Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
File: 2fhm-wqoOicaDLfckDAYjInSPl0.mft (raw, json)
Hash identifier: O3BIJGLhVsZPhhDn8+UvMKMdm8BKr31CW9OvFC1ULoo=
Subject key identifier: AD:CB:EF:25:90:09:B6:6E:E3:C7:31:D4:F8:63:BF:86:42:84:54:5D
Authority key identifier: D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
Certificate issuer: /CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Certificate serial: 019641433BD82B59184F20959698C09FD74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 01:00:47 +0000
Manifest this update: Thu 17 Apr 2025 01:00:47 +0000
Manifest next update: Fri 18 Apr 2025 01:00:47 +0000
Files and hashes: 1: 2fhm-wqoOicaDLfckDAYjInSPl0.crl (hash: aYHYxeMl0tiZoqamUu6aYKJMTxceSOD+Rn/OcxXBXDw=)
2: vaJcnuFh_402kJ74_w8V8zEZMEQ.roa (hash: zHT9dPUYaVKrJVgWZffBYu4o6dMRl6TWrXRAFSRU0bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:43:3b:d8:2b:59:18:4f:20:95:96:98:c0:9f:d7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f866fb0aa83a271a0cb7dc9030188c89d23e5d
Validity
Not Before: Apr 17 01:00:47 2025 GMT
Not After : Apr 18 01:00:47 2025 GMT
Subject: CN=adcbef259009b66ee3c731d4f863bf864284545d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:b8:18:2d:a4:19:fc:f1:93:05:2c:80:b4:
d9:7f:6f:f2:10:c4:61:b6:1f:05:f8:50:a6:5d:84:
6d:15:58:2d:2c:83:f4:3f:aa:d2:11:5e:b7:1c:06:
5b:da:19:3e:d3:10:51:ac:a8:69:4b:16:c7:53:7b:
d9:ad:4c:f9:0d:2a:9e:44:85:34:eb:dd:25:b4:34:
f3:15:fb:74:d2:60:84:ab:8d:3b:cf:02:ab:0e:90:
60:1b:7f:d1:ce:93:9c:2c:be:c2:c6:d1:06:4d:27:
1c:42:b1:35:c8:9c:0e:22:12:47:d6:2d:3b:34:d2:
fa:53:27:91:f4:85:9f:a1:d0:41:5e:0b:6c:85:fe:
29:ff:1a:be:fb:52:75:94:ad:5a:b2:5c:72:f4:aa:
40:41:18:10:32:2d:00:19:d1:6b:3a:00:fe:59:5a:
bf:cd:4a:fa:af:ee:b9:54:f1:69:e9:c6:7c:bd:2f:
d2:77:4c:4c:af:1a:3b:c2:0c:07:38:e7:ec:7c:ef:
8e:79:7a:63:ba:cc:1e:3b:ed:da:7d:29:91:18:53:
f9:07:59:df:ab:c2:46:3b:62:25:5f:6f:bd:1f:3d:
94:63:db:a7:ae:1f:7b:3d:b6:38:f4:ee:53:73:8c:
9e:54:cd:24:90:ac:fa:94:36:98:a2:96:16:09:24:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CB:EF:25:90:09:B6:6E:E3:C7:31:D4:F8:63:BF:86:42:84:54:5D
X509v3 Authority Key Identifier:
keyid:D9:F8:66:FB:0A:A8:3A:27:1A:0C:B7:DC:90:30:18:8C:89:D2:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fhm-wqoOicaDLfckDAYjInSPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5273a4-10c8-40bf-b24f-5c1d5a6992d8/1/2fhm-wqoOicaDLfckDAYjInSPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f7:59:86:58:db:42:9b:42:eb:96:d6:e3:2f:6a:d6:94:f2:
9e:3e:85:94:1b:f6:92:32:cf:5d:43:4c:e5:1e:e2:79:a3:04:
d5:a3:18:57:81:6d:48:75:44:74:54:a5:4b:6a:b9:91:62:da:
cc:e5:ec:21:de:cc:00:b3:e5:f2:d6:99:d5:f7:52:ce:32:fa:
07:f7:1f:89:f9:8c:67:98:c2:2e:55:ec:92:32:ef:8f:cb:17:
21:5f:26:b0:0b:74:f0:c0:8a:3f:92:79:8c:89:27:39:29:73:
e8:39:e3:1f:1a:3c:78:d6:8d:be:9c:4f:40:52:e2:ff:17:83:
ed:f7:f7:c4:25:24:d6:64:fb:72:6a:16:6a:bd:45:c5:7d:39:
a4:f0:53:18:d3:4c:ed:f4:44:77:d8:b4:43:19:44:26:73:7e:
60:0f:94:dc:a8:9b:88:3a:10:7e:d6:b1:98:cf:ee:61:92:17:
d2:d5:b0:96:eb:b4:89:2e:bd:97:45:90:a8:6b:90:9b:c2:67:
58:3e:dd:e1:8d:e9:bc:3c:a0:33:60:97:74:9d:fb:7c:39:a4:
1b:5b:b9:e1:ae:78:49:4f:fe:5a:5e:e8:ac:c3:9f:79:1d:97:
c8:26:9f:0c:a8:b0:37:dc:08:5e:b2:e8:85:8c:ae:2f:93:31:
fb:1d:b2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:11:34 2025 by rpki-client