Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: VGt8FRq910thHsM2IKX4DycQ5wdphFvGXFm1Qlwf4Kw=
Subject key identifier: 13:13:1D:F8:80:F7:E8:85:16:56:B8:90:11:4A:89:D1:39:BE:51:9E
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 0196B10E5046DDBA47A79020620AABAD3607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 0BBB
Signing time: Thu 08 May 2025 18:00:26 +0000
Manifest this update: Thu 08 May 2025 18:00:26 +0000
Manifest next update: Fri 09 May 2025 18:00:26 +0000
Files and hashes: 1: 1SW-2xi11V63HCREW8hUdL3tZmw.roa (hash: cOv7Oi38iBDrDb9WZ2Ip3z9u0lLKK3yHhjWLwQyWMKM=)
2: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: W6gAdCrrHUKNrCqMcBy6xSvauWhBDxniQuvWtwFZ9xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:0e:50:46:dd:ba:47:a7:90:20:62:0a:ab:ad:36:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: May 8 18:00:26 2025 GMT
Not After : May 9 18:00:26 2025 GMT
Subject: CN=13131df880f7e8851656b890114a89d139be519e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:03:fe:e1:c6:ee:db:5d:23:af:6b:be:fd:
0d:54:09:39:7d:88:95:73:75:b7:da:9c:82:ff:01:
6a:70:f1:6c:32:d2:33:cf:2d:ff:7a:83:b7:fd:db:
5b:1c:9b:09:21:3c:f5:65:98:fa:38:1f:7c:6c:a7:
47:95:92:ad:bd:2d:38:fe:87:1f:b4:42:ab:f8:72:
16:4a:4d:ec:4a:62:c4:a5:77:48:1a:f3:34:ad:fb:
f2:96:f6:c9:22:0f:f4:ee:1c:de:d4:7f:aa:1e:6f:
6b:d8:0b:a4:9b:7c:a0:ec:7d:aa:11:b5:c5:69:b8:
31:e9:3f:5c:86:96:66:55:4d:01:12:28:23:c8:92:
0c:84:51:35:4f:f9:99:10:4d:03:83:7d:7b:7e:58:
14:90:65:5e:86:22:84:f2:e0:0d:cf:58:e4:e3:5e:
0f:35:ae:80:b1:09:ae:37:6d:82:e9:8e:b4:a2:3e:
8f:12:4f:a8:36:2c:25:cf:46:2c:27:a2:36:36:e3:
9c:20:e0:28:b1:84:2d:89:53:37:83:55:71:e6:92:
c6:43:da:76:ef:1d:70:ca:21:a5:e7:b1:7b:4a:96:
9f:fd:62:79:60:23:d0:b6:52:ce:7d:fc:75:e0:a1:
da:98:d5:6f:f7:6c:44:fb:a7:4c:71:eb:95:24:ee:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:13:1D:F8:80:F7:E8:85:16:56:B8:90:11:4A:89:D1:39:BE:51:9E
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:97:4b:f7:20:f4:5b:57:08:e1:f3:e9:37:25:57:12:c2:b2:
52:5f:e4:5e:47:65:57:2e:24:53:27:67:a0:0e:45:28:d5:76:
92:da:fa:d0:9b:f4:9c:c8:a9:09:17:88:4f:c1:44:4c:36:67:
80:0b:37:56:fb:ae:d7:e2:67:0f:a7:a5:77:a3:c4:70:62:48:
bb:d4:08:79:49:1a:19:e8:f6:ee:a9:ca:3e:94:4b:a5:31:60:
4f:42:0e:df:9b:79:6e:db:6a:2b:2c:00:60:9b:75:81:15:cb:
f0:9c:ec:19:ce:28:dc:24:ae:4a:57:32:d0:d9:d9:20:ba:0c:
c1:2d:ce:be:2c:cb:a7:44:b6:d7:1c:9f:62:8c:4f:65:f9:54:
4b:57:89:00:d1:b0:de:d9:14:61:bd:97:38:d2:f8:9a:6b:86:
30:5a:54:aa:94:f3:f0:43:ab:3a:23:23:46:65:48:08:86:b3:
d4:6e:cd:c7:1b:ce:93:1a:d0:17:8e:99:8b:cf:9d:6b:d8:58:
da:cb:e0:bf:a4:1b:53:34:a5:44:cd:9b:ec:a0:13:96:20:50:
af:e2:29:8e:d4:09:58:cd:f5:02:c3:90:f7:6a:97:29:d2:ac:
27:3e:7e:a5:f4:e1:df:18:1f:b7:b8:0a:79:10:6e:e0:96:6d:
87:96:98:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:19:18 2025 by rpki-client