Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
File: p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft (raw, json)
Hash identifier: 2FPW+n/D7tt0Z+dDy0Im37GBkC19pLUp7TqVUsuaLqk=
Subject key identifier: 82:8D:2A:CB:B0:4B:CB:AD:70:45:E8:5F:C4:7C:2B:8A:81:AB:7E:D9
Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Certificate serial: 01964D46DA5BF5ADD9DD4A1B2CE4953F8F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 09:00:11 +0000
Manifest this update: Sat 19 Apr 2025 09:00:11 +0000
Manifest next update: Sun 20 Apr 2025 09:00:11 +0000
Files and hashes: 1: I9i0WWS-frfVjqHawC8I642O_Mk.roa (hash: itGdqF9tI2l3tL7Dy0ty9ZBwR6g1Row8wxamV2kVAqE=)
2: p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl (hash: wIByz5T29cTUnuwzgLPnyWy/ZsOazAmLoEYB0+VUKso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 09:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:46:da:5b:f5:ad:d9:dd:4a:1b:2c:e4:95:3f:8f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Validity
Not Before: Apr 19 09:00:11 2025 GMT
Not After : Apr 20 09:00:11 2025 GMT
Subject: CN=828d2acbb04bcbad7045e85fc47c2b8a81ab7ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:7b:56:e8:d3:85:72:51:74:17:63:3f:d3:
e2:c7:2a:3a:9c:15:5f:df:a1:be:86:d9:c6:aa:83:
f4:2d:00:17:1a:3c:dd:16:b2:c7:a3:4f:37:15:ef:
a7:07:44:6d:f5:e7:68:cb:e6:e7:a7:57:b4:ab:4f:
f0:36:aa:f5:ff:33:34:2f:23:45:d1:68:ef:78:ef:
d1:d1:3e:c3:86:3a:80:c2:76:b8:1f:e5:c9:ed:67:
5b:a8:1b:17:91:15:22:2b:c6:f4:f0:08:cc:06:ac:
cf:32:95:8e:5c:08:cb:55:55:b7:f1:82:09:92:4c:
b4:f4:2f:5b:15:cb:7d:bf:b5:64:00:1f:c0:51:32:
6f:68:72:2d:0b:b5:13:6a:27:cf:f2:9b:c8:06:4a:
91:e6:5d:ef:36:f2:58:7c:27:2d:32:fc:7c:b6:42:
1d:ca:c7:53:51:8d:01:ea:0d:25:25:29:c0:5a:b2:
eb:26:83:37:da:7f:d5:4b:20:5e:b9:62:bd:ec:e2:
b1:2c:b6:cf:ed:9e:6a:6f:4b:b0:73:05:fc:14:7b:
23:0a:78:4b:09:a0:b2:22:6c:f6:28:75:57:3d:b5:
bc:f6:bc:05:1c:98:c4:cb:48:ce:82:ac:35:29:60:
73:89:56:82:85:5e:07:b4:11:8a:b6:6a:a2:8a:cb:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8D:2A:CB:B0:4B:CB:AD:70:45:E8:5F:C4:7C:2B:8A:81:AB:7E:D9
X509v3 Authority Key Identifier:
keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:02:5b:09:6a:b9:d4:59:fa:e5:a0:3d:56:8d:dc:0a:c1:d8:
31:03:e7:93:ac:8e:69:67:52:37:9b:f2:b2:31:0b:ee:15:e8:
46:3d:d0:79:f3:3a:d1:2f:9a:6d:d0:e3:e4:5e:7e:ee:37:7a:
3d:bc:d1:78:19:7d:bc:f7:22:38:d3:33:a0:27:5c:f1:af:07:
97:20:17:f3:e8:51:72:7f:92:3f:35:81:ca:78:6e:dc:b5:b9:
37:fb:5b:6e:2b:54:3f:bf:af:53:17:75:2d:14:ce:c9:83:c3:
0b:a1:4e:e1:7d:46:48:fb:13:9c:f9:da:27:23:fe:d4:df:8c:
2c:aa:7d:d9:0d:9a:e9:ce:cc:3b:9d:22:a2:2e:e5:fc:b6:62:
76:df:cf:9b:c0:06:f3:e5:4c:ce:0c:a5:9a:50:a3:5f:13:e9:
14:24:76:55:51:00:f1:4f:7d:31:14:98:10:a7:11:7d:7d:85:
5d:59:7c:fe:f9:a3:d7:11:fd:7f:b6:6a:4f:50:11:ba:f5:70:
45:e7:eb:bc:de:77:2c:d6:d4:ac:a3:dd:cd:67:e7:54:3e:67:
d7:74:a4:ce:03:f9:ad:31:e3:27:aa:d3:13:7f:96:24:c1:44:
04:17:cf:70:19:c9:88:c2:ea:47:e6:c1:b7:42:30:d5:97:c8:
92:79:ef:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:17:58 2025 by rpki-client