Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
File: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft (raw, json)
Hash identifier: WFOWr5/joMveXifDvlqaMeXwwqgRG+HRQrXkOno6ZV0=
Subject key identifier: 7E:C0:69:CF:F2:00:F4:5A:6C:33:96:D1:FE:E9:76:D4:17:86:F4:D3
Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
Certificate issuer: /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Certificate serial: 0196753071FFF2FF0E8415CEBD30B81EEE84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 03:00:31 +0000
Manifest this update: Sun 27 Apr 2025 03:00:31 +0000
Manifest next update: Mon 28 Apr 2025 03:00:31 +0000
Files and hashes: 1: 2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl (hash: 0PCieHRV/RDSPzZ60+IgPXn2WtSphxPXqC67SngyAOg=)
2: wIuWmKQqKRafTdpQCAjgZGdOwSg.roa (hash: FSZWMB16h9Z2ZEIxjWe18pWkdzeyGtdch3JRTJHt/gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:71:ff:f2:ff:0e:84:15:ce:bd:30:b8:1e:ee:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Validity
Not Before: Apr 27 03:00:31 2025 GMT
Not After : Apr 28 03:00:31 2025 GMT
Subject: CN=7ec069cff200f45a6c3396d1fee976d41786f4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:d8:52:25:29:be:6f:c9:24:93:39:83:64:
26:f0:f0:5c:23:24:d0:4f:d8:8a:57:b0:f2:2f:39:
ef:0d:4a:44:dd:45:51:f4:38:e0:bc:d2:a4:00:81:
e3:f8:60:38:6a:8f:e3:78:53:48:79:3c:41:d0:79:
78:46:c9:51:06:4c:62:47:37:58:9a:f7:c1:32:86:
6c:a0:a9:02:73:e0:48:12:4d:cb:a6:92:fd:0c:f0:
d6:dd:66:6d:37:ed:11:d3:7a:a8:4b:ab:de:5c:85:
f5:b4:62:97:94:29:95:c4:22:cb:ca:51:69:80:94:
88:e1:4b:5b:96:5d:ce:dd:cc:39:23:53:dd:2d:a2:
05:d2:4a:9f:90:b0:9e:55:3f:14:e4:ac:9d:f7:a8:
08:ba:4c:c2:5b:f2:db:62:36:13:1e:52:f1:8f:fe:
d0:03:6c:1e:76:44:a5:44:22:a5:48:f6:4d:15:37:
ec:35:fb:b4:86:ef:e9:d5:c4:4b:ee:82:45:01:f2:
2a:15:fd:c6:1d:d3:6c:26:f0:0a:d1:6a:4e:53:ff:
82:51:a0:8d:22:c6:31:1d:d3:e1:5b:83:a8:a4:d4:
65:b4:16:dc:40:00:9e:dc:71:03:27:e2:5c:cf:39:
3e:39:39:79:5e:79:11:68:c3:9d:3f:4a:fb:f0:cb:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C0:69:CF:F2:00:F4:5A:6C:33:96:D1:FE:E9:76:D4:17:86:F4:D3
X509v3 Authority Key Identifier:
keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:59:53:77:96:bd:54:83:36:94:ed:33:6b:04:23:b4:39:6c:
c3:49:05:84:e0:55:b9:fe:a9:ef:d0:81:be:1f:a9:ba:c2:50:
bf:1d:02:71:77:02:5c:b8:76:c5:51:69:4d:6e:fe:86:db:ca:
fb:a0:c5:60:e0:4d:71:03:96:9b:ea:0c:02:ed:06:8e:e1:1e:
5e:33:22:7b:79:21:9d:05:f5:b9:fc:55:ff:e2:4c:23:8e:0e:
05:82:7f:87:25:e2:fc:1e:ed:a5:23:4c:99:f8:44:c3:62:5a:
dd:e6:66:63:79:db:48:16:cd:f4:a5:c1:e3:05:2f:f1:df:ab:
1d:af:de:b4:24:93:4e:35:36:84:1d:eb:b2:a4:16:51:58:c3:
73:78:2d:60:27:0b:19:73:d7:af:51:62:39:03:80:06:5c:4e:
5c:ec:ba:f1:ca:5f:dd:f7:57:9f:13:0f:8f:03:19:18:b8:b6:
e8:e9:c5:87:ce:af:9d:2a:b9:f9:f5:1d:e6:5e:ff:67:94:aa:
06:19:b7:4e:b4:74:ca:69:32:3b:1e:33:f7:f7:0f:d1:d6:09:
e1:c9:4d:aa:c7:ce:67:46:17:af:0c:a6:a1:f4:ea:27:03:43:
58:b4:98:87:f8:2f:02:29:48:7e:26:af:c9:4a:f7:d5:86:ff:
04:b0:d1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:18 2025 by rpki-client