Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
File: 0ubd2kDXglWe5l5Q-QjhaJplqAA.mft (raw, json)
Hash identifier: w6JC4YVtRmeGQV6CxEVVGvMt+HeEvMzLdz35iYGTH2w=
Subject key identifier: 07:78:13:AF:D9:86:FC:5A:7A:1A:94:5D:BF:1E:6B:F4:68:A5:30:2C
Authority key identifier: D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
Certificate issuer: /CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Certificate serial: 01969DF62A99EBE309AEA2B0A394D8FE485B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
Manifest number: 0A9B
Signing time: Mon 05 May 2025 01:01:17 +0000
Manifest this update: Mon 05 May 2025 01:01:17 +0000
Manifest next update: Tue 06 May 2025 01:01:17 +0000
Files and hashes: 1: 0ubd2kDXglWe5l5Q-QjhaJplqAA.crl (hash: H+9H9fnlvWTPCbK5UY/5ba7RIviH99qvkxcT2ZMZXp0=)
2: 2Bx_ZuBj3ywzIO5mlvk2Okv22hQ.roa (hash: guPg5C9izx8vPW7Ld4+sGxeIZUZPSLOzjQE1liVIecw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f6:2a:99:eb:e3:09:ae:a2:b0:a3:94:d8:fe:48:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Validity
Not Before: May 5 01:01:17 2025 GMT
Not After : May 6 01:01:17 2025 GMT
Subject: CN=077813afd986fc5a7a1a945dbf1e6bf468a5302c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:25:fa:f7:91:4d:44:75:b1:48:e1:64:ed:
20:3b:3f:0e:e8:0b:89:00:2c:cd:6b:eb:58:9f:86:
28:20:73:96:aa:ea:8c:3b:b7:b4:53:0d:62:e7:ca:
0c:08:f2:51:b7:34:16:28:41:ae:d1:95:68:1a:a4:
32:3d:54:a6:22:9b:f7:d7:ab:fd:16:16:8e:1c:a2:
c4:a5:85:d2:81:a1:e7:61:aa:03:a2:74:eb:b3:7f:
4d:b0:8a:2e:1c:c6:82:06:11:04:3b:73:8c:8c:10:
bc:2a:08:89:57:0b:b2:d0:08:ed:c8:61:3c:c4:9b:
3c:06:ad:0a:91:a5:25:71:a5:2c:ef:5d:40:6a:bd:
0c:6f:f3:0f:0f:33:02:f2:60:b1:ad:63:11:43:0f:
4a:63:c4:fd:06:2d:3e:43:c5:80:88:ac:cd:f9:cc:
d2:c7:57:f2:02:cc:93:fa:c6:0b:7f:59:06:11:a7:
ed:d7:4e:89:21:bd:1a:33:6b:57:c6:ef:c4:88:99:
19:7b:d6:18:3b:fc:dc:1a:ee:51:f5:18:e5:be:76:
27:2a:a1:50:b9:f0:1d:bd:5b:78:f6:ae:ec:d0:44:
db:2f:7f:77:e8:08:7f:42:44:65:d2:ca:05:41:e0:
9f:78:9a:d3:5f:54:b7:a6:24:96:a2:84:8f:9d:48:
54:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:78:13:AF:D9:86:FC:5A:7A:1A:94:5D:BF:1E:6B:F4:68:A5:30:2C
X509v3 Authority Key Identifier:
keyid:D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1c:39:32:34:11:47:4d:3a:69:8d:29:6e:e4:23:91:a2:bb:
b6:07:40:6e:a0:bf:b5:37:4f:e4:39:f5:98:06:e8:13:3c:6e:
9a:ef:06:6f:1d:ca:a3:0f:d7:cf:1e:6c:84:fe:a1:8c:48:ca:
63:0b:ae:b8:99:58:dd:23:40:c6:64:a5:3a:d4:66:45:fa:c5:
c8:b2:04:08:d5:2f:9b:5b:b1:8c:b4:5d:08:44:96:a9:7e:4d:
c4:78:3c:0b:7a:0e:c7:83:c4:ef:92:a2:0b:81:85:66:20:e0:
8b:4a:20:20:2c:71:b0:83:a3:62:e9:18:51:90:37:1e:61:5b:
3b:d2:e6:28:ac:eb:18:dd:95:99:e0:c9:26:48:59:d1:b6:6f:
93:c9:5e:7d:4c:df:03:b2:5c:06:8c:93:fd:aa:e2:67:5d:e7:
aa:d2:e0:ab:13:10:9a:61:fd:6d:7b:b4:d5:43:6e:c0:14:fa:
4d:8b:dd:82:0c:29:79:40:42:da:2a:0f:e8:d6:85:ee:ec:9c:
ec:2b:04:4c:f0:08:38:20:47:ba:b8:bd:40:1c:3c:6a:dd:87:
63:8c:40:4b:b8:1d:b9:eb:f2:b9:fe:88:c2:df:f5:2e:4d:0f:
e0:6b:84:03:4f:3c:cd:5a:a4:47:92:ae:d0:3e:93:7f:bb:11:
05:2a:3f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:15:08 2025 by rpki-client