Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: V22m4GrPGQhefe1GTltBb3FpVJ8EAbbBkotshrHn4Vw=
Subject key identifier: 92:AF:99:D4:BE:3C:E3:DF:DB:FE:E0:E1:DF:BF:EC:51:7E:30:85:75
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 01964D107C5FF4CE790D56CF162DBCCE97C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 08:00:48 +0000
Manifest this update: Sat 19 Apr 2025 08:00:48 +0000
Manifest next update: Sun 20 Apr 2025 08:00:48 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: 71ajxNER3N0NZ1WezPE5XIEk9zpITYq4jjJQZuLJJxg=)
2: 4E-cbgyOXJc89SUUv5sM3VxtLuk.roa (hash: D+jbZ3w2pVOtXKOqYfIoycf5LJ7PgaHCl8bnKHOQ6Cg=)
3: dQPCUyfRgXI2CJkCt0SpYUsgCvY.roa (hash: GqkrkB+v/kxjy5/qBpp0Cz+zZPTcGmByplfjUUUfttA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:7c:5f:f4:ce:79:0d:56:cf:16:2d:bc:ce:97:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Apr 19 08:00:48 2025 GMT
Not After : Apr 20 08:00:48 2025 GMT
Subject: CN=92af99d4be3ce3dfdbfee0e1dfbfec517e308575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0e:31:cb:40:4d:8e:ac:16:42:a1:b6:ec:64:
29:34:bd:8f:5b:45:ed:4d:b6:09:8e:a4:cb:05:f1:
a8:9c:50:da:42:d9:01:3f:19:67:dd:cf:7d:a1:2b:
a1:fd:48:c1:16:3f:50:bf:55:02:f8:a9:65:9e:9c:
fc:d4:67:c4:9e:c9:ef:a7:c5:c9:c2:21:71:de:90:
33:3d:0f:c0:47:06:70:84:ab:25:8e:f5:ab:1a:1b:
65:70:a9:c3:7d:86:76:d5:5a:7c:08:78:d4:56:fb:
6b:f0:5d:21:8a:e5:53:b3:3f:77:cb:56:95:41:f4:
d0:0e:8c:47:ec:dc:76:18:60:43:78:12:16:c3:2a:
ab:d6:38:c7:22:18:38:79:cb:fe:1e:65:20:06:f4:
cd:62:20:ee:35:d7:44:93:43:cf:f9:c9:9b:5f:57:
2a:82:52:1e:5f:7a:38:5b:82:73:2f:e9:73:9a:fc:
76:c3:e3:5e:f7:ef:83:5f:42:bf:f3:25:76:f6:f3:
67:d9:af:8b:c0:13:a5:db:34:61:b8:c4:73:a7:2f:
98:9a:3d:1d:7d:99:b4:74:92:8b:03:a4:6f:eb:68:
21:46:55:70:4d:78:af:ca:26:09:b1:34:3c:d3:68:
8e:26:d9:a3:0f:15:30:1b:d9:e6:97:b8:70:56:8d:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AF:99:D4:BE:3C:E3:DF:DB:FE:E0:E1:DF:BF:EC:51:7E:30:85:75
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:48:5c:f8:f8:ec:11:40:27:b8:da:3b:38:f3:7c:f1:55:e3:
66:59:d7:ca:2f:33:6e:65:76:4b:11:49:4a:09:9e:1f:5c:ac:
a6:d2:d3:14:fa:87:7a:1f:12:6e:f3:0f:6a:d0:d8:cd:f4:84:
e5:68:1a:b4:73:72:0a:cc:7b:2f:2b:23:8d:c0:c7:b6:a9:e7:
33:83:ae:f4:4b:25:6f:94:a0:af:99:de:4c:94:df:77:e3:ea:
a0:ba:87:5c:1b:83:bc:df:99:61:23:fa:06:e2:99:a4:9c:76:
a4:44:ee:d6:bf:58:8e:fc:c6:93:08:25:c3:d4:b7:b4:d6:87:
7d:e2:3f:03:f3:98:aa:14:3f:8f:51:64:49:dd:8f:9c:90:a7:
80:56:a4:ca:22:2d:2b:13:24:0f:28:35:8e:d7:c9:1e:28:60:
79:bd:80:c6:b7:dd:41:24:74:e7:99:00:24:b8:a7:11:42:d1:
85:9f:3a:65:cd:e8:46:89:ff:5f:5b:fd:18:2e:2f:4a:29:42:
d8:15:f9:cd:01:cb:2c:74:da:fc:48:63:d7:d3:b8:55:eb:86:
83:0b:bc:90:bf:27:0a:25:3c:fe:1c:5d:28:fc:7c:37:1c:d6:
e3:b6:ff:fd:f4:75:82:ab:f0:60:1f:da:35:78:d8:a1:bb:55:
5d:7e:9d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:53:12 2025 by rpki-client