Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
File: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft (raw, json)
Hash identifier: MoqYF2/qfLMA9axdgqbc1CdE5ferqVLKW7gZS9E/pS4=
Subject key identifier: C1:FE:3C:00:DA:6B:B1:45:57:BE:86:4B:8D:02:C0:88:13:E6:65:07
Authority key identifier: DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
Certificate issuer: /CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Certificate serial: 019679444939D5F5A5FE6636C2171312E403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
Manifest number: 0230
Signing time: Sun 27 Apr 2025 22:00:40 +0000
Manifest this update: Sun 27 Apr 2025 22:00:40 +0000
Manifest next update: Mon 28 Apr 2025 22:00:40 +0000
Files and hashes: 1: 2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl (hash: dJ4wK0EPxB4MfpqQ1g+DEmpcDfaCwukUgO1mtDZ5Cxw=)
2: pZjQfG12G_tUKYaEkvnLZUTVbws.roa (hash: dmPm4kVANU0TIQJn0Fmatq8TN1c2CZw4+USK4XmWGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:49:39:d5:f5:a5:fe:66:36:c2:17:13:12:e4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa12ed63a484c03d4c3c271cb2eff0553e12370
Validity
Not Before: Apr 27 22:00:40 2025 GMT
Not After : Apr 28 22:00:40 2025 GMT
Subject: CN=c1fe3c00da6bb14557be864b8d02c08813e66507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:c0:37:d2:e4:77:0c:83:1c:13:fe:fa:41:
1a:af:4f:69:ab:c9:d1:d1:b0:57:a6:0f:74:57:db:
d1:d5:f0:81:55:c6:94:33:db:7d:6a:fa:d4:d8:e6:
d2:c1:ad:69:dc:89:16:b7:30:20:52:00:48:8b:95:
ae:bd:5c:9c:16:b9:1c:77:59:01:30:23:39:88:47:
77:7e:e0:b9:e1:2e:90:16:a7:d3:40:c6:92:0b:d7:
7c:70:a1:76:54:f3:b9:2e:42:8d:2d:48:69:6c:9c:
8d:58:93:3d:71:bc:43:b8:56:3f:1c:69:e7:0e:68:
d1:88:7a:52:97:e2:64:50:0d:58:5c:cd:b6:70:8f:
09:f0:c7:ce:d7:3f:55:80:eb:6f:3f:3b:1e:38:4e:
f9:ec:87:1f:2a:c3:18:fd:8f:88:9d:a2:26:61:79:
f5:39:ff:70:f1:55:72:8e:5c:ca:e4:f3:88:4b:62:
0a:da:8a:f1:08:4f:9c:a0:4a:22:af:76:0e:b2:38:
e0:e1:18:b7:78:af:55:4e:bc:f1:ed:f1:06:fd:4b:
24:e9:85:e4:f4:f5:e6:38:77:95:69:18:9d:e2:a2:
cc:a7:ba:ee:8b:1b:7f:12:47:52:7b:df:bd:52:5f:
b1:55:d3:b6:fa:ad:aa:1c:e0:9e:35:2d:fc:de:98:
c5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FE:3C:00:DA:6B:B1:45:57:BE:86:4B:8D:02:C0:88:13:E6:65:07
X509v3 Authority Key Identifier:
keyid:DA:A1:2E:D6:3A:48:4C:03:D4:C3:C2:71:CB:2E:FF:05:53:E1:23:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qEu1jpITAPUw8Jxyy7_BVPhI3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/da374f-d694-45e2-94e2-91a0034a989e/1/2qEu1jpITAPUw8Jxyy7_BVPhI3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:91:0e:48:27:68:45:6e:4e:15:59:ba:ad:db:a2:ca:50:56:
75:3b:ad:bc:01:b7:39:4e:1c:25:00:e7:a0:ea:7e:14:49:94:
9d:04:13:97:df:f4:4e:68:38:f9:3b:7c:da:05:8e:a2:9b:44:
ba:a9:ae:70:d3:66:01:79:ef:61:73:02:fd:e4:01:b6:67:4a:
c6:02:c9:35:b3:ce:f0:14:86:94:00:ee:0e:e7:61:56:1f:97:
4b:22:0b:f2:44:92:5d:8a:86:bd:86:d0:2f:8f:99:79:64:41:
ff:fc:19:8d:d1:ee:27:0b:a0:e0:45:e1:3c:e9:c6:78:c2:93:
2a:98:1d:fb:e9:42:56:32:89:98:62:dd:4a:24:04:66:a2:6b:
60:b9:13:f4:75:39:e8:4a:01:46:f2:0c:80:72:12:39:83:73:
6f:7c:2f:b0:1c:0a:df:aa:99:f0:bd:12:3b:8f:47:76:60:ba:
46:46:ef:16:a0:47:0f:40:05:5e:8b:73:fd:2d:23:3f:41:21:
0c:aa:8c:df:a8:99:78:73:c1:3d:11:8a:80:b3:6c:e2:56:ea:
c9:b1:58:f2:87:6b:78:f9:2d:9b:0d:19:f8:62:3e:19:a1:9e:
c8:f9:c1:8c:bf:48:c4:4f:41:69:4c:8d:53:3a:cf:77:71:13:
c5:00:4e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:37:43 2025 by rpki-client