Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
File: 2nFI11vcOc6d0uO9qnWEexezTss.mft (raw, json)
Hash identifier: wluk5Ul8nDo0wxTlRbWRj/kkDuVTB3kR5LmlSEIQu7s=
Subject key identifier: 77:86:CD:77:4A:B1:D7:92:AB:4D:D5:B7:10:39:54:10:FE:9C:F4:62
Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
Certificate issuer: /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Certificate serial: 01968B1396CA1D9D79645DF2264ED18CF53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
Manifest number: 1518
Signing time: Thu 01 May 2025 09:00:38 +0000
Manifest this update: Thu 01 May 2025 09:00:38 +0000
Manifest next update: Fri 02 May 2025 09:00:38 +0000
Files and hashes: 1: 2nFI11vcOc6d0uO9qnWEexezTss.crl (hash: AQYRXPDvy0E06ocXL6tVr0IwzonhG549mRzr+wKEm2c=)
2: 5p4iEJjCWHg2NCuzUgou4J5Rpxg.roa (hash: NfyhhVjM+im96vYLz64L3GHHSJz/s1weqZvBCCm8Yaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:96:ca:1d:9d:79:64:5d:f2:26:4e:d1:8c:f5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Validity
Not Before: May 1 09:00:38 2025 GMT
Not After : May 2 09:00:38 2025 GMT
Subject: CN=7786cd774ab1d792ab4dd5b710395410fe9cf462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:09:05:d2:43:57:36:20:9c:a9:6a:3a:d8:02:
be:06:fd:f0:e7:17:c1:ad:97:a9:02:8d:bc:7c:f4:
40:1f:cb:75:95:af:b8:60:87:2b:4d:ee:87:70:25:
7c:df:ac:da:c9:45:4a:0b:bb:ae:69:d3:fe:f9:ce:
37:e7:88:2b:0a:f8:2a:47:d3:4a:58:ff:97:0b:d8:
03:73:a1:1f:ff:0b:dc:4a:c6:8a:d1:45:06:4d:f6:
16:21:8e:af:af:0b:f5:66:01:e8:5c:a9:31:fd:a1:
60:49:7c:58:c6:14:09:38:fa:3d:ca:9a:f3:48:7c:
90:4e:02:4a:53:19:fe:dc:26:07:46:e6:89:19:1c:
06:62:a9:d1:cc:e4:cb:21:f4:ca:1d:9e:12:35:1b:
c9:ef:dc:96:6f:7f:3d:1c:92:55:6b:7e:0c:48:70:
47:ac:a5:c0:d7:4b:bb:64:31:95:9d:22:5d:7b:ab:
e8:ea:8c:bc:fc:db:a5:fa:81:c8:04:a6:19:05:45:
a6:2b:cb:0d:8f:b5:6e:f9:43:fd:9c:db:f7:d5:a2:
02:55:55:74:ca:67:c9:b1:67:de:e8:d4:09:17:88:
00:20:03:e3:43:30:a1:40:c5:d3:ba:c1:64:b9:d6:
84:b1:2b:cd:af:cb:88:7d:ca:40:79:43:03:62:8c:
88:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:86:CD:77:4A:B1:D7:92:AB:4D:D5:B7:10:39:54:10:FE:9C:F4:62
X509v3 Authority Key Identifier:
keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5f:fa:37:f2:c1:a6:49:44:aa:bc:0a:10:0e:88:88:21:98:
38:b4:20:fa:ab:70:56:15:88:61:3a:c3:47:8c:83:92:98:0b:
be:1c:9d:70:1e:26:1d:a1:f7:be:68:67:be:fe:8e:53:93:a5:
f5:55:53:b7:ea:2f:6a:7f:e0:a0:e4:90:21:b3:ff:6e:a4:ec:
b0:4c:36:b6:a3:99:8a:fe:62:95:98:ab:32:ef:e5:3f:70:fc:
5a:9f:8e:1f:8e:e8:81:8d:9c:c3:f6:86:31:f5:a5:21:43:d2:
e4:66:e8:3f:3e:6c:b8:c6:b8:1f:43:24:35:f3:f2:a7:06:60:
81:aa:d2:c7:e6:90:ed:96:a7:bf:f4:90:73:b8:8b:39:a8:a1:
8e:98:1f:74:20:e9:60:a2:b8:f8:cb:41:68:4a:59:93:0c:c9:
05:f9:8e:78:10:f6:e5:0b:ff:3e:41:6a:fe:55:e9:44:5d:36:
d2:46:85:5b:f1:92:b9:b5:b8:fe:b2:cb:20:b1:c8:99:42:bf:
8b:0f:ed:15:a2:e2:07:cf:bd:f8:92:90:10:e9:aa:05:39:11:
5c:8c:bd:a1:52:cd:71:4c:7a:3f:ba:77:8c:12:67:74:76:52:
dd:e9:94:e9:6e:d0:f8:d1:c9:92:d5:a9:22:21:9c:ea:06:4a:
24:f8:ee:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:08:20 2025 by rpki-client