Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
File: 2n1fyh5GmSnUqLb1evPLzcY5o14.mft (raw, json)
Hash identifier: C+kZComhxEx3tudD0+WowECaZDBSz42nkP4LpMZas2s=
Subject key identifier: 69:19:CF:32:3E:92:86:D7:FD:D1:3E:F3:C8:3C:48:A8:60:A9:F1:FA
Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Certificate serial: 0196B3A1873B56077F4292EE6690D353D08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
Manifest number: 019D
Signing time: Fri 09 May 2025 06:00:29 +0000
Manifest this update: Fri 09 May 2025 06:00:29 +0000
Manifest next update: Sat 10 May 2025 06:00:29 +0000
Files and hashes: 1: 0hXs769ouX7ZtQTTiOLlFP8mh8M.roa (hash: MgGCpokd8fHgthtlPirKAzSDRHQrtYokNuVt7GJrmes=)
2: 2n1fyh5GmSnUqLb1evPLzcY5o14.crl (hash: QiOIq1zsukS2muoO+NrW6U0nZqp7ACOoXVD0GTOHMsg=)
3: IaGPCdtFo7YJnFhk0N9F9EeLT9Q.roa (hash: TIaLTE20N+Zb0MJFSwKsXKIcPMWOp3mDxoElESAnpSc=)
4: rE3YGSYa3-bNZwq4ObURWaa3KnA.roa (hash: F8J3J+O4LkFYMHHtAnSrkI4AkbqzBr4SRDcT8pExP58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:a1:87:3b:56:07:7f:42:92:ee:66:90:d3:53:d0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Validity
Not Before: May 9 06:00:29 2025 GMT
Not After : May 10 06:00:29 2025 GMT
Subject: CN=6919cf323e9286d7fdd13ef3c83c48a860a9f1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:75:c1:62:91:a5:3e:bf:e2:ce:18:b7:f3:
82:95:6e:8e:7a:a4:50:f9:79:13:9b:9d:9f:81:b0:
6a:47:41:a9:54:11:c4:08:36:3b:b5:ca:c8:a7:1c:
73:8b:1f:9a:6c:f1:f6:2c:8e:e3:fb:21:1a:51:5e:
0a:f8:4f:f4:64:0d:00:cb:7d:e4:43:0e:1f:ae:c6:
01:8e:8a:a6:a4:6b:17:b9:43:a5:b7:d9:c9:92:24:
79:e5:cd:f3:84:5a:21:0e:90:30:10:d2:0d:3e:4c:
ae:10:87:fc:93:0b:23:21:38:f0:bf:43:c1:69:97:
fb:bd:89:12:7f:cf:66:81:ce:d0:5a:9f:7c:c5:b0:
4a:e3:21:64:cc:c7:90:c0:d0:8b:6d:95:e0:c6:7c:
b1:c3:c2:c7:ca:f0:01:dc:3d:10:95:6a:ff:19:92:
4e:40:5a:39:28:5e:c9:de:32:79:44:fc:16:d6:37:
34:c8:a2:78:64:e6:dd:93:9b:35:29:9b:b6:d3:cc:
d3:52:eb:51:d9:5a:3d:1f:7a:25:00:d1:08:42:1d:
cd:22:60:85:1c:6b:2f:2a:e2:99:97:27:e4:46:ab:
74:8a:c4:46:51:c5:22:0f:53:9b:f6:a3:ee:6c:b5:
7d:37:77:ed:e4:ac:0d:ad:3b:09:30:af:b8:c0:66:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:19:CF:32:3E:92:86:D7:FD:D1:3E:F3:C8:3C:48:A8:60:A9:F1:FA
X509v3 Authority Key Identifier:
keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4a:c2:4d:4f:9f:fe:70:49:2a:ab:2c:a8:38:e8:ef:1b:77:
9f:45:df:c2:8e:9d:dd:e4:9d:96:68:b0:8d:05:b6:40:b6:34:
dc:3b:cd:a2:7b:64:e0:01:42:8f:1d:37:e4:a8:a6:fc:45:e2:
a2:4f:8b:05:76:79:f9:27:82:84:de:69:6c:09:ba:9a:73:52:
eb:4f:ee:8f:54:86:11:23:d4:81:44:3f:45:78:22:44:06:c3:
bd:8d:2b:c4:05:dd:cc:35:d6:3e:3a:b4:2e:49:0e:bf:a2:97:
04:34:e3:ef:7d:4e:b0:4e:c8:5e:8c:37:29:98:4f:b8:74:f5:
8f:41:8a:ee:e2:8b:7f:6c:0b:b6:a1:e1:69:84:0e:7c:62:23:
ed:8d:42:47:4b:2c:f4:d8:e5:16:c2:d6:f4:02:c5:fe:f0:f8:
45:1d:94:f3:02:6a:35:ee:f1:44:29:e5:a1:4d:7a:05:eb:1c:
50:98:b9:d0:95:a1:c2:3d:69:6d:f1:e6:27:b3:f3:9e:b1:fc:
d6:36:ab:c6:10:c4:d6:19:21:9d:0a:01:68:f2:49:f0:00:80:
df:60:65:64:e7:7f:99:fa:77:5a:b0:a7:7a:5b:a5:56:88:41:
b8:04:3d:8f:6d:c5:02:3c:bb:55:10:81:f9:be:fa:55:b0:ad:
d0:73:4a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:10:33 2025 by rpki-client