
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
File: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft (raw, json)
Hash identifier: rAAzYdtD5EpeIfpYRV+sdmo8O3/kYjlG9Bi8z36v+RE=
Subject key identifier: 26:88:4A:89:68:6A:BC:6C:7D:7E:BF:CE:66:AB:29:24:1F:3D:85:72
Authority key identifier: D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
Certificate issuer: /CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Certificate serial: 0196CACE89A189920032DFE3B4753C3D015F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
Manifest number: 14CC
Signing time: Tue 13 May 2025 18:00:55 +0000
Manifest this update: Tue 13 May 2025 18:00:55 +0000
Manifest next update: Wed 14 May 2025 18:00:55 +0000
Files and hashes: 1: 2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl (hash: frtT02XG+Q98CLLGvRRheLhSG+Xe5oVSbKIXjyQmMYI=)
2: gd86nab0qf28eq3d5pPFq5e9rZo.roa (hash: OleM9BzJjHgCcSMlxVVC1tH0LyJmqbhh/CO/g3APccs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:ce:89:a1:89:92:00:32:df:e3:b4:75:3c:3d:01:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d881e5777cce990c0b2b0f4c29cc8d2cf9afe83b
Validity
Not Before: May 13 18:00:55 2025 GMT
Not After : May 14 18:00:55 2025 GMT
Subject: CN=26884a89686abc6c7d7ebfce66ab29241f3d8572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:f3:c3:94:10:ed:bc:a0:17:08:7a:01:83:
43:ce:52:ce:5e:85:5c:b1:85:a5:33:f3:43:18:74:
ce:83:99:62:7e:e8:8c:c2:a9:e2:1e:3c:9c:fc:fa:
95:8c:e4:fe:4f:b1:ea:34:b3:62:11:f8:16:1a:81:
0e:5d:6a:b6:b7:76:d3:f6:6a:be:6b:88:6d:7d:ea:
ac:19:76:78:b1:39:ca:6c:6e:a3:79:e0:16:fe:07:
b1:45:72:f9:e8:d7:0e:b1:8d:64:d9:dd:49:18:48:
8e:4a:d9:b7:38:eb:ba:09:5d:d7:2a:e7:f6:4f:03:
80:68:14:fb:4a:be:dc:09:82:29:b9:79:4d:15:8b:
33:71:0b:eb:57:61:04:f7:65:e9:f8:f2:98:74:19:
f9:9d:b8:a6:cb:dd:37:00:86:c9:74:6f:2b:ec:83:
59:72:06:10:d6:2e:3b:d6:3f:cb:25:a5:14:33:01:
4c:2a:0a:73:01:0e:4e:3f:04:d9:cb:f9:cc:5c:26:
dd:f3:cf:34:de:66:04:31:f3:58:e4:ac:e2:f0:2a:
24:95:f2:8b:a5:6f:fd:1f:70:cc:88:18:b8:39:3a:
8d:bb:61:bf:e0:6e:89:c6:48:17:4e:0d:80:90:5c:
16:e7:59:82:61:28:b4:ef:bb:2f:d7:85:96:74:75:
47:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:88:4A:89:68:6A:BC:6C:7D:7E:BF:CE:66:AB:29:24:1F:3D:85:72
X509v3 Authority Key Identifier:
keyid:D8:81:E5:77:7C:CE:99:0C:0B:2B:0F:4C:29:CC:8D:2C:F9:AF:E8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IHld3zOmQwLKw9MKcyNLPmv6Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3c95f3-dc3d-48eb-b6d7-d835de08bcf6/1/2IHld3zOmQwLKw9MKcyNLPmv6Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f8:d9:a4:1c:09:dd:26:91:5a:aa:93:ed:ce:4d:ff:72:e7:
f5:8d:c7:91:6e:b0:e9:0f:c9:04:c5:ea:e9:28:05:55:86:18:
af:69:50:b3:24:e4:cc:38:6d:d2:99:e8:1c:0e:b7:34:87:27:
76:ff:d7:fe:9d:36:55:16:2d:05:5a:47:24:bc:c2:cd:c8:cd:
00:83:53:1f:97:3c:bc:c6:a2:19:37:83:5a:aa:3f:34:65:00:
9d:8f:58:7e:26:0f:7c:61:0e:6c:8f:12:6f:53:2e:18:30:9e:
15:4a:0f:be:46:16:0e:f6:4d:a6:c6:1b:c3:6d:33:35:a9:9a:
5c:77:c4:96:a6:d2:69:07:a9:5f:6e:ab:85:e9:a9:c6:6d:a8:
4e:2f:28:f9:cd:b5:da:f7:05:82:5b:4b:85:0d:3b:94:8f:41:
79:9b:97:b5:6e:69:eb:95:28:44:56:70:4d:82:63:0d:1a:66:
2a:33:c3:f7:8f:f2:c4:f8:28:98:7f:ec:8d:b3:2f:55:7f:2b:
6e:2d:9f:94:37:e6:0d:9e:f3:ac:ee:88:93:73:0f:fe:80:19:
dc:e5:21:b0:89:e1:5c:c8:c2:24:ee:89:53:32:39:7c:ef:88:
fb:b7:07:69:b5:a2:41:f5:f9:e0:c3:3f:b7:11:62:ea:c4:22:
08:64:6f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:03:16 2025 by rpki-client