Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: 14/1XBxRHbdqbOkCNIHgj9N+dppw/5UJS/qZ+srQI/0=
Subject key identifier: ED:53:DA:00:F0:44:F1:BA:28:4E:4C:15:58:BA:B5:15:9C:02:36:31
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 0196C0EF22390DBAD9F9F36E37765704D63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 05FB
Signing time: Sun 11 May 2025 20:00:19 +0000
Manifest this update: Sun 11 May 2025 20:00:19 +0000
Manifest next update: Mon 12 May 2025 20:00:19 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: 3MHJHCH2OMzY7GYqaT08EnsyHqpnuP1K0QJkBxGMtbQ=)
2: O5dwSGpy0OL0LjPB3wap3UtIwjM.roa (hash: cR4roCPU2uE8JstXy3PNObd3k08fMc1QAFzMuYnt3oU=)
3: tnUPA6hUZaMc3DGBbjrE2vWk7tg.roa (hash: mdRQc0qGhPN3lwt7z9GCtElgPkcKD7V9qQWoyWEN/8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:22:39:0d:ba:d9:f9:f3:6e:37:76:57:04:d6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: May 11 20:00:19 2025 GMT
Not After : May 12 20:00:19 2025 GMT
Subject: CN=ed53da00f044f1ba284e4c1558bab5159c023631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:18:ea:90:1b:67:69:75:64:ba:a1:17:bc:
51:2e:f4:43:87:a8:c9:e6:df:e8:78:64:c1:ec:25:
00:e2:03:8d:05:1c:f2:bf:1d:61:38:e4:de:1f:09:
ed:f8:6e:c8:cc:93:d0:15:d6:69:c2:60:5e:18:d2:
4c:7b:77:e8:bd:d2:1a:b5:ec:7b:77:10:41:b5:24:
81:11:12:e2:64:c6:0a:55:e6:38:c1:7f:03:50:2f:
70:8d:12:99:28:6f:5d:13:b0:2f:d2:eb:68:1c:a5:
83:ed:7e:7f:09:42:25:60:1d:03:61:db:60:93:f8:
d7:43:2e:05:04:9f:46:ab:84:c3:17:8e:98:e0:91:
f8:7d:df:2e:4d:51:1f:d5:6c:1c:4d:3f:8c:09:8a:
02:65:e0:0d:30:02:75:a6:ea:6e:9d:c9:65:09:37:
30:d5:4b:a8:dc:1e:68:08:fc:dc:1e:0a:31:b1:d5:
cf:ba:ed:31:db:c3:53:b0:ee:9c:7a:81:51:9d:5d:
5a:e6:11:71:34:7b:00:45:8f:18:c8:64:1b:3b:63:
34:0a:b5:a3:14:69:bd:52:4f:bf:fc:3c:da:ff:d4:
fe:ac:3d:00:fd:b4:e5:31:21:2a:63:71:24:d9:da:
8b:be:db:9c:69:80:7b:e5:00:98:6d:48:fc:a3:26:
10:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:53:DA:00:F0:44:F1:BA:28:4E:4C:15:58:BA:B5:15:9C:02:36:31
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:63:2d:20:5f:be:78:c1:5c:0c:e2:f9:03:d0:76:d1:97:00:
55:02:7d:21:e6:8b:56:25:0e:34:d6:d7:29:04:0c:d0:3d:c1:
a8:c7:3e:c2:d1:c9:d5:62:31:06:58:e1:99:93:ba:c8:b5:41:
79:50:4d:53:b2:12:74:76:5b:21:49:76:b6:e8:a2:7c:1f:a7:
99:aa:5e:eb:22:79:7d:46:87:68:44:25:a0:1a:9d:ba:ae:ad:
6a:e8:df:05:00:09:4c:e3:f5:29:97:b5:e0:4f:fc:bb:9d:30:
e2:1c:d6:3d:94:26:18:f2:c4:53:39:e3:91:6c:93:5a:0b:83:
9f:9b:a5:05:22:ea:1f:63:3d:6a:72:03:a9:0b:02:0c:b5:1c:
07:82:7f:07:89:f6:6b:82:c1:8c:4c:45:5e:bd:c2:37:a1:0a:
48:11:2d:40:81:16:6c:83:34:be:77:8a:64:7f:f1:8a:75:7f:
8d:a2:de:12:8c:d6:5b:9a:f4:1f:f0:12:fa:d3:93:eb:64:35:
cb:35:c1:bd:44:44:4c:85:c4:84:63:09:4c:44:4a:b7:fc:ec:
66:14:93:98:cf:ed:3e:5e:91:0e:b9:af:82:b9:ee:bd:b7:57:
8f:52:d0:5f:38:42:be:b1:9c:6d:35:7d:4c:c1:83:b2:30:af:
dd:29:35:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:34:26 2025 by rpki-client