
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: 9t1XYqMMpsfGhe+bEMO+LyWk1YrHitHjTekw4Z7mGb0=
Subject key identifier: 8E:57:88:BE:17:A7:A5:E0:14:A1:42:7E:54:28:C7:E2:11:7A:5C:60
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 0196A0F6A3C6CF765EEAFEC5617566BC9900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 15:00:40 +0000
Manifest this update: Mon 05 May 2025 15:00:40 +0000
Manifest next update: Tue 06 May 2025 15:00:40 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: sQ5aKNFiIi2dh5IZ/WXceqqs+pCbJ22C0e8+ODDwKPw=)
2: KSXGFVryamNuJ9tAvX5j45q0288.roa (hash: oHHWqrdumFHTbledjPfN55zOWOewwfVZnbPoUEcTtJo=)
3: b_Hf4C7DHqDvU3rPrk8yR1EVzMk.roa (hash: B0oNiXflIFSUREkZoOMdxw9fvdV4h0sgQd5bJTkzRM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:a3:c6:cf:76:5e:ea:fe:c5:61:75:66:bc:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: May 5 15:00:40 2025 GMT
Not After : May 6 15:00:40 2025 GMT
Subject: CN=8e5788be17a7a5e014a1427e5428c7e2117a5c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:e8:2f:9a:71:aa:b6:d2:ef:d4:74:db:80:
c9:f5:d8:0a:6b:24:9a:63:75:7a:b4:e7:e0:b7:d0:
43:17:83:2a:7e:32:ca:b4:03:94:71:5f:43:7e:92:
dc:2d:c9:fb:81:95:3e:00:6e:ae:92:f4:a9:8d:09:
a0:e8:c9:de:2d:56:71:24:9b:ed:bb:00:85:2a:c1:
c4:6a:cc:ea:2c:cb:1e:69:55:0c:aa:24:2f:54:80:
27:b5:50:4c:65:47:44:38:69:30:52:8c:e3:c9:df:
39:f6:39:8b:de:b3:df:a6:60:6a:56:fa:32:dd:c1:
88:5f:b0:9d:8f:bd:08:83:ef:bb:81:49:0b:96:ad:
8b:6a:96:d6:01:1a:a7:dd:51:ab:24:3d:f7:f0:cf:
3b:54:82:a5:a3:cf:cb:13:36:8e:d9:78:d4:d9:69:
9b:1f:4b:14:cc:d1:d8:74:50:55:9a:16:78:1d:f6:
b9:06:e8:38:e8:78:13:ef:d3:88:eb:3c:a2:a4:a4:
bc:ee:bb:ec:5d:51:8f:7f:3d:e3:25:3f:79:5c:57:
8c:13:1f:cf:8b:bb:81:b1:d9:82:c6:2c:2a:3e:68:
28:c8:a6:a5:c2:ef:04:45:66:35:96:ca:c1:50:59:
7a:2c:04:1a:c8:c3:6d:96:9b:17:e4:45:44:08:06:
59:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:57:88:BE:17:A7:A5:E0:14:A1:42:7E:54:28:C7:E2:11:7A:5C:60
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2a:79:30:fa:88:b0:c5:a6:2b:1b:94:ac:32:5f:7e:29:94:
cc:03:dc:13:0d:e7:87:b0:19:33:70:ae:81:63:39:fd:22:32:
d8:be:22:03:98:b7:9d:08:3a:43:8a:9b:85:b6:db:d2:2b:15:
9f:7e:48:a4:08:26:1b:ef:ad:1c:1e:87:52:40:a4:86:94:6c:
d3:ba:2d:15:32:69:79:63:f3:5c:53:ec:18:54:1b:d1:49:f6:
eb:7f:30:be:d0:4e:40:e9:fd:29:7b:5d:8f:d0:4d:cc:75:bb:
85:f0:8a:cf:aa:a0:ed:b0:b1:9d:bb:e3:7e:9d:c2:1a:9e:50:
f1:2d:11:ff:82:e3:81:2c:2f:e1:c7:72:6e:0b:00:a1:1b:81:
45:67:a2:d2:20:d7:f9:03:fa:1c:77:c7:9f:bb:c6:97:95:d0:
e8:cd:f1:77:77:41:44:d8:96:18:17:34:18:3f:24:c4:39:3b:
f4:a8:b8:c4:3b:5f:1f:d6:fc:02:fd:69:27:17:dc:fd:ba:da:
9a:73:3a:14:16:28:d9:62:3a:6c:e9:81:06:33:11:31:c4:c1:
10:83:82:f9:77:ee:4a:2d:0e:2b:36:20:56:94:b3:9f:e7:77:
1d:d1:78:c1:22:0f:66:4c:e8:b9:76:09:8f:df:7a:49:7e:3d:
c1:64:69:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:06:25 2025 by rpki-client