Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: pFPQDv07Fb82ESfS+QVsyZDeaLHPjXRWpkpTgNyFlI4=
Subject key identifier: 5A:DD:54:85:D0:D1:70:C3:D0:04:EC:7A:C5:61:81:FB:81:29:3B:C9
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 0196797B442E3543AABA10A1C8F882AE6583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 024F
Signing time: Sun 27 Apr 2025 23:00:43 +0000
Manifest this update: Sun 27 Apr 2025 23:00:43 +0000
Manifest next update: Mon 28 Apr 2025 23:00:43 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: u53yk+83jl9aG1Y+snYvLjGjufSG19t5QKtz/qa+U6k=)
2: Cx9kha5bv103Kq3bAG_MTrrJE34.roa (hash: johgfLtk10gvNPvG8Domyd4XBTCwy6ebk0g5h9P2w50=)
3: SWoEFelEatU_dibcF-_TT8FcqBU.roa (hash: kVpeX3IZgib3pbvaiKFAlQKbHypFqhMKkbcuv4cpgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:44:2e:35:43:aa:ba:10:a1:c8:f8:82:ae:65:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Apr 27 23:00:43 2025 GMT
Not After : Apr 28 23:00:43 2025 GMT
Subject: CN=5add5485d0d170c3d004ec7ac56181fb81293bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:30:59:8d:a1:ab:99:09:24:95:37:e4:58:
ca:0b:84:8d:b0:dc:ac:94:f2:0d:a4:81:c2:7a:a7:
bf:46:6e:60:7e:f6:17:c7:17:db:12:cd:41:bb:63:
79:bd:a6:dc:92:2c:53:d2:0a:58:1c:27:e4:3c:dd:
37:d1:2b:d9:d9:22:92:74:5e:4c:20:01:8a:84:06:
e5:4c:55:9f:67:76:e2:72:27:1d:da:bb:b6:1f:58:
24:e1:25:db:f7:af:2e:9a:43:67:81:4b:8e:da:96:
18:08:f8:91:3d:35:9a:c4:72:e9:e3:51:67:99:e0:
f8:5e:c4:d7:00:99:76:07:39:18:f0:41:3d:44:a3:
43:5e:4f:49:45:d5:24:93:c5:64:8d:ee:cc:3d:f8:
9b:34:11:3e:53:77:55:ae:1c:be:14:f0:d9:2a:0e:
63:77:7f:1f:54:c9:2f:e9:2f:83:a4:e4:c3:d3:74:
dc:5a:32:36:8c:d2:90:e2:df:95:01:0c:52:7b:d6:
7b:cc:0b:ae:c0:78:ba:35:49:08:78:36:5c:1f:cf:
05:dd:09:0c:7a:ae:ab:a4:7d:a3:a5:54:1f:a9:44:
82:d0:e5:a4:aa:88:7f:7e:70:59:a6:59:1d:3f:1c:
6d:e8:72:f9:0a:2f:2c:78:9d:a3:37:fc:72:09:17:
16:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DD:54:85:D0:D1:70:C3:D0:04:EC:7A:C5:61:81:FB:81:29:3B:C9
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a1:cf:b0:4b:9e:30:12:7b:f2:0a:94:40:f6:d1:2b:1a:41:
87:5f:11:89:9c:d5:e1:4b:ff:fb:0a:50:e9:88:dd:5c:8c:21:
ee:86:e4:1d:21:33:e9:14:db:98:dd:5d:7e:c6:a9:61:90:b4:
b0:52:f9:2f:94:13:d1:a7:f0:6c:2b:4e:89:7a:5f:8b:c1:d7:
8d:3d:ae:21:b5:67:14:c4:2a:db:f4:1f:05:e0:9d:53:70:82:
a1:00:31:79:85:4b:ba:f3:42:5c:04:7a:3c:ae:b2:4c:db:fe:
61:fa:15:bf:b6:ef:2c:2b:23:99:7b:23:7e:bb:55:b6:f5:98:
cb:67:9c:a5:a2:c7:2b:9b:f2:ad:23:bc:b2:1a:d3:8a:84:fb:
dc:18:3f:98:72:87:89:84:78:f4:59:36:4c:e4:1f:52:f9:ef:
d9:21:c1:d9:d6:8f:7d:18:7f:52:d5:5d:1d:eb:14:dc:a1:0f:
7d:69:7f:46:4a:9f:d4:9c:0e:04:b8:58:19:ae:b0:92:54:b0:
24:f1:0f:03:73:0a:e2:ed:51:2d:37:42:73:a7:59:8e:d9:53:
dd:c0:3f:a1:4d:52:c6:4e:51:6f:ad:3c:57:7c:05:b0:7f:09:
60:44:19:08:79:53:a1:1e:6a:93:7e:a5:12:d5:f7:8a:76:e9:
db:3e:cc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:40 2025 by rpki-client