Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
File: 2okNBdXIi33m9bqkwdCF_nMB9dU.mft (raw, json)
Hash identifier: MrMjCaaYtr9SMzY2hAq3zy6cY2+wXVXwhwjJHD2tJTo=
Subject key identifier: 14:8A:CA:97:DD:7F:3E:EE:3C:B4:50:61:01:76:9F:2D:D9:0B:63:DA
Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Certificate serial: 0196D852EB0A60B6A23E416944AB602EE03E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
Manifest number: 0999
Signing time: Fri 16 May 2025 09:00:34 +0000
Manifest this update: Fri 16 May 2025 09:00:34 +0000
Manifest next update: Sat 17 May 2025 09:00:34 +0000
Files and hashes: 1: 2okNBdXIi33m9bqkwdCF_nMB9dU.crl (hash: wherdSU3svJbjE7I2F6tGgUWhqzIdOdq2oXA37M8RrA=)
2: empYwKrx4ABahFY0k2CZXZft5Pg.roa (hash: lQyRrUFjZRPH9Yib0Mwz+z/3ALSf5u0tcJRbBn2hjqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:52:eb:0a:60:b6:a2:3e:41:69:44:ab:60:2e:e0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Validity
Not Before: May 16 09:00:34 2025 GMT
Not After : May 17 09:00:34 2025 GMT
Subject: CN=148aca97dd7f3eee3cb4506101769f2dd90b63da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:aa:d6:72:bf:d6:80:4d:3a:a1:49:d0:80:
2a:ef:7e:6f:47:de:7e:4a:56:6f:b2:2e:8f:f9:17:
f9:b0:1e:ca:2b:3f:cd:99:a2:51:36:39:8f:df:0b:
05:13:48:5e:f0:55:2d:be:ab:b9:35:23:dd:fe:86:
36:ff:7b:f9:ed:86:f8:7a:ee:06:ac:f2:34:9f:33:
3c:75:94:6d:32:41:5c:15:78:02:50:cc:35:90:60:
46:c9:01:84:04:59:d8:1a:72:ed:5b:33:64:0c:dd:
b5:3a:af:0b:f7:b7:a6:dd:1c:5d:27:61:7d:53:be:
15:d3:ee:ad:a1:e9:4b:a7:3c:01:78:fd:c4:6e:fd:
3c:3d:f9:0e:93:b4:dc:05:74:09:09:90:ed:76:17:
dc:ef:97:69:e7:02:02:c9:45:8b:92:09:3a:6a:f3:
f8:42:7c:5d:dc:46:f2:92:ea:ca:ff:9b:4a:3e:45:
fc:df:13:af:63:65:68:f1:7e:04:8b:32:5d:d3:df:
95:bf:a0:64:60:a4:4a:3f:c6:a3:21:69:69:90:a8:
42:ef:65:8a:cf:b7:3e:56:a8:8c:4b:3d:68:4f:c0:
12:e4:12:c9:e2:c0:8d:54:a8:1a:1d:24:fd:bf:f6:
bd:e3:af:a0:af:5a:cb:9f:a3:a9:5f:be:94:fb:cd:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8A:CA:97:DD:7F:3E:EE:3C:B4:50:61:01:76:9F:2D:D9:0B:63:DA
X509v3 Authority Key Identifier:
keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:41:0e:86:10:20:79:97:0e:7e:5f:3e:c3:e2:09:07:0e:7a:
d9:26:6d:c3:2e:44:79:72:a5:52:7b:7a:e6:ac:a1:d7:12:50:
ac:4f:29:8c:ad:3b:9f:e1:fd:86:6f:20:b5:8d:19:2c:c2:59:
16:85:c9:e4:9e:33:08:ab:37:01:de:e1:58:75:64:e8:bb:fb:
fe:0b:18:4e:20:36:6d:68:ec:e1:98:50:ad:ea:2c:ec:1d:4e:
91:bb:74:a7:84:05:dc:18:3f:9b:22:94:8a:79:16:68:c0:b2:
8e:4d:ac:96:54:03:75:cc:6d:fc:40:62:7d:25:f4:89:74:af:
00:29:d9:65:58:a1:fb:d9:b6:51:60:87:75:ad:1a:c2:ed:3c:
57:c0:fb:f5:9d:c0:e3:8d:4f:c3:26:c3:fe:2f:4b:1d:e6:fb:
94:d9:70:09:b9:7e:bb:47:34:a5:1d:1d:ce:64:98:aa:ef:d9:
a0:d1:af:64:f6:b8:ed:f2:0f:21:e3:04:08:46:a7:6e:20:9b:
aa:e5:d6:e3:11:07:26:6a:a0:6a:86:65:67:f8:de:0a:64:d7:
dc:56:3a:3f:01:9d:49:f3:a2:34:6a:0b:ff:0c:24:92:c6:ab:
c1:f0:43:b9:bc:25:11:85:59:0a:92:b3:e4:ca:ee:47:8c:7c:
e1:28:cb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 13:19:11 2025 by rpki-client