Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: 4KAKdb20YyqhtlA+K6Vl+ZRUQRFog+IKYayGwbwhsdU=
Subject key identifier: 68:BB:C4:C4:06:B4:71:AE:FD:CE:B4:5B:29:A1:D3:5B:87:49:39:13
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 0196A4D36282348803C719B6B58A2F1B674A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 09:00:38 +0000
Manifest this update: Tue 06 May 2025 09:00:38 +0000
Manifest next update: Wed 07 May 2025 09:00:38 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: UF3EUtp/J8fPYTwYwiNrGukdtUcjR0efRfsV/2aIArs=)
2: 5c-0w6aFahfL-9fnU28RGSFRCeo.roa (hash: uG2DdbIC28vTwSXsN9nSmrj1NKOJXIqHJC912h/GU2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:d3:62:82:34:88:03:c7:19:b6:b5:8a:2f:1b:67:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: May 6 09:00:38 2025 GMT
Not After : May 7 09:00:38 2025 GMT
Subject: CN=68bbc4c406b471aefdceb45b29a1d35b87493913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c6:de:ac:1e:29:4f:a3:4c:d4:29:c1:09:72:
09:87:2b:4d:b7:04:7b:c3:c3:6f:25:bc:ba:85:ec:
1c:3e:97:ca:e6:9e:a9:16:18:3f:38:d1:90:81:b5:
2b:1c:ad:24:8f:ef:b6:d2:da:02:fb:1f:71:64:ef:
2e:35:d0:3f:41:0c:7d:a0:a8:18:4e:f4:2a:80:0b:
14:6f:7c:7a:0e:e1:c9:f6:21:5b:a1:73:e1:82:af:
be:31:d6:bc:7f:5a:76:82:ab:db:d5:2d:6b:a8:95:
9e:4e:f3:0c:24:77:07:eb:e1:27:86:a2:9f:93:a8:
bb:80:46:68:d1:c0:a3:98:ba:81:fa:b9:a6:bd:83:
c3:09:73:dc:5c:e7:a9:4e:1c:9c:03:11:bc:0e:ca:
c6:d4:6d:54:a8:72:01:59:44:a0:c2:36:06:82:d2:
76:3d:ec:6c:a4:86:2c:45:8a:91:97:75:af:6a:86:
e9:c5:8d:9f:b7:8a:49:37:11:fc:a0:67:f8:a7:c7:
d5:69:84:8c:2c:2f:11:b1:31:52:45:da:72:80:e3:
fa:8c:41:29:74:26:60:a5:49:06:4a:2b:fc:7d:14:
86:3c:4c:00:8d:15:87:c8:28:21:8b:3e:6d:5e:df:
4e:1e:9d:1a:d8:4c:e9:fe:8a:50:fa:34:01:f7:6e:
67:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BB:C4:C4:06:B4:71:AE:FD:CE:B4:5B:29:A1:D3:5B:87:49:39:13
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ff:1e:b0:a8:2a:bd:93:33:24:84:1c:a7:52:b6:3e:79:61:
21:17:ea:22:11:18:55:c9:0d:8a:96:36:1c:e9:8d:26:d0:ea:
fe:25:95:71:c2:59:f9:e9:c2:20:67:fc:58:55:43:52:c7:73:
72:f2:4b:9e:47:2d:ec:7c:49:9a:4f:2b:75:49:e7:8a:b3:21:
04:ad:f9:63:65:d0:35:65:4a:51:9b:69:d2:0d:ef:b5:64:a4:
9c:59:41:c4:3c:b9:0c:4b:35:d0:23:77:35:1c:a1:3d:a1:2d:
dd:e8:b4:34:83:f8:90:b5:9a:8e:81:59:ba:cf:c4:5f:63:85:
67:fb:8a:ff:4f:52:3c:0a:4b:6e:0e:8f:9b:a1:a2:56:ac:bb:
20:42:49:0b:f3:84:b0:d5:40:41:63:40:c2:09:e1:23:bd:24:
0a:13:71:cf:bc:ce:74:75:23:66:92:3b:96:a1:50:76:20:5d:
82:69:b6:bf:c5:61:44:02:3e:ce:ac:23:31:50:32:a1:77:37:
45:15:4d:17:ae:e8:ee:12:1c:37:af:a7:6c:31:83:60:53:7a:
07:17:d4:18:9e:02:7e:b4:1d:2e:04:5c:1e:42:7f:2d:42:e0:
86:d1:ff:d8:d8:32:cd:ee:b3:97:99:56:4a:ad:8d:8f:c6:6c:
4c:25:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:38:31 2025 by rpki-client