Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier: uGjKWScbCCaBBdwcOejF+7J2JMSzaObZy8p+Cgq0x7U=
Subject key identifier: 03:10:7C:63:70:51:D0:AF:DE:AA:D1:00:D5:D8:40:EF:26:05:51:6C
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 0196D88A03FF38FE122814BB07F365ED5526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number: 0417
Signing time: Fri 16 May 2025 10:00:45 +0000
Manifest this update: Fri 16 May 2025 10:00:45 +0000
Manifest next update: Sat 17 May 2025 10:00:45 +0000
Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: PrKTaCGwF2NWRWsU4j3v4KqqjxVpI8qEe9qKPzQic7w=)
2: Fx2klUP1BUQWSve4HaBQkpAiNyk.roa (hash: zJ2Tt9osikAXRixamoNp+QrAMtzbTSaAfE5Ta0gGans=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:8a:03:ff:38:fe:12:28:14:bb:07:f3:65:ed:55:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: May 16 10:00:45 2025 GMT
Not After : May 17 10:00:45 2025 GMT
Subject: CN=03107c637051d0afdeaad100d5d840ef2605516c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:9a:f2:04:b5:34:d4:cc:ef:6f:c0:ff:59:
68:6a:25:ba:71:4c:cd:5b:71:57:1b:98:00:f2:72:
34:45:60:96:20:cf:8c:8a:32:34:af:f3:8b:bb:be:
3e:12:df:cc:1f:b4:f6:da:8b:b7:b1:4d:c2:26:6c:
2b:66:60:a1:d2:fb:36:6c:e2:9a:67:db:8d:7d:2b:
56:25:fd:da:56:eb:eb:7e:b0:1f:02:a3:5f:94:2e:
46:90:89:29:ca:6d:bc:c1:8b:8f:a8:27:78:0b:be:
23:67:88:55:ab:3a:68:05:8c:18:23:be:69:5f:a5:
2f:c9:47:fd:03:f7:2f:87:bf:93:be:e9:27:9d:d7:
60:2e:d8:9f:03:e0:95:1e:3d:ea:0c:ff:c4:c7:2b:
de:b7:b0:c9:f1:01:f3:3d:b6:13:31:1b:0a:24:db:
44:d9:64:09:4a:cc:99:23:50:05:0d:bf:01:5f:32:
21:fa:f4:00:a8:c8:93:bc:4d:d7:e7:28:56:a8:96:
d3:25:63:e5:dd:ed:36:a8:1b:81:58:c7:3e:94:28:
38:29:43:8b:3e:25:70:f4:4d:d6:64:cc:07:e1:2f:
00:e5:69:14:21:6e:56:cb:65:16:9c:e7:ba:be:2f:
f9:aa:14:07:8b:97:a9:5b:27:86:4f:af:d2:8b:98:
f9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:10:7C:63:70:51:D0:AF:DE:AA:D1:00:D5:D8:40:EF:26:05:51:6C
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8e:72:e8:1e:53:9c:32:c8:16:c9:35:51:07:a5:c8:0e:12:
f5:64:6a:71:9e:92:00:0a:24:5d:8d:37:cc:1d:db:30:f4:9a:
c1:e0:32:27:0a:94:49:39:e6:0a:56:4a:3c:86:14:77:04:44:
1c:b3:75:6b:16:dc:bb:34:0b:09:98:7f:92:8e:1d:7b:66:74:
4d:3a:97:9a:74:e4:ba:e7:d4:90:90:04:64:99:5c:85:a6:a6:
63:71:79:20:33:9c:cb:e1:4c:9f:90:f0:c4:4f:64:30:b3:47:
45:a0:f7:43:e8:93:bd:d2:f0:c0:11:07:e6:16:9f:23:38:b0:
50:9f:e2:fa:2c:53:4e:75:b7:b7:d6:98:c5:fe:47:33:31:4e:
b9:53:fc:f0:5a:c7:a3:eb:dc:94:75:70:4a:11:ad:86:c9:ec:
31:6c:27:bb:da:25:d8:68:ff:b4:8e:87:ed:3a:29:9f:5d:f1:
b0:bf:b3:7e:57:55:57:49:25:d2:ec:54:23:90:e8:4d:28:a6:
a4:61:a0:00:8f:d5:a5:f9:d8:37:2f:28:bf:28:39:26:a2:d7:
4c:03:31:c3:2d:19:a5:52:0f:f3:83:31:b9:71:d2:1b:9d:ae:
7d:80:f4:ea:a2:a3:19:7a:f9:b7:e9:db:b9:72:a1:6c:19:26:
e4:25:82:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:15:49 2025 by rpki-client