Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
File: 2Z6pWH5epOljrXrn8SV2HA4pJWM.mft (raw, json)
Hash identifier: IenCDe2PuHzTRHN6479b9TNrIXk9rj484hS4VDtcNt4=
Subject key identifier: FF:5B:25:8E:DD:6C:92:BA:C9:6B:26:83:DC:E4:4A:A8:89:B6:81:AE
Authority key identifier: D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
Certificate issuer: /CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Certificate serial: 01964BC69E87DAD7ABA7F7F0F9AA7B2EA74F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 02:00:29 +0000
Manifest this update: Sat 19 Apr 2025 02:00:29 +0000
Manifest next update: Sun 20 Apr 2025 02:00:29 +0000
Files and hashes: 1: 2Z6pWH5epOljrXrn8SV2HA4pJWM.crl (hash: WeqIXSSL0syGdfRgjrecIQOe/DX4r2HrTWrfzd1/cp0=)
2: fRfYTFrvzDmGp4DgYCf5CTa4BWk.roa (hash: 8+ivyjKOK9XU+rYZkbxFvkTVk6Yv/MHnjxmXiO2eTsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:9e:87:da:d7:ab:a7:f7:f0:f9:aa:7b:2e:a7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99ea9587e5ea4e963ad7ae7f125761c0e292563
Validity
Not Before: Apr 19 02:00:29 2025 GMT
Not After : Apr 20 02:00:29 2025 GMT
Subject: CN=ff5b258edd6c92bac96b2683dce44aa889b681ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:28:80:b6:d0:3b:f7:1c:c5:bb:91:aa:f4:
04:fe:93:b4:f8:9e:f1:e4:a6:a3:c4:dc:6a:26:97:
67:6d:a7:88:a1:21:c0:6f:35:c1:b8:85:92:06:b7:
32:08:01:82:ff:db:48:2b:e5:ea:bd:02:64:39:5b:
71:35:2b:f4:fc:39:d3:64:52:f8:cf:ef:30:ce:26:
0a:ca:df:17:42:a3:7f:14:07:da:83:c6:53:3e:a2:
52:f5:07:ac:76:f3:bb:9b:a1:34:0a:dc:f2:46:0c:
eb:a8:48:7e:bb:29:47:c1:13:07:c6:9c:6f:15:4c:
84:fa:f4:c8:43:68:e0:55:1a:c6:2d:83:d7:74:a4:
f8:f3:a4:56:ad:d9:f0:ce:22:47:14:eb:b3:7c:85:
ea:5e:ea:0f:9a:9c:50:77:fe:ca:f0:1f:f6:ab:fa:
e5:5a:ed:6a:a3:c7:4f:da:64:a5:a4:4c:e7:6b:45:
32:9f:54:52:a5:91:ea:97:cc:a3:c7:67:98:ee:00:
48:3e:30:77:32:e7:da:fe:81:74:da:45:70:a3:e8:
37:e6:61:bd:1c:a5:df:01:ad:8b:b7:66:b0:8c:d5:
f7:f1:6a:c0:ae:1e:90:82:1e:14:5b:1f:bb:9f:53:
59:6d:63:f0:d9:10:5f:15:2f:fd:13:a9:29:61:17:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5B:25:8E:DD:6C:92:BA:C9:6B:26:83:DC:E4:4A:A8:89:B6:81:AE
X509v3 Authority Key Identifier:
keyid:D9:9E:A9:58:7E:5E:A4:E9:63:AD:7A:E7:F1:25:76:1C:0E:29:25:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z6pWH5epOljrXrn8SV2HA4pJWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9c1b02-e678-4e86-9905-07df016c41b8/1/2Z6pWH5epOljrXrn8SV2HA4pJWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:88:81:88:b6:e5:a1:65:de:fe:af:c3:ce:95:2d:02:ca:26:
f8:a7:6c:72:1a:18:ae:97:4e:23:bc:12:7f:93:dc:7f:7f:09:
2a:e5:40:6d:af:4b:84:cb:c7:3d:07:98:6f:c2:1f:bf:22:35:
fe:89:9b:a5:04:3c:69:60:9c:70:0b:a4:1b:7d:b9:09:40:2a:
93:41:ea:74:45:ef:0a:c7:0a:85:73:8a:85:1a:f3:71:88:a0:
28:5c:ab:a9:1b:31:87:ec:15:7d:7c:8a:0c:59:f8:dd:fe:34:
11:74:60:42:45:69:80:12:f8:1b:ac:f7:1f:44:e1:6b:dd:c2:
77:8e:67:6c:c6:fa:0c:5b:ce:99:74:ba:fa:83:96:bf:75:53:
53:8c:bf:4d:d5:c0:b0:3f:a6:e9:10:61:95:41:8b:64:5a:8e:
d9:67:ea:70:92:5c:84:54:f6:ee:ca:fa:7c:df:f9:dc:99:8f:
49:a0:27:7f:08:52:a1:97:e0:0d:a0:4e:db:82:fd:af:b6:08:
46:3e:b5:57:73:df:aa:90:50:93:ad:45:3e:3c:0f:d9:b6:b0:
09:58:20:43:08:fd:07:d7:e7:a8:6d:72:0d:d2:08:5d:c9:ce:
b3:19:88:a6:fb:06:69:29:c7:f3:bc:cc:b5:71:50:b6:e3:b5:
93:0b:99:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:33:38 2025 by rpki-client