Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json)
Hash identifier: M0/W/hqRJmSbIYKEKyXXLLCy9reH1a/S76gpNYbmtqU=
Subject key identifier: 57:B4:49:78:77:E8:46:5B:2D:6E:C4:57:45:8C:20:BF:64:88:1D:D0
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial: 0196BB923A71200A936B0D115612A8312B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
Manifest number: 0781
Signing time: Sat 10 May 2025 19:00:44 +0000
Manifest this update: Sat 10 May 2025 19:00:44 +0000
Manifest next update: Sun 11 May 2025 19:00:44 +0000
Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: cIfrmqeYXGgCNF7ngq8jgGGRCGTcA9XMRaT6k+GfL5Y=)
2: YJat0ypVBvGXuB7rjLWwFO_ieuE.roa (hash: Bzr6PKNVWT81WpGDtx96KwCGccLFdxLbMZpJWozgbYk=)
3: a-DVKI8WfcIKstVjJWQ3OLGtrMc.roa (hash: Os4LMnRVFwmNof1gyfyoqeIulxI3OJGZj7GrAyJ745Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:3a:71:20:0a:93:6b:0d:11:56:12:a8:31:2b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Validity
Not Before: May 10 19:00:44 2025 GMT
Not After : May 11 19:00:44 2025 GMT
Subject: CN=57b4497877e8465b2d6ec457458c20bf64881dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:a9:fe:e8:f5:58:9e:aa:bc:df:4c:e9:61:
33:5a:ad:32:f4:71:df:ef:f9:44:78:36:c5:d5:14:
29:56:a2:27:01:25:c7:f9:e5:24:cd:49:ae:2d:c5:
83:bf:10:f5:01:0f:df:99:eb:20:7e:e0:1a:d1:62:
0d:48:ff:d3:ed:f5:31:3e:84:70:22:62:5d:f9:43:
d6:60:08:a8:ac:6b:82:ff:62:30:26:38:48:9f:55:
6a:5d:ad:84:26:ab:19:9e:25:8f:f7:e2:3b:ad:34:
97:5c:b3:70:43:fa:8c:5a:8c:2d:c2:36:44:03:44:
2a:28:1e:87:94:2f:fd:f4:da:50:02:c8:ee:8a:fc:
5f:49:54:55:e0:ac:6e:4b:be:b1:36:56:3b:7a:1f:
1b:51:d3:2f:98:eb:79:76:93:de:46:8b:61:3c:a3:
9b:9d:25:ba:35:20:c1:c5:23:70:50:41:0b:33:0c:
09:00:d9:fb:46:1e:47:ed:c5:27:a4:6d:23:76:b0:
d4:3d:6f:59:11:cf:cc:1c:19:e3:86:41:b9:bf:a7:
5f:fe:7a:a6:3f:17:ea:ae:bf:ad:4e:c1:0b:59:fd:
d5:a8:de:f9:65:88:2d:97:3a:87:0a:d9:1a:57:82:
1b:82:93:99:f3:4d:da:3d:8b:77:45:1f:60:df:08:
ae:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B4:49:78:77:E8:46:5B:2D:6E:C4:57:45:8C:20:BF:64:88:1D:D0
X509v3 Authority Key Identifier:
keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ea:12:22:47:d6:51:cd:22:0e:b7:f2:ba:42:49:b6:6d:02:
d5:ad:fc:bf:83:fe:96:aa:3f:a5:13:4f:42:62:d7:ea:28:78:
25:6b:34:ac:40:f7:46:cb:5e:d9:0e:43:07:90:c1:d8:2a:ce:
65:48:fb:23:16:76:a4:70:52:f7:fd:21:ad:10:cf:72:47:19:
88:e4:83:16:8f:81:08:2e:78:72:7b:4f:72:45:38:77:9f:c5:
a9:4f:c0:37:44:a9:c8:af:fe:ff:63:36:2d:a0:2d:f1:26:28:
31:fe:e1:a3:ff:f0:e4:4f:6c:eb:c8:04:16:3e:70:62:e2:30:
45:d7:50:87:6b:7b:4a:9c:4a:fc:7a:1d:95:5c:d2:21:f4:0e:
3b:27:be:f2:37:73:8e:f1:9e:0c:54:80:87:40:66:34:59:df:
e7:ef:04:ce:f6:de:68:4b:95:42:d8:bc:43:02:fd:95:5b:79:
b5:ee:8c:de:03:e5:27:a6:33:24:06:8f:ab:35:ff:ab:ea:04:
fc:09:1e:ce:19:22:63:4c:7c:60:84:30:9b:c3:71:00:58:48:
df:12:64:9b:c8:26:32:e7:8d:39:38:67:64:a9:6c:79:f0:29:
dc:66:83:80:8d:e9:fb:4f:16:80:52:db:b9:12:11:e5:8b:8d:
92:13:e7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:43:32 2025 by rpki-client