e:5a:12:b5:21:4e:8c:06:d6:8e:
2e:b3:47:0d:42:0b:4c:2c:97:32:e2:ae:bd:ce:af:
83:0a:59:3e:f3:f9:dc:5b:72:6b:ff:1b:17:2f:2e:
e1:ed:65:73:9b:74:c9:79:29:95:a5:f3:0e:73:d2:
ff:3f:61:f7:a7:0d:32:cf:83:72:5e:e5:9f:1c:95:
69:2d:1f:0c:3a:38:2d:ac:76:8a:6a:a7:04:e5:af:
09:8c:5b:b3:03:87:18:62:12:8d:38:cc:0d:f4:ef:
67:73:42:6d:d4:c0:87:5c:0d:db:12:3b:25:d0:cd:
27:98:1d:73:c8:6e:bd:ff:a2:b3:56:af:b5:0c:35:
68:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E7:4E:B6:6E:A3:FA:C3:72:5B:D2:D5:35:65:25:28:B2:E4:80:D9
X509v3 Authority Key Identifier:
keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:79:dc:dd:0d:bd:da:29:3e:38:e6:bc:25:5d:d9:0d:d1:71:
0e:ef:b8:7d:88:11:d8:e9:54:89:a2:b2:ff:28:2a:28:47:a0:
26:d8:c2:79:4b:8f:2e:84:f3:7e:fa:d3:2e:19:d6:60:df:d3:
2a:e4:71:1d:bb:03:db:24:9c:07:ec:c9:3e:04:81:bd:83:ed:
67:f4:6a:5d:16:af:e1:41:62:4f:6c:e4:83:4c:ff:e7:1d:e4:
08:4f:6b:d1:05:7f:e0:c8:c3:49:2e:d8:ad:cc:aa:c8:64:54:
58:ec:fa:70:e7:be:e1:63:33:69:9f:39:03:40:57:13:6d:23:
31:69:cb:fd:73:69:f4:16:46:f8:28:92:d8:d3:2d:59:f0:6d:
e0:ee:5b:7f:0b:49:c1:56:fa:d2:af:9f:88:c7:4f:ce:7d:02:
d9:10:fe:ee:25:4b:de:73:1d:63:cf:32:21:b1:5e:24:e0:f4:
56:0e:97:7d:7b:21:29:57:da:45:eb:39:53:78:90:55:ae:3c:
70:e5:a7:e1:ee:78:3b:83:21:f4:66:af:08:5b:d8:8b:6a:c2:
4a:a5:7a:ff:ed:44:98:7a:57:10:b5:ea:f1:0d:3c:fe:ce:cd:
87:cc:df:3c:59:d4:40:c2:c5:c5:3d:2b:09:cc:73:a2:03:a8:
61:76:bc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:45 2025 by rpki-client