Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
File: 2q4t5U2ijHPxmz4E75V06ZBX8aI.mft (raw, json)
Hash identifier: uGUjX+oUjuZtH8EBFFmnOm3cRAgKL4R3GkZD/+SVa1g=
Subject key identifier: 95:AD:47:A3:95:73:95:8A:F0:4E:68:DB:D4:11:F7:48:A7:11:5C:0E
Authority key identifier: DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
Certificate issuer: /CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Certificate serial: 01968021EB1F77A6F8E673BFDC211D52C022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
Manifest number: 016F
Signing time: Tue 29 Apr 2025 06:00:28 +0000
Manifest this update: Tue 29 Apr 2025 06:00:28 +0000
Manifest next update: Wed 30 Apr 2025 06:00:28 +0000
Files and hashes: 1: 2q4t5U2ijHPxmz4E75V06ZBX8aI.crl (hash: y6eP9l+xuYe79cetzwa2C3XfMHplsQGiPzMmRCXMozA=)
2: do4MLi2XOROC_5hp-i0wtkMXxiI.roa (hash: XtNQLEaSVJ/naERfmHPmWmnX71JF7xa9zoeT8jSVaYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:eb:1f:77:a6:f8:e6:73:bf:dc:21:1d:52:c0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Validity
Not Before: Apr 29 06:00:28 2025 GMT
Not After : Apr 30 06:00:28 2025 GMT
Subject: CN=95ad47a39573958af04e68dbd411f748a7115c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:eb:31:19:81:2a:27:c9:87:e7:d1:f6:7e:33:
d0:f4:85:d4:bf:20:52:71:b8:e8:f7:10:e0:ac:36:
66:9b:e8:f4:53:1a:a3:66:78:bc:f9:41:a7:37:7f:
ae:2e:63:84:f8:65:7c:f4:f9:50:24:e2:8d:24:d9:
31:c8:8a:20:9a:2c:e0:ee:22:e8:a0:10:54:cb:9f:
6d:9b:fe:68:a2:f5:eb:6e:ac:f1:4c:2f:e3:26:20:
61:0d:2a:c9:e6:70:50:b3:4f:5d:ec:d8:d8:d5:8e:
3d:bd:74:b4:cd:ee:40:76:fc:dc:8d:fa:01:ce:0d:
71:12:67:75:35:36:64:1e:dc:9c:f7:16:38:84:09:
30:17:68:94:c2:40:51:b6:9c:01:30:d2:71:61:f3:
cb:8a:d4:6c:91:66:c3:40:b4:96:f2:34:a2:58:33:
df:8e:e3:ef:0e:f0:31:ea:6d:f0:57:19:08:39:32:
bc:c1:b9:f4:75:65:f9:5a:36:ec:4e:ea:36:ac:e2:
bd:5d:a9:49:82:a1:6a:03:5e:5d:0b:9d:75:4c:91:
1c:db:9b:6c:cd:28:89:d9:14:5f:29:e6:85:d1:ea:
ac:c9:f6:39:4d:6a:d1:ad:15:33:3d:ba:8d:da:41:
5f:88:b9:4c:1c:bb:58:ab:d1:83:17:2a:e8:88:c3:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AD:47:A3:95:73:95:8A:F0:4E:68:DB:D4:11:F7:48:A7:11:5C:0E
X509v3 Authority Key Identifier:
keyid:DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a9:b8:dc:42:63:9f:68:7e:b7:db:87:46:74:6e:ea:3c:e6:
13:84:7b:fa:49:93:dd:46:cd:3a:a8:9f:7b:c6:71:52:d2:ea:
1a:de:69:96:a1:66:f6:1e:c8:4e:f9:c9:1d:d7:7f:f9:9e:59:
f2:66:24:70:3e:12:dd:d6:6f:48:5f:00:27:bc:f2:07:88:71:
b4:9d:a0:5d:d1:d9:12:b0:96:73:4c:ad:ac:0c:cf:bc:29:3c:
ce:2f:ff:39:64:ef:80:18:35:d4:79:a7:90:42:98:68:66:86:
7f:c0:63:8c:0d:27:91:a2:58:ff:16:49:9a:4f:e3:d9:cf:08:
4f:c6:b1:78:51:f4:9f:ba:ac:1e:0a:cf:66:6f:5c:fd:66:d4:
8d:f4:df:fd:5a:59:fa:85:6b:a9:6d:b4:1e:18:a8:49:64:94:
06:e9:57:7c:0a:35:c1:e8:29:15:f6:e9:49:90:3a:4d:51:d8:
6c:7e:ba:17:8f:c0:3c:16:c7:09:a5:25:3f:0f:12:a6:2d:71:
98:e7:35:b0:c4:99:d3:6a:d8:b1:d2:29:ba:9c:bc:36:01:90:
ad:89:e5:a0:d5:07:7f:75:0d:2e:47:d0:b9:35:fa:bf:7e:76:
2c:cb:a7:51:60:64:85:70:5a:46:75:3f:f7:4f:33:a1:a0:b7:
74:82:86:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:52:09 2025 by rpki-client