Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
File: 2KzzS-KwTHzO8iIejR_LbKu0FZE.mft (raw, json)
Hash identifier: 6Los2fljzM+2iLOWYXp++4fSmEDW9v45vTUIifbcz0I=
Subject key identifier: 57:63:21:70:2E:80:38:7B:23:7E:3D:38:A1:CA:73:29:22:2C:D8:D2
Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Certificate serial: 01964AEAB37D06639D03B39AE462140EC0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 22:00:17 +0000
Manifest this update: Fri 18 Apr 2025 22:00:17 +0000
Manifest next update: Sat 19 Apr 2025 22:00:17 +0000
Files and hashes: 1: 2KzzS-KwTHzO8iIejR_LbKu0FZE.crl (hash: 3A++Y3aYmNlh5yucK1FBcLrUmKsM2GfBVKAIgfcyvxY=)
2: tFYWfziNY6T1pgWT96la8X957p4.roa (hash: 08hpQSe8BwmYvsZjvFViF9kdWzrXeHJU+sA3OilF/oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:ea:b3:7d:06:63:9d:03:b3:9a:e4:62:14:0e:c0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Validity
Not Before: Apr 18 22:00:17 2025 GMT
Not After : Apr 19 22:00:17 2025 GMT
Subject: CN=576321702e80387b237e3d38a1ca7329222cd8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:0b:72:06:3e:72:e6:e3:53:87:65:dc:33:
52:88:0a:3a:b1:5a:ec:b3:cd:e8:66:6a:45:f4:d7:
26:20:33:03:3b:3f:71:a2:ca:78:2e:00:b1:ee:e1:
c8:a8:b2:b1:38:24:1f:83:46:0d:7e:60:68:a6:22:
58:bc:ed:57:d1:ba:30:8f:f9:9b:45:b5:5a:e7:a8:
f3:57:bf:ae:fc:1d:11:39:72:70:a7:3a:8b:3c:9d:
42:cd:98:58:41:c6:32:18:2c:98:81:35:d1:29:07:
24:a4:da:d3:95:f7:f6:ff:e4:dd:a8:13:2f:90:18:
87:d9:2a:7d:d3:38:d3:2f:84:ff:d0:2f:1f:13:4c:
8e:0a:b0:6d:81:e2:f1:b4:69:52:b4:6b:b2:0f:2b:
6e:d7:47:64:02:01:fc:55:ad:e8:fd:02:ec:66:a3:
c7:0b:82:82:b8:4a:67:c7:eb:df:09:79:a9:4a:6a:
ca:15:12:00:f6:cf:e3:7e:e4:68:4b:04:66:4e:63:
97:91:34:83:ec:0c:f6:aa:51:e1:c8:c9:bc:af:8b:
f6:70:5e:3c:03:98:e6:ca:8c:c8:ef:38:f8:d6:b1:
f5:87:cd:05:11:41:60:d4:91:67:a5:6f:52:83:0a:
9e:e4:1c:84:93:fc:8a:84:03:a0:ae:c9:24:32:b4:
7e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:63:21:70:2E:80:38:7B:23:7E:3D:38:A1:CA:73:29:22:2C:D8:D2
X509v3 Authority Key Identifier:
keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:16:0e:73:93:a6:15:77:12:1f:57:84:86:db:1f:7a:a4:bb:
66:23:ad:65:00:05:84:b0:1e:52:8d:ff:62:4e:27:67:dc:62:
a4:c9:50:15:c1:dc:25:2a:d1:b3:6a:52:2a:39:e8:03:88:78:
e6:df:a2:8d:be:3c:f0:e4:fd:b9:7e:8d:32:e3:ba:e9:3f:31:
a1:e4:da:86:91:46:b1:f4:8d:cf:66:1c:a4:b8:21:6b:89:b8:
df:0d:53:9e:19:2f:ed:74:7b:98:96:1f:96:14:bf:b2:b8:cc:
7d:a1:fb:0a:ff:7d:29:4e:4b:a4:50:be:2b:9d:61:57:29:6a:
73:19:a9:df:9e:2c:01:29:23:13:84:13:7c:84:7a:4b:a6:2c:
3c:1d:ee:3e:e1:77:8d:29:26:d8:98:81:2b:9e:78:b6:67:1c:
27:39:98:ad:bb:88:f8:42:57:34:e5:ac:76:7a:d8:ec:c1:e3:
32:4d:c0:2b:b0:98:3c:32:f7:26:36:af:05:64:14:11:c6:2f:
e4:72:d4:d1:cc:fc:3b:00:2c:b3:67:c9:7f:f4:83:dd:64:b9:
28:7d:59:dc:30:56:2e:95:89:c9:dd:f0:23:e9:a6:c4:71:d9:
72:b6:6e:e9:d3:e7:8b:31:32:d5:55:59:18:05:82:9d:73:0e:
04:47:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:34:13 2025 by rpki-client