Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
File: 2SuKXtRqwwRtRQFHI6C5L6zypJs.mft (raw, json)
Hash identifier: wwWVq/sZjuJE+MMguFRiAfIenlCgOQZPrwiqQrCMS8s=
Subject key identifier: D2:84:ED:08:26:A3:B6:C6:BC:DF:D8:68:65:A0:54:63:F3:8C:AB:AF
Authority key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
Certificate issuer: /CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Certificate serial: 0196BBC8B104677A337D0771481D98632093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
Manifest number: 04E2
Signing time: Sat 10 May 2025 20:00:13 +0000
Manifest this update: Sat 10 May 2025 20:00:13 +0000
Manifest next update: Sun 11 May 2025 20:00:13 +0000
Files and hashes: 1: 2SuKXtRqwwRtRQFHI6C5L6zypJs.crl (hash: Wka4Fwh1qnnON8KX9nJ3vNrxgjRVBz/V7QF6vG7mpgg=)
2: RCxUccFlj404n0PDXIwSW9a1Qu8.roa (hash: Q9ghLq/JOpXpWGcxR9wqNLzzbYm0DOwnIjt6pVt6/x4=)
3: wMjtT9e8Q5MbpNdpKyJa8rSAUGo.roa (hash: 2d2qxPNtY9fysBuRUtCzO2NCNWMGcOf5j1D1Gmd73dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:b1:04:67:7a:33:7d:07:71:48:1d:98:63:20:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Validity
Not Before: May 10 20:00:13 2025 GMT
Not After : May 11 20:00:13 2025 GMT
Subject: CN=d284ed0826a3b6c6bcdfd86865a05463f38cabaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e6:e6:1b:57:42:70:91:67:9e:b1:c9:ce:3f:
07:a2:e0:ee:c7:45:56:4d:ab:56:7b:f4:90:91:34:
5b:a6:a2:26:e9:03:93:fe:e3:14:7d:45:41:74:38:
52:df:31:c8:e5:9a:b5:b1:85:79:d7:be:fd:33:22:
69:42:df:87:e5:ac:ba:be:ba:f2:ac:36:03:99:90:
51:a9:47:c1:f3:5e:02:e8:0f:71:cf:7e:7e:6f:2c:
13:11:52:9a:3c:db:b0:b2:a8:f9:e8:29:30:e9:d9:
9d:54:8f:e7:a7:bc:19:ce:43:0c:61:57:ce:3e:9c:
41:e1:7f:51:e7:62:27:a1:86:25:d5:0e:20:23:13:
1b:cf:42:dc:f8:a1:5a:25:dd:37:47:94:e1:3d:69:
b0:32:df:9d:be:2b:9f:34:b2:0a:12:d9:b6:62:df:
41:30:66:91:13:17:fd:4a:d3:e5:fe:de:65:5a:8a:
29:0b:0b:2f:c0:c9:6e:f6:60:21:17:cc:ce:c5:31:
4e:d1:b2:fa:03:71:64:b7:c8:7e:6c:da:5e:fc:45:
96:2e:da:0d:75:56:98:78:80:89:db:2d:bd:55:7d:
92:f1:2e:53:c3:f8:4d:49:ad:ac:94:ee:22:00:36:
39:a7:4c:9b:46:5a:5f:a4:16:d2:35:17:56:e5:29:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:84:ED:08:26:A3:B6:C6:BC:DF:D8:68:65:A0:54:63:F3:8C:AB:AF
X509v3 Authority Key Identifier:
keyid:D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6d:18:c5:cc:bc:8b:95:46:f8:dd:96:77:9b:2c:d9:cf:1f:
ab:12:7e:bc:92:ef:35:6c:22:d2:f0:fe:32:e8:cb:de:9c:31:
2b:5e:ef:6f:90:a1:08:8a:10:7f:dc:85:79:a4:51:da:61:48:
35:d7:8b:97:f7:89:86:e2:d9:a3:17:fd:92:34:e7:95:3d:e1:
21:35:2a:fb:49:78:1d:7f:6d:dc:df:13:b4:e8:aa:a2:cc:1c:
85:9f:59:a5:b1:37:7f:ca:b7:9d:75:f7:8f:0f:01:b7:bb:26:
9d:eb:8b:e4:a4:14:be:b5:28:2f:32:66:c9:0b:26:bd:bf:90:
27:1d:ca:17:81:b4:1d:bf:fd:f5:ed:1d:bb:bf:f9:3d:6c:c8:
50:3e:b5:e5:f2:70:7d:a9:3c:6a:45:87:cc:58:05:39:36:2b:
12:4b:cc:04:ee:28:86:25:82:22:8d:cd:f3:a8:e2:8e:4b:27:
61:a2:f8:fb:de:e7:e5:0c:27:a4:d9:3a:c6:20:ac:45:ba:15:
dd:92:a9:08:d1:73:69:51:b7:4d:ab:f5:2c:cf:54:34:17:56:
48:15:94:6b:4b:bf:1b:76:c9:8d:0d:0d:15:31:59:24:4a:dd:
24:81:91:56:b1:04:01:85:59:fc:30:33:c8:ab:56:01:5b:bd:
d5:9a:bc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:37:24 2025 by rpki-client