Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
File: 2nFI11vcOc6d0uO9qnWEexezTss.mft (raw, json)
Hash identifier: 6gNA91pvoov8ooiThnBXleIVH3MMYUtU1PKx2lsPcBk=
Subject key identifier: F3:80:BA:35:FB:79:BD:8C:6A:F6:CA:36:D2:50:ED:C1:54:6F:A5:8B
Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
Certificate issuer: /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Certificate serial: 0196BF37FF34D14B6D98D47D153D70EB2229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 12:00:40 +0000
Manifest this update: Sun 11 May 2025 12:00:40 +0000
Manifest next update: Mon 12 May 2025 12:00:40 +0000
Files and hashes: 1: 2nFI11vcOc6d0uO9qnWEexezTss.crl (hash: WjHr4NcggHTe1HalHHlBH+MdqE2PVNjVsY7/jxHaOBE=)
2: 5p4iEJjCWHg2NCuzUgou4J5Rpxg.roa (hash: NfyhhVjM+im96vYLz64L3GHHSJz/s1weqZvBCCm8Yaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:ff:34:d1:4b:6d:98:d4:7d:15:3d:70:eb:22:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Validity
Not Before: May 11 12:00:40 2025 GMT
Not After : May 12 12:00:40 2025 GMT
Subject: CN=f380ba35fb79bd8c6af6ca36d250edc1546fa58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:28:42:70:3d:30:90:77:67:3f:fc:e5:3f:
05:34:2b:12:a1:01:81:d9:71:8d:1b:f7:79:32:15:
b4:b2:46:f1:a8:97:c4:0a:35:30:6f:5b:aa:3f:5d:
95:5d:3f:f6:20:ea:7d:b3:31:d7:46:20:ec:45:9f:
62:18:67:e8:53:0f:b6:96:fc:f9:9b:af:16:45:88:
63:f5:9c:c3:d2:00:b2:20:38:76:4d:a3:e8:b0:3a:
20:13:7d:93:e7:f0:b9:f7:44:d3:65:f0:fd:ff:96:
b6:2d:c1:0d:b9:84:d5:0f:cd:ee:e5:79:e7:66:47:
d1:55:61:9e:2d:52:f7:5f:df:2e:a9:03:3f:16:8e:
d1:2c:f1:52:0a:c1:3a:65:49:33:9e:94:74:ce:81:
6d:29:cc:d8:69:dc:9a:99:78:ff:8b:17:07:1a:73:
94:12:02:ef:3a:82:dc:e0:c0:2a:e5:e7:9f:9d:0a:
3b:45:18:49:c0:31:a8:fb:dc:ff:ba:79:45:c1:2c:
0b:ba:f3:27:8c:48:00:af:6e:2a:45:80:8e:c4:ab:
cc:0a:d1:48:b2:0f:d9:4f:c1:1d:75:8b:7b:b2:6f:
4c:d9:99:5e:19:9f:5c:3a:0f:68:b9:9a:b0:d4:4e:
16:cb:2c:06:73:51:1f:a7:e7:1c:21:28:9d:f4:26:
95:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:80:BA:35:FB:79:BD:8C:6A:F6:CA:36:D2:50:ED:C1:54:6F:A5:8B
X509v3 Authority Key Identifier:
keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:32:4e:59:b4:6c:7e:f1:15:b9:72:7d:e8:16:ca:c4:a6:da:
a2:26:bc:46:b7:3e:f8:46:d9:dc:10:8b:db:7d:29:bd:21:1e:
15:a0:3f:2d:7a:8a:fa:d0:28:ea:df:75:ce:60:6f:a1:e5:53:
bf:f7:ef:a2:44:02:fe:d6:c3:03:be:63:80:a4:67:2c:84:cb:
08:14:65:51:d3:d8:2b:c0:7e:e5:34:5b:a5:40:cd:e1:aa:a8:
19:0a:58:aa:a4:48:6f:c9:1a:a3:21:b9:ec:eb:66:5e:53:ef:
14:6b:56:16:36:23:18:34:49:ca:7d:8a:7d:31:96:18:f6:9c:
25:e4:a3:dd:6d:eb:34:f0:34:11:1e:f9:9a:93:2b:22:90:ae:
72:0c:3e:98:82:2a:2f:b2:6b:da:2f:2a:fd:1d:20:c4:74:d7:
da:91:e2:b2:bc:36:1e:10:ce:31:cb:fc:b8:7b:44:e7:f7:3b:
e6:ec:2e:77:40:96:35:af:5d:80:62:50:e1:21:ab:e9:3b:41:
b5:33:1d:57:ae:a6:7c:2e:8f:ed:b3:0d:4b:a5:a7:96:0e:b6:
16:55:5f:e5:05:51:8b:45:ca:ef:9e:7f:09:38:0d:71:45:6c:
9a:c7:e4:43:5c:aa:44:19:dd:37:c3:9d:1d:e0:eb:2f:e8:89:
dd:9f:11:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:34:37 2025 by rpki-client