Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
File: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft (raw, json)
Hash identifier: T3tlIjRoSG7EQIDyApOHqH6naQJwA7Qm+D5U4K0IZKo=
Subject key identifier: 17:B3:14:4C:E9:51:AB:4A:7F:CF:51:D3:C8:25:56:5D:A6:66:1F:DB
Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096
Certificate serial: 0196CF86D4F3E53BFB6B6A7B2CA3EBAC0ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
Manifest number: 0A3D
Signing time: Wed 14 May 2025 16:00:42 +0000
Manifest this update: Wed 14 May 2025 16:00:42 +0000
Manifest next update: Thu 15 May 2025 16:00:42 +0000
Files and hashes: 1: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl (hash: 8PZG8zlN2f+BY7ZbNnfMPbdQCK+wIJdoG6auR8PReP0=)
2: 73kskguN1VPO4tq3u0I-6VPbcl8.roa (hash: IOUFc++3ERmMqSZYKktHNh8ojKEPsIX8mty7/JMNR8c=)
3: pwFLoSIf9VUbET6QAXvLZY5rPr0.roa (hash: va4qzagh1XVOL80SDuYlOL0AHUwEGtmHAcyNr2+1pWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:86:d4:f3:e5:3b:fb:6b:6a:7b:2c:a3:eb:ac:0a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096
Validity
Not Before: May 14 16:00:42 2025 GMT
Not After : May 15 16:00:42 2025 GMT
Subject: CN=17b3144ce951ab4a7fcf51d3c825565da6661fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:41:c8:ff:9f:f7:f6:0f:47:aa:ce:0f:14:
66:15:0f:d0:e0:f6:c2:e0:12:d4:f1:92:57:e9:02:
0a:d3:16:23:b7:8d:30:a6:94:5a:5a:13:9a:57:c6:
0a:5a:d1:a2:d1:ac:54:0e:ad:01:50:96:03:20:20:
3f:c3:69:6f:c1:21:a9:91:c2:22:29:7c:b4:e8:ac:
24:61:d1:15:5c:5e:e9:3d:12:0c:6f:cc:27:af:26:
fe:66:0d:4f:71:71:b4:a2:c1:a5:1a:e1:ea:4e:1e:
51:e7:8e:61:eb:a3:15:dc:ce:59:78:db:ce:81:d1:
3a:1a:99:3d:02:34:8e:86:78:53:57:e1:28:ec:0a:
2b:2c:c3:ac:39:b6:99:bf:7f:57:73:b8:4d:08:a0:
02:60:78:bc:66:65:68:26:90:cd:31:da:0f:a7:51:
60:ef:ce:99:80:5c:1c:b3:cc:96:1a:a0:eb:2c:43:
4a:1e:da:e2:cf:0d:d8:2e:a0:f7:fe:3a:9c:f2:ce:
ba:fb:f9:98:f4:6e:9f:b8:6d:dc:8e:2f:d1:24:0e:
9a:33:e9:50:59:07:cd:33:eb:aa:7c:0d:27:da:a2:
e9:00:e0:6a:23:e3:c3:01:5b:71:46:8c:8b:81:37:
c7:db:84:5c:c2:af:e1:17:85:aa:b2:d7:31:3f:ad:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B3:14:4C:E9:51:AB:4A:7F:CF:51:D3:C8:25:56:5D:A6:66:1F:DB
X509v3 Authority Key Identifier:
keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:14:b6:dc:14:de:67:70:6c:bc:cb:69:f4:2a:13:97:35:15:
c4:12:3c:ce:50:a4:70:e1:36:37:36:c0:0f:91:04:b9:b3:f2:
85:32:50:b4:7c:75:b8:b1:f5:0a:06:40:48:d4:52:b2:31:37:
1e:18:70:88:c0:2d:37:aa:c1:e6:f3:9b:5d:07:18:ac:15:8a:
dd:9a:e1:06:01:17:01:f0:74:7c:6c:c3:32:a5:9e:d5:67:3f:
76:6c:19:02:a6:16:bd:e0:ec:de:2e:c7:9d:a7:6c:b1:8f:63:
9e:77:ea:ae:b3:a0:1a:84:11:16:74:f4:01:82:2e:33:e3:07:
56:65:8f:f4:0e:ae:aa:5c:39:bf:93:38:8f:5d:6f:95:12:32:
cb:6c:83:d2:e2:c6:ac:c8:4f:ba:a3:75:19:17:28:33:a1:83:
cf:6f:e1:a5:83:23:ec:65:fd:59:05:cb:ab:d3:12:81:e9:d2:
af:69:23:b3:ff:b4:6d:a7:ef:79:e0:1c:18:d6:43:c7:72:7e:
ae:2c:04:12:7d:c4:29:c3:00:3c:d3:b5:f1:54:b4:82:dd:76:
be:4a:f7:d3:02:30:2c:3b:63:d2:4b:72:e4:68:ae:b9:1a:d2:
4b:e7:d4:c3:82:88:f8:12:36:89:74:93:88:81:5f:78:71:b3:
cf:f4:a6:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbPhtTz5Tv7a2p7LKPrrArPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDU4OWRjZTYzOTgxODcwYTE4NTA5MDZjOGMyZDFkOTY3
NDAwOTYwHhcNMjUwNTE0MTYwMDQyWhcNMjUwNTE1MTYwMDQyWjAzMTEwLwYDVQQD
EygxN2IzMTQ0Y2U5NTFhYjRhN2ZjZjUxZDNjODI1NTY1ZGE2NjYxZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqRByP+f9/YPR6rODxRmFQ/Q4PbC
4BLU8ZJX6QIK0xYjt40wppRaWhOaV8YKWtGi0axUDq0BUJYDICA/w2lvwSGpkcIi
KXy06KwkYdEVXF7pPRIMb8wnryb+Zg1PcXG0osGlGuHqTh5R545h66MV3M5ZeNvO
gdE6Gpk9AjSOhnhTV+Eo7AorLMOsObaZv39Xc7hNCKACYHi8ZmVoJpDNMdoPp1Fg
786ZgFwcs8yWGqDrLENKHtrizw3YLqD3/jqc8s66+/mY9G6fuG3cji/RJA6aM+lQ
WQfNM+uqfA0n2qLpAOBqI+PDAVtxRoyLgTfH24Rcwq/hF4WqstcxP62M7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBezFEzpUatKf89R08glVl2mZh/bMB8GA1UdIwQY
MBaAFNoFidzmOYGHChhQkGyMLR2WdACWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82MzI2YmItYmEzMy00MzM5LWI4YzYt
MTRlM2MyMDE3OTY5LzEvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82MzI2YmItYmEzMy00MzM5LWI4YzYtMTRlM2MyMDE3OTY5
LzEvMmdXSjNPWTVnWWNLR0ZDUWJJd3RIWlowQUpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhS23BTe
Z3BsvMtp9CoTlzUVxBI8zlCkcOE2NzbAD5EEubPyhTJQtHx1uLH1CgZASNRSsjE3
HhhwiMAtN6rB5vObXQcYrBWK3ZrhBgEXAfB0fGzDMqWe1Wc/dmwZAqYWveDs3i7H
nadssY9jnnfqrrOgGoQRFnT0AYIuM+MHVmWP9A6uqlw5v5M4j11vlRIyy2yD0uLG
rMhPuqN1GRcoM6GDz2/hpYMj7GX9WQXLq9MSgenSr2kjs/+0bafveeAcGNZDx3J+
riwEEn3EKcMAPNO18VS0gt12vkr30wIwLDtj0kty5GiuuRrSS+fUw4KI+BI2iXST
iIFfeHGzz/SmhQ==
-----END CERTIFICATE-----
Generated at Thu May 15 00:16:53 2025 by rpki-client