Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier: Io+8G4I/7D96KkEmUuSgTfXnjnBSmFEmr6BudjK0coc=
Subject key identifier: F3:CA:C6:90:57:E1:25:E0:60:C8:44:75:4D:CA:F7:94:E6:F6:C6:FC
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial: 01958C609ECA7A324AB2F93A7A50A6EF12B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number: 03CB
Signing time: Wed 12 Mar 2025 22:01:37 +0000
Manifest this update: Wed 12 Mar 2025 22:01:37 +0000
Manifest next update: Thu 13 Mar 2025 22:01:37 +0000
Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: e1vAlG93tSQ/H3HleefWnqKRD7acIIfAIoBQAdXXt8g=)
2: zTObV0m25qLongdbMc1UK5cdDfM.roa (hash: 4vzLfRUXikN+jtLHjiPgkfjEI9Bc4I9hoP/W6i8Z0Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:9e:ca:7a:32:4a:b2:f9:3a:7a:50:a6:ef:12:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Validity
Not Before: Mar 12 22:01:37 2025 GMT
Not After : Mar 13 22:01:37 2025 GMT
Subject: CN=f3cac69057e125e060c844754dcaf794e6f6c6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:f1:f4:3d:68:bc:a4:56:e7:88:07:ce:4c:
86:95:a5:d4:cd:2c:25:d3:81:5a:1d:e1:7e:10:e6:
37:0f:e1:4c:c5:ab:96:0a:6a:84:85:9c:c2:e4:58:
a3:d3:eb:05:b6:5a:02:15:e4:2b:b7:a4:64:f6:45:
a2:46:a9:8d:8e:c5:36:6b:7f:d9:bf:e5:c0:f5:c0:
00:a8:81:6f:77:a9:df:0a:45:7f:7c:64:13:37:eb:
5d:65:97:27:02:a6:bf:fb:94:8e:1a:d0:0b:0c:13:
dc:f7:26:65:8c:b7:fe:ef:cb:3c:d6:5c:11:45:2a:
14:c7:d0:5b:4d:04:78:07:36:12:11:1b:52:45:46:
ef:6c:c1:dd:ce:eb:8f:3f:bb:ca:58:7b:3b:54:99:
20:09:e8:2c:33:c9:55:37:13:12:3b:3a:c2:c5:cc:
20:f0:00:5e:20:c7:b3:4a:5f:ba:e6:25:b9:1b:ff:
c9:38:64:7e:f4:3c:6c:d2:5c:51:4d:28:9f:be:f0:
59:2a:81:51:01:af:4d:42:3a:40:57:62:02:0d:e8:
96:6f:64:2e:b7:9c:ac:34:58:b6:bb:6e:26:be:ed:
00:c4:c5:a1:e5:fe:d1:e0:0c:75:bc:1f:3f:4c:22:
ab:d0:ad:f4:de:10:58:b8:77:8e:6d:43:c3:59:b8:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CA:C6:90:57:E1:25:E0:60:C8:44:75:4D:CA:F7:94:E6:F6:C6:FC
X509v3 Authority Key Identifier:
keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cb:8b:dd:a5:61:ca:b0:46:53:ad:71:b5:36:2b:ba:76:7d:
3a:3c:6b:ee:5c:b0:96:09:2d:11:7b:28:86:bc:70:aa:d5:09:
ee:24:67:b7:f2:80:b4:d6:6a:c4:7f:a0:97:5e:bb:dc:dd:d5:
34:ed:a6:43:14:c4:5d:5a:5b:0d:8e:3f:4d:6e:33:0c:78:f7:
46:36:2f:bc:d7:fc:a2:59:d8:0e:47:5a:78:6b:ca:47:1b:f5:
9e:39:ff:e8:ce:ad:95:2f:54:0c:cf:74:da:b6:bc:5b:25:fd:
a9:4d:48:21:f4:2d:a9:eb:9a:8f:eb:f1:4c:ee:fb:39:e1:fe:
cd:b7:52:af:42:2d:4c:30:c6:e3:93:16:34:66:47:a4:67:eb:
b6:f1:32:01:ad:9a:14:6e:cd:ae:83:6d:aa:ca:b7:a5:15:82:
98:8e:65:95:f5:d7:b9:a8:d2:f0:0d:bb:06:0d:56:b4:47:e6:
19:1a:46:bd:82:3a:f2:89:c8:d4:47:38:32:99:b6:07:34:ff:
a0:d9:88:1d:e1:88:a6:e9:43:16:7e:2f:44:e5:d7:cb:ce:bb:
0d:5e:9f:b0:ce:1a:30:0e:a4:5a:6c:7e:13:a5:a3:0d:cf:95:
f5:af:3c:f1:0e:0c:f8:16:05:70:37:5e:13:2a:5d:73:62:90:
bb:7e:bb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:28 2025 by rpki-client