
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
File: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft (raw, json)
Hash identifier: EBU6HR4rVxVe5Fd/BFwuFJa2PdvTdE5oiNZ7/3wKC4E=
Subject key identifier: 69:84:51:6A:BD:E4:5F:E0:B6:98:75:94:0F:8C:79:33:35:B1:31:B3
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial: 0196A389C88CD862A89EE6DB04B3C861808A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
Manifest number: 03D7
Signing time: Tue 06 May 2025 03:00:37 +0000
Manifest this update: Tue 06 May 2025 03:00:37 +0000
Manifest next update: Wed 07 May 2025 03:00:37 +0000
Files and hashes: 1: 2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl (hash: P8D96InH8VaaulmS8T3Zm+5Cy1NuejTaXT78ue3SbDs=)
2: dVwX-cCmOxrn9_gsdwOdsiWFkY0.roa (hash: Vs+r4/uqJb40X1RP1KHDHIrHsJL+2YTLULkN+N2HJCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:89:c8:8c:d8:62:a8:9e:e6:db:04:b3:c8:61:80:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Validity
Not Before: May 6 03:00:37 2025 GMT
Not After : May 7 03:00:37 2025 GMT
Subject: CN=6984516abde45fe0b69875940f8c793335b131b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:8d:62:12:5f:39:92:15:76:95:28:a7:f8:
fe:8a:82:4f:11:47:4a:e1:50:37:e2:57:42:9c:a5:
c7:1f:f7:8d:74:74:4c:66:2f:3c:6d:b3:17:b5:09:
4a:76:ab:b7:bd:1f:be:5d:0f:22:5b:6f:6f:32:0f:
e9:8e:84:3c:f6:f5:b9:7a:76:2a:90:4f:0e:30:7d:
24:84:7f:46:e4:6f:db:e0:ac:62:62:23:4e:66:c7:
88:bb:79:68:c1:ca:a1:4c:f4:24:58:61:a6:1c:69:
a8:c2:e4:6f:2a:a1:e1:13:e8:e7:c2:a4:f6:7e:53:
ce:14:bd:cb:29:6b:8b:df:62:3d:02:24:99:3d:f0:
9e:97:f3:41:ed:57:ba:88:4a:04:e8:7f:d8:13:d3:
2e:a1:7c:26:55:94:34:e8:1d:b8:2f:26:6e:be:b9:
9a:9d:5e:8f:88:5a:4b:23:ee:05:41:d4:b6:ac:27:
e1:40:00:cf:68:2a:d9:41:61:4a:37:a9:a3:21:10:
85:95:87:53:e3:93:f4:49:67:f2:ab:92:d8:3a:79:
aa:50:61:31:32:2d:67:03:b1:71:81:40:0a:0d:3e:
e2:98:aa:ad:5e:8c:93:3f:d9:04:df:aa:42:8f:23:
58:7a:c1:a1:29:42:52:67:b9:ba:af:35:bd:47:7c:
b2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:84:51:6A:BD:E4:5F:E0:B6:98:75:94:0F:8C:79:33:35:B1:31:B3
X509v3 Authority Key Identifier:
keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:6f:4f:2c:9d:de:c7:5c:74:69:41:d4:de:50:95:13:57:f1:
cd:01:91:56:25:8a:f8:82:45:53:36:6d:c3:4f:71:14:cf:7e:
bf:0b:1b:42:b5:a1:ef:75:41:6d:0c:07:53:49:cc:ab:f6:ca:
90:31:88:b6:d1:1d:a5:8a:45:03:5a:e9:3b:f2:3f:aa:e8:a3:
c7:44:c2:15:44:d3:68:4a:32:50:67:60:d3:a8:0c:74:38:54:
30:bc:2a:1a:d7:11:2b:09:1d:9a:2f:e4:30:62:56:00:8c:a2:
50:1a:23:f0:f5:8c:91:21:83:2f:07:7c:22:0d:7e:3e:ad:f7:
69:04:fc:53:4c:01:ab:f2:2a:fb:f5:ff:a2:c4:d9:42:f5:e6:
62:b5:df:b0:a3:0d:88:e8:c2:00:29:2f:51:00:fb:36:db:6b:
58:0e:99:85:95:e4:61:41:b9:af:0e:17:9b:90:39:d3:66:b5:
ad:98:b6:01:c6:4f:34:77:9b:ce:93:06:fc:a5:51:36:c4:66:
4c:a9:7d:c2:6e:5c:de:d0:de:b3:3a:15:78:61:12:f5:c5:96:
8f:19:c7:3c:19:05:77:7c:da:79:bb:10:68:dc:8f:81:d5:10:
fa:ef:64:6f:ec:80:f6:e8:97:45:59:1e:90:f4:13:2f:6a:a2:
4f:c4:c9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:20:58 2025 by rpki-client