Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
File: 2REuiZOwC9orTpwCrFeDdACqxAQ.mft (raw, json)
Hash identifier: QCnR635EGGvUba+XKmZusH7Ra5NBptykvenRVPwhPs0=
Subject key identifier: 1E:A0:52:15:6F:A6:96:99:0C:56:7E:67:EE:EB:87:2A:95:C0:EA:06
Authority key identifier: D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
Certificate issuer: /CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Certificate serial: 0196586F79768DB2C04334CA770FA8352B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
Manifest number: 11AD
Signing time: Mon 21 Apr 2025 13:00:22 +0000
Manifest this update: Mon 21 Apr 2025 13:00:22 +0000
Manifest next update: Tue 22 Apr 2025 13:00:22 +0000
Files and hashes: 1: 2REuiZOwC9orTpwCrFeDdACqxAQ.crl (hash: J9VdbyTYkmUohiZ8Dt1XBzcYS6YJrqM9UoIUNrN+F8E=)
2: kIzUAPC0DdQ_FT2bfHdyL_f4yoU.roa (hash: rSGry/QGGACqFb/sa5t28CBZOiur+so7pmuHdYgh5Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:79:76:8d:b2:c0:43:34:ca:77:0f:a8:35:2b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9112e8993b00bda2b4e9c02ac57837400aac404
Validity
Not Before: Apr 21 13:00:22 2025 GMT
Not After : Apr 22 13:00:22 2025 GMT
Subject: CN=1ea052156fa696990c567e67eeeb872a95c0ea06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:13:df:51:16:93:34:b7:34:65:67:a1:4c:
de:2c:c0:28:23:e7:49:cb:33:ac:c1:8a:e4:56:09:
f4:e0:28:12:b6:62:36:8f:af:e9:8a:df:81:11:52:
53:e6:b1:c9:92:03:93:1a:9c:75:b2:a1:7e:6d:f5:
d2:d7:3f:98:80:de:eb:48:1c:2f:ef:f9:df:72:0e:
21:03:f0:be:61:c8:ef:64:71:b9:a6:a6:82:29:d8:
90:55:46:b0:70:2f:bc:c8:4b:1a:a9:e0:34:18:43:
49:6d:7c:d6:dd:9f:a7:4d:70:c5:b8:68:f7:7e:9f:
bf:51:53:4d:60:33:6a:c6:90:a6:20:4f:0b:13:63:
ad:c2:1d:0e:32:96:19:e9:4f:3d:52:3e:d8:71:aa:
3a:f3:5b:5c:10:9d:89:83:66:29:c6:ed:09:aa:ee:
97:c7:58:0a:a0:7d:09:44:b8:65:80:98:bf:3d:34:
41:27:6b:53:46:dc:29:47:07:12:5e:16:b7:77:2b:
db:d1:fb:1e:c5:ca:93:f9:3f:c8:d1:b9:ba:09:44:
ec:c4:20:0d:a1:34:d9:03:70:06:7c:a4:0b:12:e1:
6c:31:d5:57:1a:d9:df:c0:a8:a7:6b:96:5b:e0:7e:
d1:c5:83:8f:f3:cc:f7:3d:cd:a2:e2:a2:18:1e:a2:
e5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A0:52:15:6F:A6:96:99:0C:56:7E:67:EE:EB:87:2A:95:C0:EA:06
X509v3 Authority Key Identifier:
keyid:D9:11:2E:89:93:B0:0B:DA:2B:4E:9C:02:AC:57:83:74:00:AA:C4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2REuiZOwC9orTpwCrFeDdACqxAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6f9e8-4b75-44e4-a0d6-517a661ae6bd/1/2REuiZOwC9orTpwCrFeDdACqxAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:54:fc:9d:e0:b3:7f:e9:e5:e2:44:0f:11:be:a3:a3:6d:f6:
d3:eb:39:5b:d3:87:d9:c2:5f:b5:ba:cf:a7:ba:1b:82:2c:15:
18:74:ea:b2:bf:61:2f:43:32:f6:3f:f8:83:73:63:71:87:28:
da:6e:51:69:e7:4a:a9:5c:7a:2e:b8:4b:36:e9:12:a5:e3:e9:
8e:84:da:27:c2:13:18:57:f4:23:bb:8a:ba:12:aa:70:8e:47:
05:f1:33:99:c2:1b:45:54:9a:6d:35:7a:7d:cb:4c:a0:ce:f9:
3b:e2:57:d2:07:cb:75:9c:5f:4b:14:d7:f2:23:33:3e:7f:de:
23:11:25:4e:bf:be:f7:30:8c:3d:92:9f:3b:7d:9f:30:c9:e7:
aa:07:b4:dd:14:b9:54:15:d4:0f:2b:bb:b7:dd:d2:6c:ce:c6:
16:2c:e5:82:86:8f:bc:23:ef:f5:3d:14:67:44:cc:72:42:15:
12:c6:50:14:24:58:c2:4a:b9:7e:4f:f6:bb:c5:60:41:05:49:
90:db:49:42:6c:ff:5b:f2:64:62:58:8e:e7:4e:aa:a0:f2:28:
64:5a:74:27:5f:2b:92:c4:ec:f1:9d:5f:e7:00:b9:92:91:c4:
39:44:1c:04:f4:0a:fe:8e:0b:84:89:8a:42:c2:3e:db:88:b7:
6c:1a:7f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:08:13 2025 by rpki-client