Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
File: 2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft (raw, json)
Hash identifier: PgTxFzG7y746oA+5jdKXlLcNOXafC8S1/x7mD32JmlA=
Subject key identifier: 1D:31:C5:48:BF:BB:DE:A5:49:42:EA:CE:C4:8D:8C:DE:B3:F7:22:E5
Authority key identifier: D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
Certificate issuer: /CN=d9d0318f2685e32d2dba923f6662771427359738
Certificate serial: 0196A2E50423F88905936850E6FE4380BBBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
Manifest number: 152A
Signing time: Tue 06 May 2025 00:00:39 +0000
Manifest this update: Tue 06 May 2025 00:00:39 +0000
Manifest next update: Wed 07 May 2025 00:00:39 +0000
Files and hashes: 1: 2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl (hash: KN6YDONLOI0vo/JeUvgTpsCjezBEa5EQCcrDvxt8qwM=)
2: 7qHMf0tDla85K4MWekgfnZC_GZ0.roa (hash: JjXdTvxVzICRsVC2xEQhCc6QbY1Z09t0LaEqj7BxkCU=)
3: NqNZtnoXM7iwpxu3KH3ENc53u_M.roa (hash: tIhk+tugHOEbprNpMaqqI4LseamZ25JrNrb/ctC6o6U=)
4: OCzx_78p6LuRZ2Y9VdripBX2gM8.roa (hash: Mc0jDuk9HPzcuOYUP3zkI8gHInm8/SYkdeSbffcFADA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:04:23:f8:89:05:93:68:50:e6:fe:43:80:bb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d0318f2685e32d2dba923f6662771427359738
Validity
Not Before: May 6 00:00:39 2025 GMT
Not After : May 7 00:00:39 2025 GMT
Subject: CN=1d31c548bfbbdea54942eacec48d8cdeb3f722e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8d:c1:17:78:8d:8a:d4:2e:68:ac:8e:b0:30:
27:10:8f:73:17:6b:29:92:ef:f7:f6:56:a1:08:d6:
43:30:c0:d4:c7:47:07:e3:bf:2c:05:e7:44:61:c0:
e4:e5:04:ab:cf:ca:95:9e:ee:70:8c:63:94:b8:7b:
96:a8:54:f2:4d:fb:2e:3d:3a:cf:6a:a6:6a:50:b3:
08:d2:00:b0:18:50:ab:d2:0a:3d:76:64:ca:96:a7:
c8:25:87:77:d3:da:1c:9f:4b:42:c9:6b:03:5c:d5:
fe:77:d8:dd:12:bd:38:d4:af:80:aa:aa:2d:a0:15:
ea:30:1f:8c:8b:3b:7d:5c:91:1c:c9:f8:11:d0:ea:
f1:57:75:85:27:fc:17:09:ad:55:78:cd:14:73:1c:
11:32:ad:d4:c5:9a:0c:8f:98:c7:45:44:df:a1:a8:
62:7f:79:32:91:14:56:dc:69:ed:65:5a:21:41:77:
04:8c:47:92:6a:ba:c8:a7:f3:7a:a2:82:32:25:77:
51:8d:cd:65:ad:78:e8:b7:4e:c6:9a:f1:7d:6c:3d:
3e:18:00:8f:93:80:4e:0e:b3:35:b4:61:f7:ec:90:
9b:d1:a2:4a:be:b2:92:3e:ea:0e:37:a8:d6:64:87:
96:c0:93:ad:64:4a:e5:f6:d6:01:0b:72:90:94:a2:
6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:31:C5:48:BF:BB:DE:A5:49:42:EA:CE:C4:8D:8C:DE:B3:F7:22:E5
X509v3 Authority Key Identifier:
keyid:D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:61:09:4f:be:08:33:a5:dc:db:23:26:dc:69:08:ac:4b:e2:
e6:ec:ef:54:dc:e7:49:3f:6a:9c:2f:f2:c2:e4:fa:2a:f0:ea:
21:e6:67:fd:ee:76:48:64:47:31:c8:76:f7:1b:e3:16:35:a6:
ae:cc:11:aa:82:76:74:d4:fc:13:e5:9f:fc:f3:a2:8a:e4:59:
e0:f3:d5:c8:7a:27:23:ad:de:55:ec:73:0b:df:fb:23:9c:05:
54:61:71:10:16:ce:88:ec:7f:04:7e:c7:f8:74:15:b4:25:08:
00:29:73:8d:79:7a:0a:b6:2d:d2:63:16:f8:1c:9c:a9:4e:33:
86:3a:8d:ae:44:bf:b1:9a:a1:12:30:a5:46:27:35:cc:3d:76:
bc:1b:bb:84:42:07:df:53:64:33:89:86:59:39:6a:19:5d:e1:
09:a9:e6:b9:14:89:38:e9:e6:f0:de:dc:9f:69:a0:b8:3e:bc:
fe:35:95:79:78:6c:15:56:5c:1c:b0:2c:05:91:05:1a:86:b3:
f3:a0:7c:68:ce:fe:cf:98:1b:76:f4:92:a4:fb:3c:92:bb:84:
0f:a9:f1:5e:7d:90:7c:49:76:b2:d5:81:eb:87:eb:e8:cf:7e:
99:e0:e3:9a:3a:0a:8b:89:c5:d9:f3:91:f0:5f:a1:73:81:cc:
fe:0c:55:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:16:12 2025 by rpki-client