Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
File: Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft (raw, json)
Hash identifier: 1e+ABDR+hzqzOswdETSm95VNkGQNkewlz4YFBjrFvWY=
Subject key identifier: EE:79:89:68:6C:AE:CE:E1:2E:E9:3E:DB:74:3C:32:FD:B0:8F:4E:78
Authority key identifier: 32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
Certificate issuer: /CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Certificate serial: 019640D52335D0A53F5E464B419E06B48C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
Manifest number: 0297
Signing time: Wed 16 Apr 2025 23:00:32 +0000
Manifest this update: Wed 16 Apr 2025 23:00:32 +0000
Manifest next update: Thu 17 Apr 2025 23:00:32 +0000
Files and hashes: 1: HuIbCcMZ3U5fal8WQko5r7hmFPE.roa (hash: gsiwtZ3Lpg7UUxzfKZ1xNGJGO5Bt4L0AcldZ67+uEoo=)
2: Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl (hash: LTD/RvE4YySTu8MGUB8Tkf6kqixFNJUmM2WRpbIq5vs=)
3: fY7PiVaNASL9YPra9k_iCHjE_QA.roa (hash: o0Z+yqTEUGOR+lt86tr/WH+kJG6LQkAy74XbI2VEuOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:d5:23:35:d0:a5:3f:5e:46:4b:41:9e:06:b4:8c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Validity
Not Before: Apr 16 23:00:32 2025 GMT
Not After : Apr 17 23:00:32 2025 GMT
Subject: CN=ee7989686caecee12ee93edb743c32fdb08f4e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:54:b3:8d:b6:d4:85:43:dd:f4:c6:0f:aa:
a3:0c:b1:59:03:df:b1:f1:ab:53:64:e0:ad:ce:7f:
02:41:04:ad:fa:0e:27:a4:e3:1f:8c:89:53:bb:c0:
14:9b:dc:e6:76:e2:56:c4:4b:46:a0:c3:aa:9d:93:
d7:92:c0:a1:46:38:5e:8d:de:d9:24:6d:b8:bf:38:
49:b9:5e:af:d5:de:1f:9c:f1:de:cf:f5:35:00:c3:
c2:9c:06:aa:63:af:41:cd:42:99:69:8c:b3:8b:14:
7b:4c:7d:4e:16:90:73:67:64:67:1a:ea:2d:93:96:
3f:2f:03:ec:9a:0c:d1:13:ff:5e:a7:ca:cf:cd:c8:
9e:51:90:48:e7:45:e7:c0:14:6f:6c:30:ad:5c:2a:
c8:40:e3:cd:f4:97:2f:f7:6b:1c:a8:17:b5:97:5d:
40:50:cb:6d:9f:61:13:9e:0c:b8:c5:a2:00:72:01:
22:f1:0e:b8:b7:2c:1d:5d:e1:cb:57:5d:cf:ea:f1:
ff:fc:32:50:7f:b3:52:c5:30:0d:54:0f:bb:a8:f4:
17:62:1f:88:12:a5:ea:39:cb:f4:24:48:67:0f:88:
04:89:99:a6:78:e0:a8:ea:64:e3:4d:f7:01:35:77:
52:a6:09:f8:ac:71:b3:f0:43:d3:ab:d9:0a:03:97:
a2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:79:89:68:6C:AE:CE:E1:2E:E9:3E:DB:74:3C:32:FD:B0:8F:4E:78
X509v3 Authority Key Identifier:
keyid:32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:77:d3:a4:cb:7d:6e:d5:71:4c:8d:0f:e6:e6:20:78:f5:77:
c8:e5:fd:9b:02:8e:cc:aa:8f:9f:e7:69:45:ec:0e:ec:cb:db:
d7:17:66:aa:b0:7b:d9:30:9e:19:23:17:45:70:7f:76:8b:83:
2b:3b:d3:0b:6f:9d:4d:e5:b9:3e:dc:c0:27:0d:d4:3a:d3:77:
5f:6c:7c:6b:85:46:f7:db:ef:4a:60:d1:c7:8d:c0:e2:9a:fe:
5c:7f:b9:b4:14:52:21:a3:ed:65:72:46:1f:5c:53:81:58:79:
b4:0e:41:72:c1:79:92:8b:41:5d:1e:37:42:8f:9d:f1:8b:af:
3d:41:74:d5:01:dc:bd:2a:9e:c0:78:ee:b4:ba:7a:8a:20:ee:
da:e6:dc:2f:dc:b7:93:62:b9:39:4d:7f:ef:cd:da:66:48:a7:
e7:55:08:8d:76:42:ba:5f:51:e7:a8:bb:1c:74:91:98:6a:5a:
13:68:83:61:8a:48:23:0a:72:49:a5:68:2a:dd:99:bb:db:2e:
ad:94:5e:b9:ee:8d:61:c9:7c:ab:ab:fd:cc:ea:a4:c2:66:22:
c7:d8:d2:dc:00:f1:e8:16:ce:bf:ca:01:db:2b:17:bf:99:47:
ab:3a:3a:37:74:35:a9:71:b0:b0:c5:aa:f2:eb:9e:56:db:56:
b4:74:b5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:57:14 2025 by rpki-client