Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
File: g2pzvtdapO-ld-2QrTVi4hlR0bI.mft (raw, json)
Hash identifier: sxnH/mVIwV0RxhdE2Rqycvrh3dRI2RZMHaa6Wcr5vQo=
Subject key identifier: 27:2E:7C:8F:DF:3C:70:42:5B:87:31:A4:73:BF:13:88:B4:D7:6C:D0
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Certificate issuer: /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial: 0196CA970177846A40BC7F99E761F73C0184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
Manifest number: 1341
Signing time: Tue 13 May 2025 17:00:16 +0000
Manifest this update: Tue 13 May 2025 17:00:16 +0000
Manifest next update: Wed 14 May 2025 17:00:16 +0000
Files and hashes: 1: g2pzvtdapO-ld-2QrTVi4hlR0bI.crl (hash: gX8OtOF9o26bdEcQQjM3ubNY8pjW7bO+3/Zr+NbYiAM=)
2: pCExSDuPpylceZEh-3ghVJcWtXU.roa (hash: EmDT0awECjqFFQZyEcdl/Y2PrhZj4pSyXOCLhHqwv2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:97:01:77:84:6a:40:bc:7f:99:e7:61:f7:3c:01:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Validity
Not Before: May 13 17:00:16 2025 GMT
Not After : May 14 17:00:16 2025 GMT
Subject: CN=272e7c8fdf3c70425b8731a473bf1388b4d76cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:06:5f:a9:94:ce:fc:2a:c7:aa:cc:c9:ae:3a:
5a:95:06:6c:85:09:19:d5:31:82:fe:00:df:01:75:
f5:46:ab:31:35:09:a1:38:0f:2c:45:b4:f2:1d:f3:
04:87:19:d2:62:5b:b1:f4:70:50:57:bd:13:ed:9d:
dc:f5:57:a0:44:46:35:9b:2e:de:36:10:2c:02:99:
97:5e:79:a9:28:97:35:1d:e6:4a:25:6c:97:91:30:
a1:2e:d2:d8:30:83:fb:63:a3:5d:36:78:b0:7a:5c:
9d:18:c7:4e:cd:18:65:e0:99:fc:30:14:ff:c0:4c:
b2:3c:d2:b8:46:fc:10:ee:02:6c:27:4d:16:1c:d4:
5c:73:05:43:f2:1b:cc:0e:cc:1c:0d:9d:83:b2:05:
1d:09:07:6a:bd:6b:f1:87:a8:f8:51:4f:64:7d:e0:
d3:80:a9:13:f7:8b:3d:18:5b:f9:51:c4:31:53:5b:
ad:a5:9e:e9:f7:f5:2b:0a:d7:58:c4:bb:4a:7e:55:
7f:ce:ab:5d:63:10:57:34:59:3c:42:76:8d:15:5e:
64:2e:76:61:4f:c5:ce:92:95:49:99:84:6a:e0:f8:
e0:8e:69:ac:d0:5a:93:4b:bf:11:7a:06:aa:8f:20:
0a:1a:c6:b2:83:46:d5:4b:79:e1:5e:48:d6:d2:ee:
db:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2E:7C:8F:DF:3C:70:42:5B:87:31:A4:73:BF:13:88:B4:D7:6C:D0
X509v3 Authority Key Identifier:
keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:33:c2:c5:c9:dc:f4:96:7f:53:e1:02:d1:dc:17:ac:4d:ad:
36:f6:a3:6b:b1:47:c5:ab:c9:07:a3:02:7c:c8:d0:bc:8c:56:
e4:e1:23:08:b0:dd:c6:81:4a:b0:41:4d:62:7d:46:ed:95:3d:
40:02:48:64:d3:ae:9b:b9:68:61:01:5f:48:c7:75:58:ce:4c:
e0:e6:4f:6c:03:8e:f4:da:dd:b3:cf:53:b9:2f:d0:8e:88:30:
b7:4e:c7:da:bb:c6:ea:1a:44:ec:ac:d1:e2:23:8d:18:6c:09:
9a:4a:bb:61:67:3a:23:24:bd:0b:b3:5a:04:77:87:c5:f2:f4:
12:2b:a8:0c:3a:f6:1f:cf:24:e1:94:55:69:79:19:1a:a2:f9:
db:f7:49:41:69:b1:ca:9b:5a:d7:42:8d:9b:91:eb:e9:b3:27:
99:32:1c:01:7e:6c:61:7d:28:77:d7:e5:77:2e:1d:70:b9:d4:
f9:e5:bd:63:06:9d:ca:22:87:8b:17:96:a1:37:61:5c:0c:22:
52:9d:6e:eb:ce:bc:3e:83:e6:ab:ae:2f:15:3b:7c:05:16:c2:
eb:38:45:06:d8:38:20:62:26:0f:73:ba:dd:bb:7e:79:3c:36:
38:8c:3f:fc:03:aa:8b:6c:7b:f5:aa:fa:8d:ea:2f:3f:b1:1e:
0c:59:ba:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:10:47 2025 by rpki-client