Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
File: 2nFI11vcOc6d0uO9qnWEexezTss.mft (raw, json)
Hash identifier: qgk0kMU2ayp9fHX/fnRwtDet3i7/VoPzOFHdDRM1Cx4=
Subject key identifier: DB:A5:E0:8D:90:11:5D:80:68:7F:61:0E:ED:67:E7:FD:8D:E9:F6:EA
Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
Certificate issuer: /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Certificate serial: 0196835A14D68A2B35AA88F42B50702C3183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 21:00:40 +0000
Manifest this update: Tue 29 Apr 2025 21:00:40 +0000
Manifest next update: Wed 30 Apr 2025 21:00:40 +0000
Files and hashes: 1: 2nFI11vcOc6d0uO9qnWEexezTss.crl (hash: cRRmB/OgqfGJwh6aVKZzfRGlCqVIraHtxMRF4iwlj+U=)
2: 5p4iEJjCWHg2NCuzUgou4J5Rpxg.roa (hash: NfyhhVjM+im96vYLz64L3GHHSJz/s1weqZvBCCm8Yaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:5a:14:d6:8a:2b:35:aa:88:f4:2b:50:70:2c:31:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Validity
Not Before: Apr 29 21:00:40 2025 GMT
Not After : Apr 30 21:00:40 2025 GMT
Subject: CN=dba5e08d90115d80687f610eed67e7fd8de9f6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:02:b1:e7:ce:3d:76:b4:de:93:72:d9:31:
fb:ca:80:23:22:b8:fd:48:e7:a0:fa:c0:f9:76:70:
83:4a:43:9b:5f:0d:bd:e5:97:6b:46:e5:f0:92:e6:
13:8c:00:4d:89:a4:f5:c2:3a:e5:8f:e8:c1:1f:ca:
1c:ec:f5:31:bc:c6:28:34:f9:a6:00:02:9e:6c:29:
db:39:28:fa:84:f7:87:25:6e:18:0c:24:15:be:1b:
f6:fc:43:9e:c7:44:8f:80:40:26:f4:ee:5c:ac:68:
30:e1:5e:ba:1d:ba:66:5c:e0:e6:fb:77:8c:ed:45:
89:88:04:e5:6d:5b:b5:4b:b1:02:45:a5:a8:c2:6b:
14:d3:21:cc:de:87:4b:95:41:ab:8d:f5:1e:71:51:
47:10:04:d6:f3:90:e7:a4:dd:37:96:89:be:11:87:
ad:91:f1:bf:91:b9:e2:07:14:a4:7a:b3:b1:31:b3:
7f:63:d2:9d:b8:86:84:cd:95:ec:bc:a0:e1:71:a9:
4b:13:50:f7:d8:5b:32:ed:c7:90:88:a7:b5:cd:39:
49:57:d8:c5:2d:06:5a:06:05:58:b6:d7:e9:77:7e:
18:80:3b:e8:fd:b8:e9:a2:58:b6:27:cc:4f:24:7e:
f9:10:56:dd:ac:6a:5d:33:bb:16:6c:1e:69:c4:eb:
dc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A5:E0:8D:90:11:5D:80:68:7F:61:0E:ED:67:E7:FD:8D:E9:F6:EA
X509v3 Authority Key Identifier:
keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:99:e2:67:c3:4d:2d:42:fb:12:a0:fd:9e:75:70:f0:28:e3:
08:70:22:1e:80:bc:60:c9:9e:d3:75:c4:9f:19:c8:28:cc:52:
f8:9f:b7:1f:c6:61:c6:e9:43:9f:72:59:8e:9f:be:81:bd:5d:
34:4c:20:5f:2a:70:28:b4:fd:a2:0c:c8:37:32:68:55:6c:b3:
a8:a0:a1:d2:79:1a:b8:16:50:1d:ab:66:b7:03:8e:27:29:0f:
21:b3:10:c0:29:6c:82:5c:d4:e8:07:d9:58:f4:e9:f4:38:94:
3c:dd:53:ff:76:3d:19:d1:20:d7:83:b9:4c:8d:16:89:11:f5:
02:a7:b3:fa:97:eb:e2:ab:dc:c9:5c:ac:c8:9e:20:8f:ca:3b:
c9:b3:40:97:3f:3e:32:32:81:23:1a:cb:7c:31:81:95:0d:4d:
6b:c5:5e:1a:23:1c:23:42:ef:9e:0f:1e:3b:48:49:e9:d8:83:
d4:31:cb:c2:e3:23:32:de:e2:28:6d:07:4f:26:aa:79:f2:d9:
f8:f7:b7:6c:cd:e6:8d:6a:5e:21:c5:f5:21:b5:6b:3b:e0:0c:
78:43:02:51:e7:d3:53:72:70:59:be:05:ab:59:04:6f:08:66:
a0:65:72:9a:32:4a:05:31:7b:a0:bd:37:aa:f1:5b:0c:87:db:
db:fb:a8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:06:23 2025 by rpki-client