Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
File: 2vy2Q-aiHi-24hzQZTqwlenr7xM.mft (raw, json)
Hash identifier: pAXHDKl1OSQp102zfi9Pw4H4jHiBwDQHLwIXHnOkX+s=
Subject key identifier: 05:23:E9:4D:50:8F:98:91:81:76:30:32:FB:05:AC:E7:4A:DD:B5:95
Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
Certificate issuer: /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Certificate serial: 0196138EE6D9455293929931388D69D2F4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
Manifest number: 1373
Signing time: Tue 08 Apr 2025 04:00:54 +0000
Manifest this update: Tue 08 Apr 2025 04:00:54 +0000
Manifest next update: Wed 09 Apr 2025 04:00:54 +0000
Files and hashes: 1: 2vy2Q-aiHi-24hzQZTqwlenr7xM.crl (hash: ubFSAejh8Ejv8Yk1vN3RCcjYRzJwJAeY3amlZkfZy2k=)
2: XoV9N0j6H78F41W2zYIj2kSiFP4.roa (hash: XyaPIDPQv/zJjAxhNU5V2ftiSqBuA4U9SWVpvc6Tesw=)
3: cK0E2MhGVrGSWPTCnfeQC1sAuxs.roa (hash: uuk3LoGMturH/eTE0jHSUZ94kTlLI2qzp8ngct2Ku4s=)
4: dsI79c9RkSXCJw4J0k20aJh3S5k.roa (hash: WdLdZEAe44rS1q9Lslq+6ZV6nfvfr1+ikiH+EPMF39M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:8e:e6:d9:45:52:93:92:99:31:38:8d:69:d2:f4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Validity
Not Before: Apr 8 04:00:54 2025 GMT
Not After : Apr 9 04:00:54 2025 GMT
Subject: CN=0523e94d508f989181763032fb05ace74addb595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:d5:18:65:f9:75:a7:ab:e2:b2:4f:ed:3e:
e1:25:5e:56:fd:62:20:28:4d:f9:5b:fd:9a:d2:1e:
41:02:e8:8b:77:68:0e:10:9c:33:3a:23:1c:5a:23:
8e:f6:66:3a:8e:19:46:c8:40:d6:1d:13:d5:d4:4d:
34:32:93:c3:33:5a:ce:43:7b:b3:fd:dc:99:d3:7d:
c7:74:eb:25:7d:96:c5:d6:b2:f0:74:e9:3a:cd:c9:
3f:1a:8a:1f:af:51:e9:df:ef:b5:71:fd:65:30:0b:
c9:ea:5b:bf:91:be:5b:32:0a:2c:b6:d6:5f:f7:35:
62:79:1c:21:54:73:83:b5:45:2f:0e:80:b5:ee:ac:
d6:e6:df:0b:f9:43:de:11:6e:c2:c7:6f:af:44:0f:
32:ac:fc:08:0d:f9:52:57:f3:ee:6e:42:86:c6:74:
25:41:85:25:31:4a:fd:37:23:6c:72:6a:b1:ea:bc:
f2:6b:a8:04:ca:96:33:18:cf:72:fe:f3:fc:18:19:
de:73:c5:0a:58:b7:11:9b:b3:db:35:41:5d:3d:16:
60:3d:40:8e:84:64:be:34:25:49:65:59:98:1f:50:
9c:71:61:26:d5:44:6a:f9:3a:d7:22:c6:5a:b5:69:
48:f1:20:dd:8b:60:34:75:99:c4:10:a0:a5:89:0e:
94:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:23:E9:4D:50:8F:98:91:81:76:30:32:FB:05:AC:E7:4A:DD:B5:95
X509v3 Authority Key Identifier:
keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:00:07:e2:91:48:cf:a7:f3:30:60:b1:79:8c:b0:e6:83:f7:
f4:42:b9:fd:28:68:f7:ef:0d:ac:45:bd:c7:94:42:bc:33:8e:
fa:0c:56:95:ae:ca:15:2b:78:16:2a:18:83:61:3b:8e:fb:a9:
77:37:aa:08:a2:f7:c4:01:de:44:dc:51:b2:e9:7f:af:02:69:
1a:a2:1c:96:c1:00:3e:83:0b:e9:f9:3c:8e:73:55:7b:7e:b7:
d4:fe:73:ae:cf:26:b9:83:eb:15:66:16:a4:1d:62:d9:04:3e:
bb:77:01:c2:93:e9:1e:a0:90:29:05:53:9a:ff:00:64:1d:0e:
c4:dc:61:a7:bb:d9:eb:46:26:30:ef:ec:0d:bd:10:53:6e:69:
a4:5b:c1:15:fe:79:aa:0a:11:24:8a:be:cf:41:e2:7a:1e:c9:
9d:0c:68:42:a2:c2:2f:61:f6:d4:bd:f7:32:12:c8:98:ef:18:
cb:54:21:8b:e1:01:bf:8d:c2:d1:90:e3:31:7d:5d:20:d0:a9:
7e:5b:56:50:f8:9a:91:b2:a7:15:52:3e:c2:10:aa:82:e3:5d:
3a:2d:45:5a:c9:7c:c4:5c:60:4b:66:1e:ba:8b:69:83:6f:08:
31:57:73:00:0c:23:54:a9:b2:16:2c:2a:a0:73:f8:9a:34:6d:
64:6c:46:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:58:42 2025 by rpki-client