Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
File: 2UeygTSKvawkwr0W2gZ3XKdV9BA.mft (raw, json)
Hash identifier: Kd4fQZCBw7kL873770HgUgCJUYJ7fA5g0W4qrD/CGf8=
Subject key identifier: A4:51:19:22:C3:ED:70:CC:20:1C:FB:A2:EE:24:7C:1F:EF:AB:3D:5A
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Certificate issuer: /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial: 0196B9A441AD858DD58D61E1C120357F0D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
Manifest number: 0B9D
Signing time: Sat 10 May 2025 10:01:11 +0000
Manifest this update: Sat 10 May 2025 10:01:11 +0000
Manifest next update: Sun 11 May 2025 10:01:11 +0000
Files and hashes: 1: 2UeygTSKvawkwr0W2gZ3XKdV9BA.crl (hash: /PwcFb23+Vn/AlH37XKnzDD1IsEUx8ef0H+isCaopi4=)
2: FhBIS1oPkd9pTGuzUmZAfI1zqao.roa (hash: 7QOPsIrD6zeyN12zbcfLMatMMhBciTAhTQcY5qqAE98=)
3: LBfcizWSKlLS0AFemCzGH_wAzTA.roa (hash: PWrt9j2gJyGMu1EqKyEgePzznWupiIAtAIf0z5PbNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:41:ad:85:8d:d5:8d:61:e1:c1:20:35:7f:0d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
Validity
Not Before: May 10 10:01:11 2025 GMT
Not After : May 11 10:01:11 2025 GMT
Subject: CN=a4511922c3ed70cc201cfba2ee247c1fefab3d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:c9:6a:73:8b:ff:04:00:9a:c5:49:7b:28:
08:da:7f:8f:16:de:ac:1a:58:6f:98:cd:5a:81:0a:
32:65:b6:6b:d6:73:43:fe:0d:42:10:9e:6a:c7:ac:
4e:02:0d:1a:55:39:a1:5b:89:9e:cf:26:a9:7e:53:
95:81:cb:67:9a:93:b7:18:4d:c8:cc:ca:c2:1a:f5:
b2:79:b9:99:b4:71:f6:0c:d3:48:af:d4:49:94:14:
f9:c1:4f:1d:2b:b8:9c:d6:84:d3:e6:01:58:b7:dc:
a5:33:36:e1:8f:e7:7b:51:f0:e1:47:bd:3a:41:6b:
bb:c0:c7:fd:2a:9c:c3:71:d4:f7:01:96:43:fb:49:
62:10:8c:7d:de:eb:8f:f7:66:c6:06:75:40:20:f0:
6e:cf:f1:2f:8c:42:e3:a6:d8:35:d1:f4:8b:99:86:
aa:c2:0b:87:08:d5:35:31:80:2a:3b:d1:ca:1c:fb:
12:33:52:71:c7:44:93:e4:71:69:d1:1e:cf:99:bb:
78:7e:7c:6a:bf:68:6b:4a:3d:9c:f9:93:13:05:9d:
b1:ec:fc:a7:31:0a:1d:c5:56:db:6d:8b:5f:7c:f5:
80:b5:86:ab:14:d0:a7:43:37:b4:0c:31:0b:7e:61:
ac:d0:a2:7b:10:d9:6b:39:30:72:2a:77:3b:95:bb:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:51:19:22:C3:ED:70:CC:20:1C:FB:A2:EE:24:7C:1F:EF:AB:3D:5A
X509v3 Authority Key Identifier:
keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:17:96:af:72:ea:be:be:2a:a3:db:97:9d:0a:3f:9f:fb:a8:
1a:6e:84:05:5f:65:a0:a2:a5:56:47:3e:9e:35:5e:f6:42:f8:
17:3a:31:23:14:31:d6:de:4b:37:59:fa:90:b0:b4:12:62:3a:
79:19:3e:a1:bd:23:c4:78:9f:7b:a9:9b:95:7d:df:49:fe:df:
ec:83:f6:f3:54:45:0b:d0:46:09:ca:ed:fc:be:ac:9c:ae:f7:
26:c4:45:47:2b:18:95:81:28:eb:06:3a:b0:d3:91:b8:72:0f:
9c:69:30:98:ce:37:b8:09:6b:9f:3f:8d:fe:59:a5:ae:30:0c:
48:64:c8:a0:7b:3a:2c:d2:9d:e1:d3:3a:ce:73:7f:11:40:38:
78:86:db:c3:65:cf:e3:51:9c:df:fa:68:b6:74:d3:94:d5:91:
d9:6b:7c:c9:ba:18:3f:d6:64:a4:63:bf:0b:66:f3:84:fe:06:
a5:c8:20:51:e1:b5:f3:a3:7b:24:ca:dc:a9:ad:2a:2e:62:9a:
72:11:aa:e3:f4:cd:de:98:f5:ad:9c:42:87:22:06:08:a1:82:
e7:e0:ad:19:72:44:b0:d6:df:dc:0a:c1:20:29:4a:31:57:0a:
53:06:71:b2:da:2d:99:2c:b9:49:51:7a:56:23:7e:25:a4:7d:
3e:c5:cb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:07:32 2025 by rpki-client