
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: pFjbabNIrAj24K6a9rd7jRi8f6BZxwNuZQh+7AWX2T4=
Subject key identifier: 1F:90:6C:6F:D3:59:A0:66:33:29:C6:E1:B0:ED:B0:6B:64:A5:02:E2
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 0196AEB23077961A024ED73D11F2658D74D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 0484
Signing time: Thu 08 May 2025 07:00:35 +0000
Manifest this update: Thu 08 May 2025 07:00:35 +0000
Manifest next update: Fri 09 May 2025 07:00:35 +0000
Files and hashes: 1: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: mWWVx7+8nrrpHRCzPI2DMHPsxK5k981sFC3CAoXIpYQ=)
2: Ifc9NwWgW96DB3jfdAd1eRUTItQ.roa (hash: QwQYTZsG7IIaUp2W464uVveyT3Hy95wxA6B00yVfsE8=)
3: xswOfeFYQB8__QySjxBuBlaYjZE.roa (hash: UFudVerFpyGKspIudoEvuO5xASRkVerT3UxaZZDITQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:b2:30:77:96:1a:02:4e:d7:3d:11:f2:65:8d:74:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: May 8 07:00:35 2025 GMT
Not After : May 9 07:00:35 2025 GMT
Subject: CN=1f906c6fd359a0663329c6e1b0edb06b64a502e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f6:b6:70:a0:2d:c9:31:b6:a2:88:90:42:34:
ec:51:58:12:a4:b2:bd:e4:ec:a0:57:62:5f:7e:79:
29:02:f2:af:36:9f:15:2d:b3:b2:94:76:72:fe:14:
73:7b:a8:d7:7c:5f:d1:46:8f:79:46:89:39:f9:04:
01:db:fa:59:96:fc:9b:eb:94:38:a4:dd:18:03:38:
f2:79:b8:b2:5e:f9:b7:b9:29:bc:04:ca:17:74:a6:
38:7a:d3:86:a4:fd:ee:c4:d9:68:ae:5d:9d:7e:52:
48:33:11:67:f2:9e:2f:fc:88:67:22:e0:06:dc:fe:
fb:57:af:6a:2e:ce:7a:38:f5:e8:94:88:87:26:b0:
6a:10:8e:3c:a7:42:1d:93:63:50:8c:94:bc:91:f4:
cf:e0:dd:00:49:25:4e:36:6e:a2:01:a4:9e:9e:23:
84:3c:8b:89:e8:f4:07:b5:e3:12:4d:5f:77:0f:ff:
d0:bc:b5:5c:aa:36:b5:16:e3:b9:43:fc:f4:d1:e8:
f9:49:03:c0:f8:fc:65:83:c9:7d:2e:d5:b4:9d:9e:
87:e2:57:0b:03:b9:20:df:8c:f8:73:74:a9:38:dd:
4c:96:26:a8:7d:5c:79:67:9e:96:8e:9b:9a:b6:d4:
c9:3c:fd:90:6f:45:90:3d:d0:dd:5d:b5:63:b3:94:
12:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:90:6C:6F:D3:59:A0:66:33:29:C6:E1:B0:ED:B0:6B:64:A5:02:E2
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f4:3c:03:bf:1d:4b:fc:cb:90:d8:91:a9:c6:df:73:9b:50:
4f:43:e0:28:8e:bd:e9:a6:94:72:01:2f:6b:f2:4c:5b:a9:f8:
bf:4e:cd:b2:09:0e:2b:5e:f6:08:2f:9f:f4:42:41:07:06:f1:
2e:1c:a9:0d:bb:d1:80:15:cb:95:7f:36:1c:96:61:01:b8:43:
3a:82:21:0f:2f:87:4e:c5:3e:23:a6:d1:d7:53:bc:da:77:a0:
a4:7e:29:e5:d9:59:48:08:25:14:fd:b2:1a:ff:6c:93:39:81:
f5:22:b5:ec:df:e1:d1:ce:0a:21:1e:70:35:e0:a1:0c:6c:3c:
8e:7d:6e:f7:0e:5f:2e:41:56:fa:c0:b6:6a:b3:a6:54:f5:d1:
48:4b:8d:61:e9:1b:03:27:82:03:3f:1e:4e:9c:c5:e8:06:a2:
0e:6f:13:e2:a5:5d:fc:07:dc:96:1f:ea:b2:1f:59:fd:4e:97:
73:13:f4:7c:7d:26:8b:30:4e:ca:11:d1:87:bd:b8:84:fb:48:
fa:b0:5c:a0:25:e7:83:c6:5e:2d:7e:5d:52:24:43:28:af:61:
41:3b:56:35:51:d4:3d:64:5b:d5:5a:73:2f:29:91:46:a8:88:
3a:77:25:bf:b6:73:53:1f:a9:f6:29:c6:12:90:48:00:21:28:
c8:4c:a2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:04:06 2025 by rpki-client