Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json)
Hash identifier: z4vWHVa+3WmaoT10UJZ5FCVjk0V2jNeS0lYkE6PpeD0=
Subject key identifier: 95:F6:09:BD:6F:42:05:1B:0D:38:D1:48:2C:23:3A:56:54:0B:18:28
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial: 0196A01B06618C5154B587734BB90C242AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
Manifest number: 0AFC
Signing time: Mon 05 May 2025 11:00:47 +0000
Manifest this update: Mon 05 May 2025 11:00:47 +0000
Manifest next update: Tue 06 May 2025 11:00:47 +0000
Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: XI2ODGH2i+n1zPz4SIWX0V5I5kqA6G36zxBp2JggRoM=)
2: IS0smRtY_UHklMsTV-a11MXxvnU.roa (hash: 1NEqhD+uaMSbaGDtUxTmaG/oRgFCvJ6p9cklS658oe4=)
3: WbjFo-ltxvF-7ZrjyQy1FqeRLns.roa (hash: V+1LDHomAKK5fbX6O5ZL1HAUnZGkvTtj4L1E7oUU45k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1b:06:61:8c:51:54:b5:87:73:4b:b9:0c:24:2a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Validity
Not Before: May 5 11:00:47 2025 GMT
Not After : May 6 11:00:47 2025 GMT
Subject: CN=95f609bd6f42051b0d38d1482c233a56540b1828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:4e:7a:04:28:04:d2:84:69:19:fa:41:b2:
eb:ba:49:7e:f4:13:a3:0d:b2:2d:7a:d0:76:9f:57:
86:ab:51:cc:84:2e:db:6d:30:c2:e0:b7:53:c1:72:
cb:7a:cb:b8:b4:ae:c4:35:3f:90:51:19:0c:86:24:
31:e9:b4:01:12:29:08:74:64:27:21:c0:77:91:c9:
09:65:76:0a:29:9f:99:b2:28:f4:1b:18:12:1c:cb:
5e:16:d6:7c:7d:80:c0:2d:1f:d0:77:da:5b:1b:b8:
50:b8:00:2d:60:0a:f3:69:3b:6c:eb:ff:10:32:23:
e9:ab:c2:87:20:68:07:3a:22:e1:99:b4:3a:a3:20:
71:5f:1f:d9:05:1a:8b:28:8e:10:0c:64:fc:e6:c7:
b4:a5:1a:6b:11:45:f0:ab:e0:1f:14:46:bd:ec:5d:
2b:85:8d:ad:0c:54:bb:4f:17:7f:b1:2a:3c:6e:fc:
0e:bc:02:19:7b:3d:61:57:0c:bc:fb:0b:70:7b:99:
20:38:d6:e0:77:1e:d0:41:c9:a0:56:44:72:9a:e2:
b0:c5:05:eb:55:25:2b:76:31:8a:5d:01:d8:c5:bb:
6a:fe:fa:5b:dd:6e:ed:ca:40:f0:f8:fd:5d:cb:19:
48:f6:40:d8:e5:33:d4:f2:3a:1a:23:b2:9d:b2:31:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F6:09:BD:6F:42:05:1B:0D:38:D1:48:2C:23:3A:56:54:0B:18:28
X509v3 Authority Key Identifier:
keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d6:7b:30:ae:f3:70:a1:20:d2:e6:94:d4:f0:0a:cd:af:01:
71:c2:4d:84:a1:05:71:9e:9b:15:26:6c:4f:c3:6c:29:14:b8:
47:45:c3:35:ff:19:a4:a5:7e:11:0d:5a:a6:bb:b6:04:7c:80:
3e:a4:c8:ab:16:65:44:0d:5f:0a:3f:ce:51:bc:ec:89:bf:b7:
96:9e:7a:eb:33:0d:4a:1d:6f:ef:97:fd:1d:ac:b6:6b:b2:a4:
df:6f:a1:8b:96:b8:17:58:13:22:dd:08:51:0e:94:ab:cb:51:
d9:2f:48:49:6e:20:58:35:6a:c9:3f:c6:2f:ed:38:8b:73:24:
00:8e:9b:e8:0c:fb:7c:88:a2:a2:97:fa:a8:a7:1f:6b:f3:9f:
c9:2b:7a:79:79:15:56:66:ab:89:25:ac:df:36:53:4c:58:1b:
02:32:86:7d:8e:2d:8f:c1:46:c0:21:4a:d1:56:11:f3:26:2f:
28:93:75:c1:18:eb:c5:0c:ac:68:ce:15:9f:0f:49:6d:01:3c:
23:af:4e:71:92:63:ea:37:17:05:9c:6e:18:ab:46:e5:0b:65:
fe:8e:a1:e8:ea:aa:a6:30:eb:7c:66:14:52:5d:67:0a:ea:0c:
e0:ae:90:b7:0e:95:de:b8:33:a8:01:38:be:73:c8:a8:b5:24:
1a:b6:48:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:08:45 2025 by rpki-client