Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
File: 2JVh1yxrmEdwA-5iKJ_sVwweFng.mft (raw, json)
Hash identifier: sufi5FDo5cJztB5e3feXphCBx+XgzejCA6n1Al6GoI0=
Subject key identifier: 0D:DF:83:DD:81:1E:A1:8D:FB:3C:01:42:4F:9A:A6:25:02:4E:6B:89
Authority key identifier: D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
Certificate issuer: /CN=d89561d72c6b98477003ee62289fec570c1e1678
Certificate serial: 0196C01429CF57D6D4583EF3EDAF86EF8313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
Manifest number: 14C5
Signing time: Sun 11 May 2025 16:01:08 +0000
Manifest this update: Sun 11 May 2025 16:01:08 +0000
Manifest next update: Mon 12 May 2025 16:01:08 +0000
Files and hashes: 1: 2JVh1yxrmEdwA-5iKJ_sVwweFng.crl (hash: jJw810EFHl3+w/hOfpDeoeiiuOVmGIuzgrsAx4UtFu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:14:29:cf:57:d6:d4:58:3e:f3:ed:af:86:ef:83:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89561d72c6b98477003ee62289fec570c1e1678
Validity
Not Before: May 11 16:01:08 2025 GMT
Not After : May 12 16:01:08 2025 GMT
Subject: CN=0ddf83dd811ea18dfb3c01424f9aa625024e6b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6b:d2:8e:59:a0:ee:5e:9e:b8:1b:81:e9:6a:
d1:66:cb:76:62:a3:27:9a:51:71:f4:0f:62:90:18:
f7:ab:e1:7a:82:a3:f2:72:37:3a:18:7e:22:1b:9d:
0e:23:2c:79:65:a9:41:c7:93:4d:8b:8f:69:8e:ba:
3b:0a:31:22:52:fd:fa:03:2c:e2:7e:1a:12:08:d2:
52:23:d8:ed:b4:5a:64:78:c3:ac:6d:15:15:bc:c6:
a8:f7:3c:e3:f4:d5:7c:68:f8:4c:d1:f6:2a:6b:4d:
01:68:e3:da:81:43:bb:16:58:f7:be:ef:42:47:9a:
13:28:e5:7d:b4:ad:6d:11:c0:b9:61:fc:73:f6:36:
97:31:b1:74:ff:0c:fa:9c:50:f9:01:04:14:7d:f9:
2b:2a:38:c6:d0:0d:0a:07:66:de:94:70:51:46:6b:
94:de:00:23:07:b8:99:fc:c2:45:98:9d:71:cb:63:
59:5c:01:54:77:bb:bf:cd:49:a6:28:26:0d:fb:ca:
e7:2b:2e:f1:9c:62:e2:09:0b:07:f8:c6:83:ec:67:
71:5a:33:2d:82:76:e4:d6:f8:8b:fc:f2:9c:be:d9:
7e:c2:4f:48:1f:e2:14:f6:e6:79:90:a4:4a:49:14:
dc:9a:af:5d:3f:b4:ee:d9:59:84:3c:d7:27:e3:2b:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DF:83:DD:81:1E:A1:8D:FB:3C:01:42:4F:9A:A6:25:02:4E:6B:89
X509v3 Authority Key Identifier:
keyid:D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c8:6d:a2:c0:b3:06:48:58:43:9a:01:c6:ff:e8:e7:90:52:
e1:f4:59:4b:16:70:f7:05:85:72:53:c5:f3:1d:8a:22:5e:be:
36:12:68:64:21:46:ef:39:0c:cf:e6:2f:28:92:ed:d4:b2:d7:
34:ec:27:ea:90:30:9e:b1:5d:a5:99:97:0f:5c:b8:e8:2a:a4:
c2:22:52:3a:d3:a0:84:46:30:f1:fb:f6:7d:91:80:f1:11:3d:
51:cc:88:5f:ee:7a:1d:90:23:00:b7:eb:f8:16:4d:f8:34:90:
66:fe:7e:9e:a5:e5:33:6b:e2:04:e1:ef:80:f7:66:e0:13:3e:
f3:16:29:a8:95:24:e1:be:d4:36:95:95:e6:ce:aa:d5:3b:75:
34:cd:cb:a7:f4:a0:6f:8c:12:0e:de:ae:b1:12:f4:7e:6b:50:
73:38:30:e2:72:f4:52:15:4a:de:4c:c6:04:73:54:a8:bc:28:
65:ee:14:a3:d8:f1:14:94:61:58:57:d3:09:a6:fd:c4:f5:8f:
4a:38:94:5a:03:46:48:ff:3e:e0:71:b9:e4:93:b1:96:af:d0:
4b:49:31:68:48:a6:e3:16:35:89:6b:48:3f:0c:a2:cf:7c:27:
77:e6:35:50:1b:32:01:ba:01:56:d7:54:96:f0:c7:a7:47:e1:
50:43:b9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:58:13 2025 by rpki-client