Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json)
Hash identifier: 0j3Mo7ZdL9w0/2whcdWz50qOtOabtMWmJ24A3j/Y2Io=
Subject key identifier: 97:B0:8A:96:08:53:E7:1F:A8:8B:20:80:D8:AA:47:7C:8A:78:92:7E
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial: 01958A03AA22B3CF09B4536E650ECCE63820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
Manifest number: 0A6C
Signing time: Wed 12 Mar 2025 11:00:50 +0000
Manifest this update: Wed 12 Mar 2025 11:00:50 +0000
Manifest next update: Thu 13 Mar 2025 11:00:50 +0000
Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: fEgdLvrBYDk1PZr1RNyJygO5T1iUfFZlw+5bgyvMhMs=)
2: IS0smRtY_UHklMsTV-a11MXxvnU.roa (hash: 1NEqhD+uaMSbaGDtUxTmaG/oRgFCvJ6p9cklS658oe4=)
3: WbjFo-ltxvF-7ZrjyQy1FqeRLns.roa (hash: V+1LDHomAKK5fbX6O5ZL1HAUnZGkvTtj4L1E7oUU45k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 07:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8a:03:aa:22:b3:cf:09:b4:53:6e:65:0e:cc:e6:38:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Validity
Not Before: Mar 12 11:00:50 2025 GMT
Not After : Mar 13 11:00:50 2025 GMT
Subject: CN=97b08a960853e71fa88b2080d8aa477c8a78927e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:e8:22:02:f7:ad:88:40:9a:60:cc:b7:c7:
b3:8f:b3:dd:1f:6b:b5:1f:f4:4d:f2:7b:d2:27:90:
49:29:36:c7:7e:26:ea:16:4f:19:0b:ed:75:e5:50:
9e:69:7b:a2:04:a1:e7:41:ec:80:5d:65:bd:38:84:
3a:16:06:a2:4b:e8:28:ee:bb:07:fd:fb:c1:a3:d9:
74:f6:7f:3a:db:0e:1f:38:ce:24:3e:e0:b6:8d:65:
07:45:72:d7:33:00:b4:02:03:e9:77:f5:05:42:73:
a6:f2:80:84:c3:65:14:90:7e:4f:54:68:ab:d4:81:
4d:5e:d7:d6:15:72:f8:9b:09:d6:d5:b8:f8:17:d7:
82:ea:2e:7b:0d:ed:3f:6e:64:75:7a:71:97:ec:72:
ce:84:d7:b0:32:e2:a0:c3:82:f1:3a:1b:7d:af:ef:
06:a6:fe:3a:61:ce:a0:58:c5:20:1a:e7:aa:9b:43:
34:03:9a:29:1a:a0:96:c8:99:df:45:bb:53:e7:74:
4a:c7:9c:90:fd:d7:8d:2f:c3:e0:5b:6e:ce:f9:9b:
8a:ab:43:87:32:7b:53:5a:90:91:7f:70:66:04:7c:
a4:5f:06:66:37:d2:b0:f3:c9:72:6a:07:96:5d:d5:
ba:fd:e1:f0:da:43:2f:20:81:5f:35:ee:ca:63:d5:
d9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B0:8A:96:08:53:E7:1F:A8:8B:20:80:D8:AA:47:7C:8A:78:92:7E
X509v3 Authority Key Identifier:
keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:15:6b:41:b8:a4:06:f5:8c:89:1b:4f:c6:e7:81:e4:11:0a:
66:80:9e:ed:e9:de:43:67:ea:9d:f1:5b:1f:80:a9:cc:09:85:
10:73:ad:8e:56:db:db:8d:a8:13:48:6a:31:cb:60:db:8d:7d:
69:71:0c:60:c4:ab:a7:ae:0c:8e:8b:92:02:cc:58:23:87:db:
6f:73:ca:41:d3:86:05:80:23:2b:9d:8b:a6:c9:3f:c4:67:a9:
37:e1:2a:1f:47:c4:83:ac:e3:9f:1b:79:7c:21:df:df:7c:66:
ba:66:6e:74:74:3c:4b:73:96:b8:52:bd:c2:e5:06:a1:6d:1e:
7b:e1:a0:0d:27:c0:6a:86:a3:8c:78:65:a7:fc:33:d8:b6:04:
06:0f:34:40:3b:ad:d9:5e:36:99:f3:c7:3d:98:ef:c8:96:b7:
9f:2b:a0:13:11:c5:a4:17:a3:2a:8b:8b:64:48:77:5e:24:57:
47:b0:dd:8c:7d:af:81:31:70:73:b7:c8:b8:ce:43:6e:29:f2:
5c:55:15:2b:a0:e0:90:ff:eb:3c:c8:e1:1f:de:6a:7a:15:2b:
96:ab:2e:9e:01:53:7e:40:25:b7:c1:5b:2b:33:b2:dc:88:17:
ad:42:48:ad:64:39:14:36:15:dc:4d:43:93:66:da:f5:6c:51:
85:8c:84:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:20:52 2025 by rpki-client