Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7abca5-77ac-4987-8a2b-52498a7dece9/1/2uVkx87d21-Job3md9roielx8BA.mft
File: 2uVkx87d21-Job3md9roielx8BA.mft (raw, json)
Hash identifier: Tvl0D0sKkymCsYyX65KvhlAEr1bYsAF8fTI8EgzuKuo=
Subject key identifier: 41:9E:24:08:B3:D0:70:FD:3F:90:3B:B2:07:5E:CE:51:D7:33:B0:D6
Authority key identifier: DA:E5:64:C7:CE:DD:DB:5F:89:A1:BD:E6:77:DA:E8:89:E9:71:F0:10
Certificate issuer: /CN=dae564c7cedddb5f89a1bde677dae889e971f010
Certificate serial: 01967A8DB8AA36359623CBA2167DE3FB33C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2uVkx87d21-Job3md9roielx8BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7abca5-77ac-4987-8a2b-52498a7dece9/1/2uVkx87d21-Job3md9roielx8BA.mft
Manifest number: 0272
Signing time: Mon 28 Apr 2025 04:00:30 +0000
Manifest this update: Mon 28 Apr 2025 04:00:30 +0000
Manifest next update: Tue 29 Apr 2025 04:00:30 +0000
Files and hashes: 1: 2uVkx87d21-Job3md9roielx8BA.crl (hash: gQqrwysj4q0/A0O9oaM16N9iszSpb3XnzcXotyR0BM0=)
2: rfglLUnXtW1bLGWSkf5ECHoCphY.roa (hash: iNTsnpqxL1z0jo4De4q7TGzAt43nrGIiUj9zY7jQRw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7abca5-77ac-4987-8a2b-52498a7dece9/1/2uVkx87d21-Job3md9roielx8BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7abca5-77ac-4987-8a2b-52498a7dece9/1/2uVkx87d21-Job3md9roielx8BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2uVkx87d21-Job3md9roielx8BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:b8:aa:36:35:96:23:cb:a2:16:7d:e3:fb:33:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae564c7cedddb5f89a1bde677dae889e971f010
Validity
Not Before: Apr 28 04:00:30 2025 GMT
Not After : Apr 29 04:00:30 2025 GMT
Subject: CN=419e2408b3d070fd3f903bb2075ece51d733b0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:b0:d2:15:e5:71:b3:92:4b:5d:d5:9b:07:
98:1e:68:e6:86:ad:d8:03:59:dd:f8:bd:02:79:02:
1c:65:2c:5c:48:9e:17:1a:4e:3a:84:40:bf:78:5e:
9b:da:5e:14:80:40:4f:2b:f6:d4:9c:da:3e:2b:76:
4c:88:e1:0a:35:81:29:0b:c1:bf:cc:51:3a:e5:d8:
17:72:e7:4d:95:57:e9:65:db:5d:6d:2b:6d:ba:58:
a8:2e:dd:3a:98:5d:49:36:9d:41:9a:85:a9:e0:ab:
75:a3:12:64:a9:24:48:b9:89:0c:4d:ed:4b:16:e7:
91:f8:89:2d:88:e8:0b:ad:6d:7b:44:ea:15:56:4d:
d7:8d:c6:d8:da:3d:5e:2b:de:b6:18:83:76:73:07:
01:1e:9a:11:8a:ae:be:4f:de:17:a4:a2:08:09:36:
44:c8:54:39:52:e4:70:c6:28:c4:70:2f:d3:81:4c:
70:8f:b4:be:1d:b7:fd:1b:16:3f:60:02:c8:58:d4:
b7:3c:4e:e5:d3:82:d8:fd:2d:83:db:5b:8c:ec:b8:
7d:21:00:ff:0b:46:a1:0c:f2:0d:b8:c5:b4:33:4f:
1d:2f:90:8b:8f:23:af:b3:7e:25:10:4e:89:1f:37:
d6:c0:c3:ef:0b:d3:a9:34:43:5c:bf:1f:88:41:7f:
bd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9E:24:08:B3:D0:70:FD:3F:90:3B:B2:07:5E:CE:51:D7:33:B0:D6
X509v3 Authority Key Identifier:
keyid:DA:E5:64:C7:CE:DD:DB:5F:89:A1:BD:E6:77:DA:E8:89:E9:71:F0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2uVkx87d21-Job3md9roielx8BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7abca5-77ac-4987-8a2b-52498a7dece9/1/2uVkx87d21-Job3md9roielx8BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7abca5-77ac-4987-8a2b-52498a7dece9/1/2uVkx87d21-Job3md9roielx8BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ee:0f:b5:c1:e9:b9:61:4f:dd:17:d1:44:29:ce:26:b6:96:
7c:87:7d:5e:ff:05:dd:76:cc:1f:94:26:10:a7:73:f7:49:fe:
4e:a0:2c:80:bf:db:ce:b9:39:84:67:5f:13:58:4b:6c:a9:be:
3a:6a:f3:fc:4c:7d:c6:df:4b:8e:bc:bd:a7:cb:87:d7:f5:bc:
8c:2a:7a:17:16:16:5e:41:a5:32:5f:17:b5:2d:54:09:92:9f:
94:12:9d:e0:8f:09:0d:bc:90:0a:3f:3d:3f:89:a3:ba:3e:55:
79:8f:c2:a5:01:a3:60:8f:09:fd:71:8c:f1:4e:0a:f9:25:58:
75:63:99:9b:73:bf:95:eb:ef:aa:71:c9:e6:79:69:14:26:26:
1f:8c:4d:93:5e:d3:14:db:d9:15:ee:2c:61:9d:50:05:a4:4f:
05:ee:a1:58:2a:9f:85:3f:18:3d:33:3a:26:b1:2f:cd:19:5e:
9a:16:90:40:f2:66:e2:ea:c9:2a:a3:c1:41:59:1d:f0:e0:a5:
d8:f2:64:9f:bb:4a:28:da:3b:94:77:63:94:cb:db:43:83:cc:
df:47:21:81:6d:d6:a0:10:6c:a8:d5:8d:f3:6b:45:63:ea:74:
83:d4:e6:88:f5:42:32:41:db:8c:ff:54:54:4f:3a:74:19:4e:
d9:fa:e2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:15:43 2025 by rpki-client