Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
File: 2k9XRqbcdAthuY74LcbDPdsjjtg.mft (raw, json)
Hash identifier: 6b7tX5Et1AAfwf0RcNIla+9SzD/pKKvXwfeyBg8RwME=
Subject key identifier: 91:5D:76:42:2C:18:2E:06:60:99:D3:89:F3:27:57:5B:43:57:C0:A9
Authority key identifier: DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
Certificate issuer: /CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Certificate serial: 01967BD7627885ABE2C09565FB52C03C68CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
Manifest number: 04D2
Signing time: Mon 28 Apr 2025 10:00:34 +0000
Manifest this update: Mon 28 Apr 2025 10:00:34 +0000
Manifest next update: Tue 29 Apr 2025 10:00:34 +0000
Files and hashes: 1: 2k9XRqbcdAthuY74LcbDPdsjjtg.crl (hash: Z1YuiJ5SkOqth/10LPxsnMjcAXiBgvqdaZjYlGE5eQ8=)
2: dxg__1hqTnA8TMbpWBwZfn6ppbM.roa (hash: kDw35iVGkJPphXSekvAqYPL9igKO28xDC7qPxSMDVQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:62:78:85:ab:e2:c0:95:65:fb:52:c0:3c:68:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Validity
Not Before: Apr 28 10:00:34 2025 GMT
Not After : Apr 29 10:00:34 2025 GMT
Subject: CN=915d76422c182e066099d389f327575b4357c0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:17:ec:bd:80:6f:be:69:9d:7d:41:b9:16:cf:
a5:ef:1b:84:bb:1b:32:9d:40:dd:f6:01:c3:b8:27:
33:ed:3d:77:d8:3f:0e:93:20:f9:f4:3e:51:dc:c0:
45:c8:c4:67:00:df:d5:b7:b8:c3:66:61:2c:81:07:
bf:37:9e:09:21:a6:51:91:1d:90:6f:8f:00:c9:82:
04:6d:54:dd:53:18:e6:3e:68:b9:05:28:28:2e:32:
00:b8:af:cb:3b:bc:df:ac:1e:9d:fe:03:4c:1a:76:
6f:dd:58:a6:ac:6a:c5:73:35:d5:f8:e8:fa:03:eb:
ae:6c:56:4e:6f:1d:b0:11:80:8b:58:c1:13:d7:c5:
20:7b:22:36:a2:63:fe:72:f6:f1:75:cc:2f:77:c4:
d4:9f:07:2c:a1:c6:13:58:d3:a7:48:7c:57:e8:ab:
1c:6a:16:8e:42:9f:e8:10:80:d8:46:f2:64:3d:1e:
bb:80:ae:79:d6:99:7d:3a:6e:eb:b8:69:7c:fe:9b:
ce:47:3b:bb:13:9d:91:9a:5d:0b:ed:ac:66:b8:86:
0e:21:71:84:32:37:e0:3f:32:4c:2a:57:1c:d8:0d:
58:68:40:e2:56:8b:2d:6c:ea:98:58:04:ff:05:0c:
91:e5:b0:88:9e:76:97:a5:ca:05:4c:39:9f:92:e6:
18:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5D:76:42:2C:18:2E:06:60:99:D3:89:F3:27:57:5B:43:57:C0:A9
X509v3 Authority Key Identifier:
keyid:DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3f:28:c5:ee:3c:eb:da:86:36:d9:8b:c7:3b:7c:b3:41:03:
14:00:6f:a9:ba:c7:58:8f:bc:41:c5:33:3e:28:d8:17:19:a6:
b7:03:df:3f:93:74:1d:a9:87:ef:6d:e8:65:24:af:f4:5f:0b:
fc:a5:e4:76:dc:bb:73:88:8a:2e:08:89:29:6a:10:ee:ee:1a:
2e:c0:82:bf:87:79:94:7e:38:a3:78:4c:48:a1:88:1f:66:0d:
1e:fb:cd:00:ed:d5:5b:14:2e:2e:64:e3:2e:2f:61:52:70:70:
c7:52:be:af:16:72:8f:d0:fb:88:bd:65:4e:d7:05:3b:ef:69:
6a:f2:cb:30:28:82:6b:0b:f0:f7:43:e0:6a:f1:d5:42:30:e3:
52:5d:9d:ef:4e:4e:73:c4:ea:64:82:21:eb:bf:ba:d6:75:17:
09:de:37:1e:14:ac:75:ca:1e:e0:12:89:cf:4a:7d:23:96:5c:
4f:e3:f3:a5:b5:9d:49:04:66:6a:ed:82:0c:87:57:25:f3:f2:
60:ea:19:27:2d:81:58:ab:9d:1a:e2:ef:6f:c1:90:da:bb:20:
db:5c:a3:40:2f:79:b8:3d:fa:05:73:97:e1:c9:15:6e:ba:9e:
3e:66:27:03:06:f8:28:65:39:5f:da:96:61:d0:89:a5:7e:10:
02:08:80:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:42 2025 by rpki-client