Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: HknPLvH98oA2YIYIrV8LDcBEQHYgOE+VxkzzOGwn7bU=
Subject key identifier: 8A:14:D4:CD:96:BB:E5:16:B4:00:2A:5F:89:11:AE:F6:D9:08:0E:92
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 019683FF4BEDB0B2B875C8DB88C925DB08BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 00:01:08 +0000
Manifest this update: Wed 30 Apr 2025 00:01:08 +0000
Manifest next update: Thu 01 May 2025 00:01:08 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: tyNXs8PfA/q2hDyo4i6IMIniJni4FCE8C/97mpwDpW4=)
2: 5c-0w6aFahfL-9fnU28RGSFRCeo.roa (hash: uG2DdbIC28vTwSXsN9nSmrj1NKOJXIqHJC912h/GU2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:4b:ed:b0:b2:b8:75:c8:db:88:c9:25:db:08:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Apr 30 00:01:08 2025 GMT
Not After : May 1 00:01:08 2025 GMT
Subject: CN=8a14d4cd96bbe516b4002a5f8911aef6d9080e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:dc:31:5f:e4:96:b3:28:65:34:c8:6e:05:
15:54:d9:86:50:91:39:c8:3b:f4:3e:f4:33:8e:e5:
4c:5f:57:7e:98:fa:b5:22:ce:65:74:80:1c:b1:a9:
55:00:32:32:99:92:4a:bf:b6:2d:c7:09:91:46:cd:
03:ef:22:90:cd:b4:8f:c7:eb:80:cd:42:12:8e:e9:
bb:4b:3b:49:13:1b:3d:ed:67:c6:2d:69:cc:0f:d9:
02:cc:81:02:42:c8:11:16:02:e0:7e:5e:6c:2e:c0:
1c:2f:13:eb:a3:ea:d3:a6:f4:2f:6c:4f:1b:ac:b8:
89:a8:2d:43:bd:84:34:56:66:d1:8c:4d:53:c5:39:
37:6e:b9:45:5d:ea:56:8d:05:74:61:2d:65:ea:00:
8d:ea:78:d6:8c:59:a2:d9:6a:24:e1:c4:cf:c4:a9:
42:80:bf:f1:32:e4:e7:5c:95:fa:e7:a6:53:6b:7b:
db:f3:6b:2f:32:4f:34:26:fb:21:78:89:0c:47:77:
68:6c:d2:8e:e3:4c:bc:81:bb:4a:e2:c8:97:ff:fd:
81:c5:5a:b7:53:ab:95:eb:03:41:87:b7:54:04:9b:
cb:8c:29:a9:06:04:29:4e:1e:93:5e:f7:d1:3e:56:
6c:e5:b4:b9:9e:1b:b1:de:e7:c4:ca:a1:0e:e0:0f:
07:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:14:D4:CD:96:BB:E5:16:B4:00:2A:5F:89:11:AE:F6:D9:08:0E:92
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:49:01:5d:58:98:dc:0b:d9:89:df:21:b1:01:3e:e1:1e:da:
52:12:64:f4:65:ac:69:90:7d:51:dd:a1:3b:6e:36:0e:2f:ec:
36:c8:1b:68:8b:2a:e4:76:e8:db:af:ce:03:14:38:b7:a4:7c:
fe:5e:d4:18:95:fe:ed:79:f3:e5:97:10:0c:d6:76:ab:28:de:
48:14:46:a9:2f:b6:5a:8a:b7:63:6b:c1:5c:41:d7:4a:a1:ba:
25:e6:74:89:56:44:48:c2:c3:0d:c2:e1:c6:ec:dd:dc:04:b1:
6b:f0:5b:65:28:ce:36:7e:21:ae:4d:c8:9f:88:58:63:ef:cb:
c5:e9:6c:c1:81:f7:48:0b:97:3b:45:28:b7:95:8e:ae:83:79:
85:5f:4c:7d:cd:68:71:cf:9e:4a:80:5c:35:6f:20:c8:9f:8c:
d5:bc:0a:ee:b0:2e:47:56:09:06:a6:41:c1:74:30:6c:cf:42:
22:6e:af:76:51:22:59:bd:a7:a2:9b:b8:80:09:8c:62:0b:9a:
41:9d:93:e7:69:73:5a:36:36:76:05:02:44:2d:67:b7:41:8d:
68:6b:f9:e3:79:3d:98:05:4e:59:ca:0e:b5:82:53:df:8d:6f:
ae:9d:d1:c7:2f:62:e0:77:68:a5:c7:38:0f:d6:a1:99:ae:1a:
a3:a1:7f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:20:02 2025 by rpki-client