Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier: DXGQ+jBh2JpUWMleKVVAlLLA3o9s/6jX/yXGToxj5OE=
Subject key identifier: C1:0B:97:02:21:86:0D:50:87:31:03:ED:DC:91:7C:4F:0E:0D:5D:C2
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer: /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial: 019677FBABD1B136F0BA72F255CCC8CFDB5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number: 1300
Signing time: Sun 27 Apr 2025 16:01:44 +0000
Manifest this update: Sun 27 Apr 2025 16:01:44 +0000
Manifest next update: Mon 28 Apr 2025 16:01:44 +0000
Files and hashes: 1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: FbEnMjLFk3JCredv49cYfdwItLIqDcoxb+DggKk6/CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:ab:d1:b1:36:f0:ba:72:f2:55:cc:c8:cf:db:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Validity
Not Before: Apr 27 16:01:44 2025 GMT
Not After : Apr 28 16:01:44 2025 GMT
Subject: CN=c10b970221860d50873103eddc917c4f0e0d5dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:57:9a:09:7b:b4:ae:04:8a:9c:f3:4c:38:
bc:ea:6b:e0:31:3e:59:40:a8:93:f6:b1:8e:1d:e8:
ef:06:6c:88:b2:b0:d0:8a:af:9c:e5:ef:b7:ee:ab:
2f:66:c0:f0:64:43:b9:7c:e2:af:85:89:19:b9:8f:
1d:08:84:e0:13:45:3b:9b:ca:6e:8a:ce:41:b1:8e:
ca:8c:5f:61:32:aa:e4:61:68:fd:15:7e:26:e1:02:
11:fb:d8:31:90:da:35:a6:33:8c:d9:4b:95:a2:21:
88:5c:86:a3:02:1f:ec:36:b7:a2:d7:ef:66:07:8c:
e1:24:96:48:18:85:7f:84:a1:f1:11:55:39:5a:ad:
c1:e9:8d:e3:b7:fb:96:7e:3e:34:a1:61:3d:93:df:
bc:da:9a:bb:19:b7:3b:f2:c9:40:cd:71:3d:57:9b:
c0:cc:3c:24:d2:00:34:d4:c2:78:2b:a0:76:22:14:
23:69:48:e1:62:4a:a9:28:a5:f0:d8:e7:30:d6:fc:
35:5d:43:53:a4:c6:02:1b:53:e2:fc:32:14:97:9b:
1d:a4:4f:4a:b1:e4:b3:36:2c:02:e1:71:44:ff:9f:
f6:66:dc:53:e4:33:a9:56:00:6e:c2:61:68:b6:ca:
d6:8c:5c:5f:82:59:b6:fa:6e:12:e7:d2:15:82:f0:
62:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0B:97:02:21:86:0D:50:87:31:03:ED:DC:91:7C:4F:0E:0D:5D:C2
X509v3 Authority Key Identifier:
keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9b:3d:b0:e6:cd:30:05:48:3f:06:67:86:23:4c:8a:55:93:
55:6d:4f:cb:29:7d:79:ac:59:c4:0b:6f:7f:a3:53:ad:cd:78:
3a:f6:a3:7f:20:6a:da:8e:2a:7a:39:cc:4f:56:1c:cc:f8:fe:
45:c2:79:74:a4:fb:87:b5:8f:de:f0:09:e4:7d:b0:b4:64:fd:
93:dc:54:a6:e0:0f:42:26:03:51:eb:f5:06:af:1a:01:da:ee:
cb:5c:cd:63:16:de:1d:d7:84:01:eb:4d:25:bd:7a:22:c3:1d:
58:2e:92:2b:76:a2:3f:0e:de:e3:27:49:86:8d:81:00:e3:41:
a8:20:56:50:19:91:cf:2c:5d:1b:55:22:d7:74:da:bf:56:fa:
96:74:a4:93:cf:e2:7c:6c:18:02:4d:95:ea:44:39:e0:a9:88:
59:53:5c:54:ac:f9:c5:5b:f2:a6:a4:40:47:d6:8a:d3:e1:f3:
37:a1:fb:c4:d8:f7:39:e1:6d:7e:9c:2c:12:87:66:61:f0:25:
de:53:af:f0:b6:5a:53:00:5e:2d:87:85:20:58:be:09:45:e3:
14:94:71:e7:41:aa:87:87:33:d3:a7:b7:73:8c:56:27:58:87:
e1:d8:30:b0:35:af:99:a9:e3:1d:39:c7:9b:42:75:07:80:57:
4d:92:fb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:31:45 2025 by rpki-client