Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
File: 2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json)
Hash identifier: /fj68H+QIpddB3g3WsGblCdEpQlKaezT8BKirl/4WOg=
Subject key identifier: 14:C0:17:31:C4:89:97:A5:72:37:CA:64:7A:68:CA:6A:B5:9E:31:4E
Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Certificate issuer: /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Certificate serial: 01968A37F14FBA762580F180F94FD3588CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
Manifest number: 13DF
Signing time: Thu 01 May 2025 05:00:44 +0000
Manifest this update: Thu 01 May 2025 05:00:44 +0000
Manifest next update: Fri 02 May 2025 05:00:44 +0000
Files and hashes: 1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: 9LerW8MvNAQ39s/8OmgOJPQCIEvlqFN55yW2kYADPEA=)
2: BMDiXoJo4mV1C1iJkyCvhb3IXbs.roa (hash: Hyio+hKHcwTFLSnvoht8aVf6SalV68I+ioT/AT6e6Ds=)
3: EDIVTzTnD9slx8_sN2MDGo10vX0.roa (hash: niRdCwbiqIr4Uo3WkGhM3gC54LX+BnKXCufZ8GceLvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:f1:4f:ba:76:25:80:f1:80:f9:4f:d3:58:8c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Validity
Not Before: May 1 05:00:44 2025 GMT
Not After : May 2 05:00:44 2025 GMT
Subject: CN=14c01731c48997a57237ca647a68ca6ab59e314e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:8a:38:b1:f9:f2:fe:cd:c7:92:c4:b9:8d:
51:13:5b:0b:11:5f:92:bf:30:22:de:5c:86:08:35:
09:6c:6e:08:4a:31:19:8e:5d:24:9d:8b:c6:8e:28:
94:d9:73:b0:de:05:ac:a6:56:e9:7a:f1:17:3c:bf:
b1:bc:71:1c:c0:0c:e3:25:78:85:31:1b:ec:52:e1:
42:87:a3:88:15:c6:6c:72:89:fb:20:24:72:89:e2:
9b:7f:8c:d0:f2:84:a5:e6:6e:32:09:13:51:c1:0c:
d6:fc:5f:8b:b4:8e:19:ae:89:61:e7:c0:89:49:d0:
4a:67:e2:54:14:a7:06:a2:27:77:5a:8a:95:5c:d3:
16:d0:ee:01:63:4e:6b:1e:55:b4:47:3f:0a:76:97:
6a:0f:60:6c:82:51:b1:f6:1f:b4:f4:38:ee:a1:35:
a9:3f:20:1b:fe:69:fe:de:ce:53:78:95:1d:d6:0d:
1f:c9:d4:1f:df:ee:d3:73:31:e6:f7:c8:c0:d9:ed:
4e:b2:a9:b8:cc:c9:57:a6:9f:93:e7:3c:1e:6a:69:
55:fc:85:44:08:e7:6e:ab:71:d4:79:35:19:6c:30:
31:ee:04:47:54:1a:0d:53:8b:f6:da:36:55:d0:ad:
ec:56:d6:0d:74:39:55:db:01:f4:57:83:d2:f1:ba:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C0:17:31:C4:89:97:A5:72:37:CA:64:7A:68:CA:6A:B5:9E:31:4E
X509v3 Authority Key Identifier:
keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:40:c5:06:46:cb:ce:c7:e6:23:1c:7c:c0:99:7f:46:e0:22:
5b:13:c6:e7:34:92:01:89:a4:73:6c:0a:5c:dd:b5:2a:71:4f:
4a:c1:71:6a:1d:ea:3b:32:8c:23:89:cf:f4:0f:79:16:52:67:
4e:79:d7:e7:a4:bf:af:73:be:fb:de:27:20:80:31:d9:23:e2:
dd:61:8b:78:32:d8:8d:46:30:ac:76:6b:a8:56:a7:f0:da:18:
c2:f8:06:96:1c:18:ad:c3:98:d7:b6:c2:15:cc:7f:48:74:99:
8d:23:0e:94:65:94:19:db:60:63:c5:7c:7c:1a:09:35:16:fb:
5b:93:ad:fb:d3:3c:96:c1:79:1d:87:98:65:fa:a0:bd:77:3c:
b9:60:ce:0c:50:de:ea:4c:8f:ed:df:9e:17:f0:bc:e8:7a:56:
5c:28:9a:54:e5:a3:56:53:f9:91:40:a4:b1:8e:3a:3a:10:66:
45:c2:a0:50:72:d7:3e:65:14:56:19:43:d9:b5:0b:88:e3:97:
b6:74:03:ba:ec:fc:6d:dd:c2:5b:ba:ba:42:50:bf:5a:fc:e2:
79:3a:15:ea:ef:ab:a8:22:8b:31:7e:48:53:99:d4:2e:85:27:
68:8a:15:01:10:f8:61:42:2d:62:d9:0d:68:20:4d:8b:ed:5c:
86:5c:b7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:02:45 2025 by rpki-client