Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
File: 2UeygTSKvawkwr0W2gZ3XKdV9BA.mft (raw, json)
Hash identifier: EHkEfPj06J66ZSE0GiJ4iMMzRr82ohF7y2Sj8uI9srI=
Subject key identifier: 55:94:41:5D:00:0E:C4:A2:4D:9E:31:1A:DE:D5:25:7F:F3:AE:7A:DD
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Certificate issuer: /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial: 019679E972D7C59DEAC4D0C880260413774A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
Manifest number: 0B7C
Signing time: Mon 28 Apr 2025 01:01:04 +0000
Manifest this update: Mon 28 Apr 2025 01:01:04 +0000
Manifest next update: Tue 29 Apr 2025 01:01:04 +0000
Files and hashes: 1: 2UeygTSKvawkwr0W2gZ3XKdV9BA.crl (hash: RvQNUau+pChIvaNTNFagpX+Nbp63tgxnMBDnRc6PYb4=)
2: FhBIS1oPkd9pTGuzUmZAfI1zqao.roa (hash: 7QOPsIrD6zeyN12zbcfLMatMMhBciTAhTQcY5qqAE98=)
3: LBfcizWSKlLS0AFemCzGH_wAzTA.roa (hash: PWrt9j2gJyGMu1EqKyEgePzznWupiIAtAIf0z5PbNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:72:d7:c5:9d:ea:c4:d0:c8:80:26:04:13:77:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
Validity
Not Before: Apr 28 01:01:04 2025 GMT
Not After : Apr 29 01:01:04 2025 GMT
Subject: CN=5594415d000ec4a24d9e311aded5257ff3ae7add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:a0:e2:12:f7:a5:12:88:2d:7a:7d:f9:40:
54:ac:8c:39:b9:91:2a:4a:10:b0:dd:cc:14:20:af:
15:b9:28:a9:91:94:1a:b4:bc:6b:09:a5:ea:1e:f1:
d6:0b:15:2a:70:16:88:5c:44:44:de:18:4c:8f:57:
cc:8c:cf:d3:32:75:e0:48:5d:fe:c6:8d:b9:5c:b2:
96:a6:4a:ca:5b:29:5a:a6:e8:a0:0e:b4:4c:3c:8b:
b8:06:13:ff:6f:a1:98:65:ea:d7:51:38:fc:c2:a8:
ad:ff:7b:75:b4:9b:1a:fa:53:ab:8a:4e:a5:97:98:
45:9c:82:79:7f:cc:cd:95:1a:cf:f7:de:f5:f3:e9:
19:c0:3b:80:8b:ae:01:d1:53:ba:a1:1c:b0:3f:37:
73:01:6c:c4:51:2f:54:bb:99:b5:f8:55:aa:c5:92:
01:a7:d6:5a:2d:30:eb:64:f2:a6:ce:20:a1:74:9e:
fd:0d:ee:7d:3c:05:85:28:b2:da:53:ff:c2:a2:17:
6d:b8:c3:db:cd:5b:39:c0:27:d5:d6:78:de:bd:f9:
e9:77:98:ad:ee:08:e1:25:a8:6a:a5:cd:60:f2:39:
43:7f:bf:09:a4:c1:9f:f3:54:95:83:3e:80:30:65:
d1:f3:09:f2:91:e6:8e:2b:e2:18:8f:39:43:d2:47:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:94:41:5D:00:0E:C4:A2:4D:9E:31:1A:DE:D5:25:7F:F3:AE:7A:DD
X509v3 Authority Key Identifier:
keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1d:03:8d:6d:15:28:a2:fd:14:cb:1e:fc:fb:4c:38:bf:cf:
ff:f4:ee:dc:9f:44:56:8f:ec:2c:8d:c4:39:cf:5c:1d:0d:05:
34:91:77:a3:8e:c7:29:45:75:91:3f:1a:df:3a:79:5b:53:ee:
02:62:95:7f:67:fb:c8:3b:98:c4:05:d3:65:5c:ab:7c:35:c3:
43:4e:07:a5:fb:e0:5e:a0:0e:3c:87:ad:a2:d8:e2:a9:c4:90:
ad:43:46:df:9f:2c:fa:88:07:7f:1e:25:1a:b2:a6:7f:c9:d4:
71:76:38:12:da:52:10:1c:91:69:5c:74:ca:a4:d7:6b:0a:10:
8e:45:16:47:b7:a8:0f:c3:e9:b9:73:1b:ff:cb:6c:a6:e9:f1:
57:02:1e:cb:75:46:cc:55:97:32:2b:67:c9:01:a6:cf:d3:72:
ab:5d:77:64:e4:c7:b7:fb:8c:13:28:ee:2e:fb:46:0d:de:f5:
39:f7:6b:40:d5:54:ca:08:4e:cf:56:83:d7:ec:65:a2:54:e5:
6b:0c:d1:ab:80:80:00:48:65:31:f1:5e:ff:24:56:65:14:94:
6c:27:40:6c:ca:37:89:dc:bb:00:f7:9d:b1:16:e3:b5:a2:3d:
e3:be:8d:e4:b5:90:73:d0:d1:f3:2b:35:11:8c:8f:a6:b0:31:
06:c9:84:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56XLXxZ3qxNDIgCYEE3dKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDdiMjgxMzQ4YWJkYWMyNGMyYmQxNmRhMDY3NzVjYTc1
NWY0MTAwHhcNMjUwNDI4MDEwMTA0WhcNMjUwNDI5MDEwMTA0WjAzMTEwLwYDVQQD
Eyg1NTk0NDE1ZDAwMGVjNGEyNGQ5ZTMxMWFkZWQ1MjU3ZmYzYWU3YWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrCg4hL3pRKILXp9+UBUrIw5uZEq
ShCw3cwUIK8VuSipkZQatLxrCaXqHvHWCxUqcBaIXERE3hhMj1fMjM/TMnXgSF3+
xo25XLKWpkrKWylapuigDrRMPIu4BhP/b6GYZerXUTj8wqit/3t1tJsa+lOrik6l
l5hFnIJ5f8zNlRrP99718+kZwDuAi64B0VO6oRywPzdzAWzEUS9Uu5m1+FWqxZIB
p9ZaLTDrZPKmziChdJ79De59PAWFKLLaU//CohdtuMPbzVs5wCfV1njevfnpd5it
7gjhJahqpc1g8jlDf78JpMGf81SVgz6AMGXR8wnykeaOK+IYjzlD0kdBLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWUQV0ADsSiTZ4xGt7VJX/zrnrdMB8GA1UdIwQY
MBaAFNlHsoE0ir2sJMK9FtoGd1ynVfQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kNjk4MzAtY2NiMS00Njc1LWFkMmYt
NjZhYzBkYmE1YmYyLzEvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9kNjk4MzAtY2NiMS00Njc1LWFkMmYtNjZhYzBkYmE1YmYy
LzEvMlVleWdUU0t2YXdrd3IwVzJnWjNYS2RWOUJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhx0DjW0V
KKL9FMse/PtMOL/P//Tu3J9EVo/sLI3EOc9cHQ0FNJF3o47HKUV1kT8a3zp5W1Pu
AmKVf2f7yDuYxAXTZVyrfDXDQ04HpfvgXqAOPIetotjiqcSQrUNG358s+ogHfx4l
GrKmf8nUcXY4EtpSEByRaVx0yqTXawoQjkUWR7eoD8PpuXMb/8tspunxVwIey3VG
zFWXMitnyQGmz9Nyq113ZOTHt/uMEyjuLvtGDd71OfdrQNVUyghOz1aD1+xlolTl
awzRq4CAAEhlMfFe/yRWZRSUbCdAbMo3idy7APedsRbjtaI9476N5LWQc9DR8ys1
EYyPprAxBsmE0Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:02:29 2025 by rpki-client