Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
File: r2A0bQgbHFyBCzlMZuEFErv02Mk.mft (raw, json)
Hash identifier: wrfZnDj991vk7qFjTJ4o3JDtww0UyAueyhOeoOFYCEI=
Subject key identifier: D9:DF:94:E3:73:0A:E7:22:DA:8E:29:60:50:B0:7B:AD:B0:D9:2B:59
Authority key identifier: AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
Certificate issuer: /CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Certificate serial: 0196B935B2819706402A58D753EED75610F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
Manifest number: 024B
Signing time: Sat 10 May 2025 08:00:26 +0000
Manifest this update: Sat 10 May 2025 08:00:26 +0000
Manifest next update: Sun 11 May 2025 08:00:26 +0000
Files and hashes: 1: j5QtHlhxEZZOM5CvXJMLssoxGGc.roa (hash: 8L3ZEU7bcEWssZWSFVojRb4D5wALELFNA26f5J8ZxnI=)
2: r2A0bQgbHFyBCzlMZuEFErv02Mk.crl (hash: Bao6S/wy3DgxbIpy3wkjvBhCZnbWkg1y+S7XnXOCSG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:b2:81:97:06:40:2a:58:d7:53:ee:d7:56:10:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Validity
Not Before: May 10 08:00:26 2025 GMT
Not After : May 11 08:00:26 2025 GMT
Subject: CN=d9df94e3730ae722da8e296050b07badb0d92b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:96:d9:75:cb:ba:93:63:a4:87:ca:ca:54:
e6:9d:4b:d1:88:46:d9:a2:cf:8c:2b:92:52:4b:be:
a5:ee:a3:c7:32:b9:59:9b:5a:a6:99:0f:78:d5:fc:
97:f1:fb:75:da:8f:4b:51:f1:0a:a9:53:68:49:49:
aa:86:c9:3c:5c:b3:f7:c0:d8:b1:45:f6:ce:3f:f1:
a2:7b:0d:70:42:81:1f:2b:49:76:0a:26:fb:44:01:
33:d4:68:64:ce:a1:8d:ac:37:37:86:ce:a6:79:4a:
98:31:02:8f:84:58:93:91:3c:cb:9f:36:eb:c6:7e:
7e:1a:67:eb:60:22:a3:ad:8b:22:2d:64:21:63:35:
2e:c5:52:e8:b7:f1:0e:7e:ae:3e:4f:c6:1e:e2:95:
21:cc:6e:87:b9:2b:49:df:9e:4f:6c:92:78:65:54:
3d:eb:25:c7:be:34:72:0b:52:37:ae:a7:aa:e2:7a:
ae:e3:5f:dd:c1:9b:4e:c5:27:b8:8b:36:80:30:54:
82:2e:24:22:96:2e:3c:79:aa:6c:7c:d5:c8:d8:fd:
31:9c:e8:7c:e6:b9:91:b1:87:a1:4b:35:a8:e4:d8:
5c:00:32:8f:5f:55:f5:88:80:0c:94:df:0e:5c:0b:
24:7e:60:07:cb:92:d2:83:b8:f8:80:c1:2b:ad:3f:
78:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DF:94:E3:73:0A:E7:22:DA:8E:29:60:50:B0:7B:AD:B0:D9:2B:59
X509v3 Authority Key Identifier:
keyid:AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cd:5d:05:81:31:a8:43:1b:e6:93:82:39:6a:39:3a:19:d4:
20:26:ed:d3:85:50:2f:96:94:82:c0:a9:d0:69:86:e1:23:3a:
f4:6a:24:ff:d8:00:1f:c7:70:23:df:0f:31:c7:ae:d9:cb:2a:
b8:13:59:0c:b8:80:6d:4d:63:e1:0a:28:47:d4:64:50:d4:df:
21:df:30:cf:62:49:9f:41:85:cf:d1:9f:99:c2:b4:c7:87:a1:
49:c2:8d:b1:7c:e5:2d:27:af:ba:e2:1f:f6:5f:a9:1c:84:0a:
a5:a1:ee:85:9f:33:9a:7d:19:cf:91:1b:80:79:cb:8a:45:19:
cd:1c:bf:25:ff:cc:3c:a3:73:d4:db:34:98:03:0a:7c:7e:3a:
9d:69:1f:87:45:2f:a2:be:db:64:37:63:93:05:86:03:6b:c3:
10:68:88:4e:aa:0a:79:90:4d:69:a5:00:8a:60:20:52:5c:b2:
4f:f6:8d:18:2a:4b:9a:07:f3:ba:0b:3b:07:3d:45:d0:71:36:
c3:d5:8e:91:3c:3f:09:3a:33:cf:a4:bb:54:82:19:e3:f5:ba:
34:6d:e0:ef:b2:eb:7c:db:b1:a4:20:17:6c:c5:90:c5:00:dc:
7a:3a:a4:23:9b:a0:7b:78:ad:32:5a:af:1f:c6:76:76:41:9e:
a5:17:32:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:03:39 2025 by rpki-client