Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
File: 2wpVo-1qrv-asCJTkXrJnRU3Amw.mft (raw, json)
Hash identifier: NXmbW0gIlng/o8O7KvPl1JMJHI0G+OQNxrw8HF4KoW8=
Subject key identifier: 7D:EF:F9:6A:C0:E4:3D:40:E3:C9:E3:20:30:D6:77:27:C5:D5:00:F1
Authority key identifier: DB:0A:55:A3:ED:6A:AE:FF:9A:B0:22:53:91:7A:C9:9D:15:37:02:6C
Certificate issuer: /CN=db0a55a3ed6aaeff9ab02253917ac99d1537026c
Certificate serial: 0196B96C7F0DA483D14576406107032FF2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wpVo-1qrv-asCJTkXrJnRU3Amw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
Manifest number: 149C
Signing time: Sat 10 May 2025 09:00:17 +0000
Manifest this update: Sat 10 May 2025 09:00:17 +0000
Manifest next update: Sun 11 May 2025 09:00:17 +0000
Files and hashes: 1: 2NIjgppmhuxRYrz3DLITLBRmQ5Y.roa (hash: pfK3DW+mhfPMlrHb+zKcoWL6SLQiJQcLNvXFegBqlig=)
2: 2wpVo-1qrv-asCJTkXrJnRU3Amw.crl (hash: lYm6rGVC7af/6MEhQMRxXEyuttJppSBlAd3/2/ZeyMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wpVo-1qrv-asCJTkXrJnRU3Amw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:7f:0d:a4:83:d1:45:76:40:61:07:03:2f:f2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0a55a3ed6aaeff9ab02253917ac99d1537026c
Validity
Not Before: May 10 09:00:17 2025 GMT
Not After : May 11 09:00:17 2025 GMT
Subject: CN=7deff96ac0e43d40e3c9e32030d67727c5d500f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:b9:df:d5:d5:ef:ee:86:cd:a8:b4:d4:c0:
36:89:1c:1d:88:6c:05:51:a4:d3:1a:d7:5e:00:9c:
b1:6a:42:87:87:7d:ea:e7:dd:90:e6:80:ac:13:aa:
92:d4:f6:63:a2:5b:99:15:b7:ee:53:21:ac:e3:d7:
6c:a1:4b:b9:4a:c8:1e:76:4a:22:36:42:59:fe:14:
3c:6c:cf:b6:1c:be:a1:53:54:31:44:6a:aa:8f:6c:
3d:d2:a1:76:05:c2:96:58:8e:6f:33:c8:f0:c4:0e:
0c:91:17:0e:de:0b:c4:60:40:f7:3c:23:9e:ac:98:
74:dd:c2:31:48:17:94:e6:34:b5:d7:7a:ab:fc:a4:
50:6a:40:74:d0:7f:e6:79:07:4a:15:5a:66:13:14:
1a:1b:22:57:bf:8e:87:20:14:63:7c:0b:82:33:c4:
7a:45:80:c0:03:d0:b0:03:09:0d:b7:30:ac:05:ba:
ad:67:78:64:ac:1e:1a:19:91:a5:4a:54:53:f8:c1:
ea:6a:15:45:ce:94:5a:e1:f7:1b:69:db:b3:56:f8:
97:92:d5:1f:19:2c:74:12:d9:36:c7:5e:90:29:8b:
39:df:b9:82:4e:5a:c5:29:42:77:b8:a9:b8:12:e6:
d7:e7:d2:e3:53:d3:cc:39:6b:ae:8a:5a:a5:f3:da:
0f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EF:F9:6A:C0:E4:3D:40:E3:C9:E3:20:30:D6:77:27:C5:D5:00:F1
X509v3 Authority Key Identifier:
keyid:DB:0A:55:A3:ED:6A:AE:FF:9A:B0:22:53:91:7A:C9:9D:15:37:02:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wpVo-1qrv-asCJTkXrJnRU3Amw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/136492-21de-4ab2-a436-88c2cd00848d/1/2wpVo-1qrv-asCJTkXrJnRU3Amw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fa:13:4e:36:d7:8a:b3:b4:84:60:92:a3:ae:3a:0c:d1:cd:
e6:3d:de:2c:ad:29:d7:79:de:8a:82:b5:44:30:a8:53:3d:40:
6f:b1:cc:56:ed:5b:53:4a:35:64:bb:4a:7b:a5:a9:71:aa:38:
88:78:76:c4:cf:25:7a:a7:23:42:03:81:4f:a8:5a:f5:ef:62:
25:05:90:b9:71:ae:34:67:04:6a:44:c8:25:21:1d:6f:f9:04:
38:be:cf:0c:c5:7f:81:66:d4:21:33:53:69:90:06:ec:5c:65:
25:47:bb:58:da:3c:1a:cf:b4:92:80:aa:c7:96:2c:55:d0:73:
65:4d:10:1a:40:a6:8c:f0:bb:75:de:85:1f:a0:34:d4:46:c1:
e9:47:32:5a:b3:32:d1:2f:b5:ee:99:56:52:0b:53:51:50:0d:
a6:3f:dd:cb:44:8c:bb:e6:68:1b:2b:24:c6:11:24:8e:fb:7e:
90:e7:15:83:3d:9a:12:1d:d8:8b:06:08:20:6f:94:bc:43:35:
1a:67:cd:e0:55:08:8c:c1:80:6c:8d:3e:c3:7e:50:1c:39:6e:
db:fb:9b:71:8b:cc:57:d4:fe:5b:7b:73:dc:90:45:b4:3b:0d:
24:a8:e1:4d:4a:19:3b:71:63:20:ab:fe:fa:1d:03:04:2b:ee:
ff:75:2d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:08:11 2025 by rpki-client