Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
File: 2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft (raw, json)
Hash identifier: SWHJc4xWwu2nuNdhz6/PUib6FYnVP6xSJhSmQws04Lk=
Subject key identifier: F5:BD:AD:B7:90:C3:C2:4C:6A:8B:F9:19:7E:E3:96:11:29:BB:86:DC
Authority key identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
Certificate issuer: /CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Certificate serial: 01967C457B2E45CB678788C8DC11ABDF00AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
Manifest number: 11D4
Signing time: Mon 28 Apr 2025 12:00:50 +0000
Manifest this update: Mon 28 Apr 2025 12:00:50 +0000
Manifest next update: Tue 29 Apr 2025 12:00:50 +0000
Files and hashes: 1: 2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl (hash: qDQ7C/7GK9xtvaKPrf5DzFp3XB+5HvV6iRv+X+tn7Tw=)
2: RCgFf0XiItPjSlxmmEgqaSoxxs0.roa (hash: 2UGMZ2yZeYOIM9kVwRezFG9Ou19OaN3jo1kdBDera9U=)
3: y1bjq6t2wUukz9W6C_N_eJWE5pQ.roa (hash: rbXidQhk2TpaZB/G3C+NahAJvD9lrvrxNyxSFhR0BVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:7b:2e:45:cb:67:87:88:c8:dc:11:ab:df:00:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Validity
Not Before: Apr 28 12:00:50 2025 GMT
Not After : Apr 29 12:00:50 2025 GMT
Subject: CN=f5bdadb790c3c24c6a8bf9197ee3961129bb86dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:c6:2b:85:0a:6c:cf:ae:20:d7:f5:dd:22:
02:63:ea:0f:73:73:7f:3f:ee:d9:37:84:69:92:25:
74:8e:ff:cb:c7:e4:2e:4e:6f:bf:e9:a7:c0:e9:49:
df:b3:fb:69:0b:0b:7a:83:ff:8d:5c:5f:ae:f3:34:
9b:46:59:1e:2c:69:a2:70:d3:6d:a2:70:af:50:44:
60:c7:8a:3e:bb:f1:30:60:e9:dd:96:bf:66:84:58:
75:a1:89:c4:25:54:df:e6:6a:c1:98:4a:de:c2:1c:
22:50:57:d9:70:5f:28:e0:b6:0b:74:49:a4:4c:a0:
da:0b:cb:61:67:b0:e0:38:8d:ad:9d:a9:5c:05:95:
43:c4:6a:a7:c8:09:7d:b7:c2:a4:55:16:7c:7e:d8:
23:e0:18:b2:98:5f:86:c2:0e:8d:36:02:cc:27:2a:
50:f3:65:06:38:75:3a:81:93:a2:6d:85:d8:d9:4c:
83:89:d7:aa:8e:d7:65:66:6b:2c:ee:da:70:e9:a5:
16:26:b6:20:70:3c:03:8b:b8:97:45:89:d9:92:53:
0a:e3:31:51:54:75:68:30:05:98:6f:2a:f5:6f:a8:
9f:ac:f1:e2:a3:21:ec:e3:51:93:f7:9d:42:44:4f:
1c:86:a6:8b:7b:eb:87:21:6a:7b:bc:1f:7f:4e:fd:
ce:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BD:AD:B7:90:C3:C2:4C:6A:8B:F9:19:7E:E3:96:11:29:BB:86:DC
X509v3 Authority Key Identifier:
keyid:D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a2:70:32:d6:85:c8:0c:08:4b:0c:9c:5b:7c:8a:4e:50:25:
24:2b:25:59:ae:9c:69:96:3b:0f:06:19:88:35:0f:42:03:ad:
eb:ec:b1:8a:ee:1a:40:8c:31:a9:2f:e9:e2:91:ec:b2:11:78:
cc:01:7c:4c:2e:f0:07:59:66:78:54:d3:ec:55:d5:9a:d2:23:
69:dc:b7:0b:ea:c6:57:fd:8e:8b:8c:11:86:4c:76:02:d2:65:
d9:b4:48:a0:ef:15:2f:3c:8a:b4:3f:ba:e1:fb:c5:4e:62:42:
f2:99:6b:d0:39:c0:87:a5:c4:6a:1e:01:25:45:aa:b9:8c:0d:
bf:b5:6a:e6:31:38:94:e8:f7:ad:02:32:9c:06:d6:b7:59:ce:
2d:6e:73:95:36:0c:60:49:fd:ba:92:79:79:2c:19:f9:ff:fc:
49:de:cd:35:b9:0e:1b:bd:73:c5:1f:0e:ef:19:b0:09:0f:d5:
e8:c5:97:e5:30:1b:40:6f:ea:18:10:43:11:27:3a:b1:7c:d9:
b0:5f:14:e0:a1:72:5e:c1:c3:64:ea:1c:63:f7:b6:78:f7:a0:
ea:96:36:3e:31:6e:56:a5:b8:27:83:05:3b:93:9c:84:c7:82:
a0:3a:6d:51:49:40:88:67:fd:ee:87:e7:5f:58:1d:76:c8:01:
be:39:30:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:27:55 2025 by rpki-client