Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7abca5-77ac-4987-8a2b-52498a7dece9/1/2uVkx87d21-Job3md9roielx8BA.mft
File: 2uVkx87d21-Job3md9roielx8BA.mft (raw, json)
Hash identifier: EzzwdHjZ291XLeLK+orO3Z1utP7rG+BV7i9tGhT5Ba0=
Subject key identifier: 50:C0:51:47:3A:92:6C:64:79:2A:EC:85:C0:78:FD:C1:49:84:A2:2B
Authority key identifier: DA:E5:64:C7:CE:DD:DB:5F:89:A1:BD:E6:77:DA:E8:89:E9:71:F0:10
Certificate issuer: /CN=dae564c7cedddb5f89a1bde677dae889e971f010
Certificate serial: 0196BA48C768ED690F4AB24B9707B054C0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2uVkx87d21-Job3md9roielx8BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7abca5-77ac-4987-8a2b-52498a7dece9/1/2uVkx87d21-Job3md9roielx8BA.mft
Manifest number: 0293
Signing time: Sat 10 May 2025 13:00:53 +0000
Manifest this update: Sat 10 May 2025 13:00:53 +0000
Manifest next update: Sun 11 May 2025 13:00:53 +0000
Files and hashes: 1: 2uVkx87d21-Job3md9roielx8BA.crl (hash: okNxsVfoeFvxAUcrSzg00jrKRYN9UK0qOvTVfKhN/Ec=)
2: rfglLUnXtW1bLGWSkf5ECHoCphY.roa (hash: iNTsnpqxL1z0jo4De4q7TGzAt43nrGIiUj9zY7jQRw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7abca5-77ac-4987-8a2b-52498a7dece9/1/2uVkx87d21-Job3md9roielx8BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7abca5-77ac-4987-8a2b-52498a7dece9/1/2uVkx87d21-Job3md9roielx8BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2uVkx87d21-Job3md9roielx8BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:c7:68:ed:69:0f:4a:b2:4b:97:07:b0:54:c0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae564c7cedddb5f89a1bde677dae889e971f010
Validity
Not Before: May 10 13:00:53 2025 GMT
Not After : May 11 13:00:53 2025 GMT
Subject: CN=50c051473a926c64792aec85c078fdc14984a22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:28:21:52:55:d3:3f:c1:0f:de:f0:64:5d:cc:
a6:24:a8:9c:4f:0a:7f:44:76:68:f7:3f:6d:a4:ac:
69:0a:55:e2:4f:30:a9:81:bb:ed:e1:7a:07:d6:09:
bb:6b:66:7c:3c:ed:1b:c0:bd:ea:7c:19:2d:f0:1d:
b8:3e:e9:07:4c:4a:18:1a:32:e8:b9:30:62:d8:0e:
fb:ea:ec:32:cd:29:76:16:8c:a0:7c:4f:21:54:42:
da:5c:4e:44:5d:ea:93:fa:4b:8e:73:00:50:7b:fc:
37:9c:41:3d:1e:e3:bc:32:22:9e:d8:f7:62:96:ff:
31:0f:f3:da:62:90:ca:2f:46:0b:19:bc:62:ad:5c:
01:a2:fb:80:0f:16:55:f8:40:61:d6:5e:8f:48:a0:
2b:c3:ba:a6:e6:e3:c3:4c:5a:9c:33:03:da:f5:e7:
cd:98:c8:7a:85:32:6b:a8:c5:bd:47:ad:c2:95:f6:
f2:c6:2b:19:34:20:36:d9:5b:94:48:63:6f:4d:46:
0d:e6:af:9c:29:58:0e:a9:90:da:3e:7f:56:fa:7c:
5a:e1:ba:5d:87:61:fd:a5:78:c4:2d:ab:5d:aa:09:
c2:26:a5:05:3a:17:1e:7e:31:9a:37:4e:88:c9:2d:
58:32:40:97:14:2e:78:cf:36:5e:85:01:1e:e1:4b:
77:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C0:51:47:3A:92:6C:64:79:2A:EC:85:C0:78:FD:C1:49:84:A2:2B
X509v3 Authority Key Identifier:
keyid:DA:E5:64:C7:CE:DD:DB:5F:89:A1:BD:E6:77:DA:E8:89:E9:71:F0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2uVkx87d21-Job3md9roielx8BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7abca5-77ac-4987-8a2b-52498a7dece9/1/2uVkx87d21-Job3md9roielx8BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7abca5-77ac-4987-8a2b-52498a7dece9/1/2uVkx87d21-Job3md9roielx8BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:eb:fd:7d:b6:6b:b1:8c:ac:06:a0:5c:c1:49:5a:a4:26:43:
b3:1e:89:6f:01:0b:23:1e:ba:26:4b:2c:56:f0:21:ba:b2:a9:
f5:b8:76:0a:02:4a:37:ca:be:c2:16:f3:0d:c4:1c:9b:1d:da:
08:33:ba:84:90:80:0e:e2:c5:7d:f3:c7:45:f4:5f:fc:6e:ff:
da:04:0f:6b:fd:52:4d:7b:d5:ce:f3:0c:32:3a:40:4f:f8:d8:
83:eb:9f:0d:c5:cf:f1:0d:e7:71:b4:6e:bb:8f:3b:9c:55:94:
9a:75:84:46:dd:67:57:36:47:6f:df:62:10:98:a2:1f:53:15:
d5:6e:ff:35:5d:ec:b7:4a:c1:a2:d4:fe:e3:55:de:17:84:6c:
8c:09:cc:f2:4b:b5:32:ab:e9:bf:43:b3:78:cd:ba:82:7c:e8:
4a:cf:54:e5:d9:7e:4d:7c:db:ba:66:a8:3d:fc:8c:4d:e6:4f:
02:49:ee:ed:4d:8f:ad:58:9d:4d:a8:89:f1:ef:6a:48:17:c6:
7f:cd:13:49:da:c5:ae:b8:a7:8f:25:93:99:d2:52:6b:1b:4b:
b9:d5:00:6b:85:7c:11:e4:b3:8a:6e:75:26:4a:02:f3:c3:dd:
6b:e6:21:3d:ca:09:64:41:97:30:24:cd:7a:b6:89:78:7e:ba:
0d:53:ee:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:15:25 2025 by rpki-client