Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
File: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft (raw, json)
Hash identifier: J50Cjl/guIEtm4XgaghohHvcGl7A4yhiUT1Fb87rvUg=
Subject key identifier: DC:F3:7C:56:1E:4E:B8:27:DE:F0:F6:1C:CE:EB:83:3D:E7:AD:59:97
Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Certificate issuer: /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Certificate serial: 019677C3E2C08127F317B6112915F6D0F3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
Manifest number: 0CEF
Signing time: Sun 27 Apr 2025 15:00:48 +0000
Manifest this update: Sun 27 Apr 2025 15:00:48 +0000
Manifest next update: Mon 28 Apr 2025 15:00:48 +0000
Files and hashes: 1: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl (hash: Qc9y1GGwqZW0XYNRkDksSjts3Zs4WY8xvHTKpEE+TRk=)
2: rK_Cs7Dz6iUX_MoKD-Xocnfo1R4.roa (hash: b1uXDovLrtEkVyA+DIE0O5ACHvWcfbWlFzT0S+Ih5Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:e2:c0:81:27:f3:17:b6:11:29:15:f6:d0:f3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Validity
Not Before: Apr 27 15:00:48 2025 GMT
Not After : Apr 28 15:00:48 2025 GMT
Subject: CN=dcf37c561e4eb827def0f61cceeb833de7ad5997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:85:70:df:a8:29:de:ec:32:65:2c:cf:7d:
64:e3:f8:ed:a1:fc:4b:7e:0f:22:65:06:9a:d8:77:
88:fe:be:3a:4f:f2:b8:96:10:f0:5d:75:80:07:ee:
7f:c2:a8:b1:c9:80:e0:5d:64:49:83:03:23:a9:c6:
37:61:9c:37:63:29:0f:63:e4:be:94:b6:cc:9e:e4:
ee:9e:90:cd:0c:cb:53:95:14:80:3f:b2:01:d7:1d:
5a:d5:45:ec:82:0c:dd:d1:f1:e1:df:a8:97:72:7f:
43:3d:a8:7d:24:71:f1:6a:bf:b2:08:2a:9f:be:fb:
3b:ac:25:40:08:1c:91:9f:c4:7a:8e:6a:d9:e4:00:
f0:f1:0a:5c:16:8d:45:6c:f8:77:22:e0:81:17:98:
5e:01:85:d2:8d:0f:5a:ec:e8:27:7a:6a:27:f2:20:
90:f0:7e:67:b6:60:9b:4d:da:3d:53:17:45:a7:a5:
92:94:ef:5c:c5:dc:b2:1f:34:8b:e2:97:87:61:7b:
0a:3a:25:7a:e1:3c:2b:d5:8d:8f:9b:a9:0d:fa:0c:
e7:db:9f:3b:31:a7:a3:26:15:c9:7b:cb:bb:86:2e:
19:c3:24:d5:80:0c:d5:f5:ff:3a:d6:82:0b:0c:27:
4c:89:18:9d:6a:50:7d:c3:a6:e3:e5:04:d4:08:3b:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F3:7C:56:1E:4E:B8:27:DE:F0:F6:1C:CE:EB:83:3D:E7:AD:59:97
X509v3 Authority Key Identifier:
keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d2:c7:34:b1:4f:c0:18:ea:a5:99:8d:52:91:5f:4f:e3:09:
50:bf:46:ab:53:e2:fc:12:1a:77:39:8b:1e:31:de:33:fb:09:
d9:31:02:ea:7a:ac:92:3d:90:e5:ad:58:0e:2e:d2:19:74:63:
8a:5d:f7:dc:ea:55:7f:99:df:e5:c6:0f:41:22:5e:77:6d:97:
19:f6:4b:fc:2b:ca:ae:80:fd:f1:5d:4b:e7:52:71:3b:1b:8a:
49:68:84:fa:e4:08:01:df:8f:33:00:8a:99:ae:4e:58:53:30:
b0:28:df:ee:45:ce:92:a8:c6:d7:a8:6a:91:a3:28:61:b0:a0:
7a:3b:c8:67:cc:31:b2:25:b7:8e:bb:4b:75:44:79:53:0b:09:
50:e2:13:67:9d:90:ee:1c:74:3c:b1:e5:a7:32:24:11:3d:33:
4d:9b:ac:04:ff:87:d5:c1:99:b8:9e:c7:33:d8:0b:ae:58:38:
8f:88:fd:c3:56:10:b3:a3:3c:76:c6:5c:52:91:a9:fc:13:ab:
95:dd:4a:5c:b5:99:7e:c4:13:1c:21:bb:a8:de:ac:5e:c7:5c:
a3:c1:cb:3a:55:e3:e6:d4:d4:50:6d:d4:db:c7:74:9a:6a:2f:
0b:d4:3d:2b:d9:bc:ab:4a:46:2e:8f:9d:18:70:ce:d6:37:7f:
7d:fe:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:27:02 2025 by rpki-client