
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File: 2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier: vkaIBAztRz+5BWQoYibCr2wscc18hNaKDU0wdWGx6KU=
Subject key identifier: 66:BB:6F:35:F2:55:48:E0:2F:D2:0F:E8:90:39:A7:66:C8:6E:DD:61
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer: /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial: 0196A2E567FE13920CE18CA24958B8588689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number: 1522
Signing time: Tue 06 May 2025 00:01:05 +0000
Manifest this update: Tue 06 May 2025 00:01:05 +0000
Manifest next update: Wed 07 May 2025 00:01:05 +0000
Files and hashes: 1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: 7PsAcNEnQ9WcBbQwtjtE4vLxToN0mrH0izZgvxMoEUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:67:fe:13:92:0c:e1:8c:a2:49:58:b8:58:86:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Validity
Not Before: May 6 00:01:05 2025 GMT
Not After : May 7 00:01:05 2025 GMT
Subject: CN=66bb6f35f25548e02fd20fe89039a766c86edd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9f:57:8b:ae:74:b4:be:8f:56:16:52:4c:74:
5f:35:97:03:77:07:1a:59:93:d1:18:82:e9:3f:84:
f4:7b:95:7d:1d:d9:e2:82:8a:51:02:75:0b:e3:58:
0d:95:63:f9:cb:35:97:e8:fc:f1:bf:42:31:f2:a1:
e4:d1:bb:4d:7d:33:83:e9:17:d4:b8:dc:bb:69:27:
fe:43:fc:60:f1:bb:f9:90:c4:a3:93:98:b9:65:3b:
d5:0c:c7:89:82:d0:42:4d:97:32:af:69:4a:f9:6b:
5e:00:26:17:ae:2b:82:d6:7c:5f:f1:2d:04:67:9f:
88:a3:2a:b4:ef:d5:51:42:58:63:c7:0b:e5:13:2d:
29:42:10:44:5b:9f:76:af:cf:8a:33:d7:b6:5b:b7:
94:96:29:9d:b3:43:c5:53:b5:e2:8b:d5:0b:8f:9d:
11:aa:4c:4a:a1:96:ca:90:6d:95:bd:27:1a:d8:64:
b7:d3:e4:8e:e8:e5:f0:98:37:10:83:da:b5:c4:19:
8d:c8:eb:b8:2c:19:0e:1e:f7:13:d3:5f:44:34:a9:
7d:1c:3a:0d:64:18:b8:d1:c3:64:21:30:34:1d:1a:
14:46:bd:83:3b:e8:6f:c0:c3:94:95:bb:f3:e3:e8:
48:dc:33:00:88:9d:ee:00:0e:5e:72:ed:08:c8:ed:
b0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BB:6F:35:F2:55:48:E0:2F:D2:0F:E8:90:39:A7:66:C8:6E:DD:61
X509v3 Authority Key Identifier:
keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:84:1c:02:92:cc:67:61:0d:26:5f:8c:11:ad:fd:bc:e1:aa:
9c:f7:cc:3e:fb:00:5c:fc:d5:89:ac:92:bc:34:f4:5c:85:6d:
c7:cf:70:1a:92:77:46:37:bc:00:15:94:bd:4e:72:99:bf:29:
dd:67:6b:8c:87:9f:5d:13:cf:28:16:5a:c4:5d:e8:4d:14:92:
14:46:b2:c2:ac:eb:b6:22:dc:a2:e1:2a:e5:db:38:e0:34:62:
58:1e:44:16:84:b9:87:f7:a6:22:c3:d4:c2:3e:51:fc:d6:02:
e7:b5:f1:2e:e3:e4:40:b9:a9:36:a4:e7:60:bb:2f:f1:95:fc:
03:5c:7e:64:13:03:88:e3:a9:6e:e0:54:e4:7e:4d:aa:d5:65:
8a:d6:64:c5:8f:80:f2:9b:53:30:08:a1:bc:f7:89:e9:a2:b2:
2b:c3:0b:0b:9b:74:7e:16:4a:1f:af:44:6e:d9:3e:79:1c:8c:
b0:36:48:75:ec:ce:cc:3a:39:12:3d:e7:38:02:41:79:a1:ef:
52:9b:d4:5a:f5:26:6f:23:7a:9c:98:98:d5:f0:8f:ab:94:eb:
ab:6c:4f:30:21:fa:43:44:57:c0:2c:69:59:44:80:d5:c6:15:
30:f5:bf:d4:a9:b3:74:e7:9f:02:fc:ec:30:5b:7d:fc:b7:de:
9f:95:bd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:32:07 2025 by rpki-client