Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
File: 2CFbV9M8svNMF8DoEDuwUf-AHr8.mft (raw, json)
Hash identifier: QPz33ssDEQMA+muRtMYldFSBlpAzBwJBrnuM6U6YS5A=
Subject key identifier: 70:CE:60:58:4B:29:A9:F2:C0:B9:B0:E9:75:A9:82:DF:86:35:CE:11
Authority key identifier: D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
Certificate issuer: /CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Certificate serial: 0196CA606C629EC94244473ACE6ABD67A66E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
Manifest number: 081B
Signing time: Tue 13 May 2025 16:00:38 +0000
Manifest this update: Tue 13 May 2025 16:00:38 +0000
Manifest next update: Wed 14 May 2025 16:00:38 +0000
Files and hashes: 1: 2CFbV9M8svNMF8DoEDuwUf-AHr8.crl (hash: zDE71Leo06sMgeHEk9tjFsvwshqsdrUrRW69EsWFNic=)
2: XqPuIdI9HApjv_WddMq3bI6d3ZM.roa (hash: q6fnYgYmczuLoF1SwqP9SdLFNt57s6mvo6al6s6SG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:6c:62:9e:c9:42:44:47:3a:ce:6a:bd:67:a6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8215b57d33cb2f34c17c0e8103bb051ff801ebf
Validity
Not Before: May 13 16:00:38 2025 GMT
Not After : May 14 16:00:38 2025 GMT
Subject: CN=70ce60584b29a9f2c0b9b0e975a982df8635ce11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:0b:90:68:a7:9f:61:2a:c1:f2:40:8b:2e:
e5:46:9d:9b:e7:68:55:85:da:1e:5e:a4:70:0c:c1:
1d:ac:8a:e8:6b:b8:dd:3b:83:9a:d6:94:97:4a:fe:
3f:17:5b:b0:7c:6f:aa:21:a8:f4:d1:84:91:5d:65:
ab:f2:03:c5:19:6d:7a:d1:69:cb:8c:c3:ea:51:f6:
c3:63:4b:5e:72:34:ee:c0:41:58:2a:d0:a8:02:d3:
a5:8a:59:a5:a9:76:4b:a4:68:d6:7c:6e:f2:55:1a:
b4:2d:34:ac:d8:a0:08:54:52:56:c5:f7:ea:01:de:
b3:ab:e9:5d:f2:98:0a:6c:32:72:2d:19:95:98:93:
73:7c:44:85:1e:70:e5:bb:9e:71:0f:4e:08:8b:55:
2f:a4:5f:e1:a4:e3:f8:38:b0:7b:99:5a:39:0d:88:
90:3b:67:3c:ac:76:ef:86:2e:fd:37:fd:76:68:06:
dc:72:17:f8:70:e5:2e:df:38:e3:00:da:8f:47:d6:
de:2c:f0:25:dd:9a:8e:4b:26:e4:c5:c4:ff:fd:e5:
2f:f0:5b:9a:7b:85:b7:6e:d6:69:a8:4b:92:29:da:
26:17:16:05:82:f3:40:53:b7:34:93:68:e1:2b:2c:
b6:e5:3f:77:a9:89:68:f3:e0:5c:b9:a3:f6:5e:75:
e7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CE:60:58:4B:29:A9:F2:C0:B9:B0:E9:75:A9:82:DF:86:35:CE:11
X509v3 Authority Key Identifier:
keyid:D8:21:5B:57:D3:3C:B2:F3:4C:17:C0:E8:10:3B:B0:51:FF:80:1E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CFbV9M8svNMF8DoEDuwUf-AHr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b07a4-5c00-4140-9896-62dc447fe438/1/2CFbV9M8svNMF8DoEDuwUf-AHr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:52:bd:17:e5:d1:4c:b8:c9:9f:a7:b4:5e:e3:db:6e:b1:e8:
4c:3d:a6:89:71:a4:a2:af:53:40:dd:be:5e:54:0d:47:7b:ac:
b7:0c:0f:a2:dc:e9:5a:57:9d:cb:c1:a6:07:b4:14:cb:b1:93:
66:51:c9:e4:35:e6:bd:13:6e:15:cd:d7:24:c1:84:01:02:f5:
f3:77:3d:f9:79:68:4c:57:0c:48:c0:de:f9:5b:29:25:92:46:
5b:fb:ca:78:07:08:23:4b:5b:7f:7f:1a:55:b7:9d:1e:66:cc:
64:bc:be:c2:d4:d3:12:c2:de:a1:7a:00:b7:0a:b9:d4:e9:ab:
66:4a:9f:04:4f:1f:cd:4e:bc:37:be:33:81:b2:c6:d4:a4:18:
1b:7e:0f:33:f0:f2:d6:72:f0:1b:58:c1:89:50:75:27:f2:6f:
21:23:96:49:28:bf:76:45:72:e1:b5:50:4e:d8:55:96:f3:2a:
14:63:51:f2:25:d5:0d:d9:2d:b9:cd:f7:d6:4c:17:91:7f:58:
1c:97:c3:4d:eb:2b:d5:b6:92:59:fd:b8:57:20:08:18:1f:e9:
d1:d3:93:31:b1:a2:c4:d9:71:a3:5b:74:43:08:28:5d:76:d5:
f8:9b:f2:b8:d2:ed:88:dc:89:c2:c9:28:32:b7:3c:8c:22:ce:
20:5f:1d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:15:16 2025 by rpki-client