
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: kQhtAcQFDA/FZBKjiZr04xPrABcMetaH2jHYQQETp5E=
Subject key identifier: F6:77:A2:25:6D:38:D9:71:F3:63:F6:D3:19:F3:E9:0C:E7:C6:C9:80
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 019674C2DC2D01B32F4C42D5EC3B00D88EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 0C53
Signing time: Sun 27 Apr 2025 01:00:49 +0000
Manifest this update: Sun 27 Apr 2025 01:00:49 +0000
Manifest next update: Mon 28 Apr 2025 01:00:49 +0000
Files and hashes: 1: 0BDV4PoV5X4F__dwougvjtVPUss.roa (hash: 5WR5nSOIx+2EG8VqhNW6h1a6KSmwaUeuiPobGGbu1LU=)
2: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: L/LVU6a0DsdWqLj6lSVBnnqKdst/XmfzUKMlfGQTYXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:dc:2d:01:b3:2f:4c:42:d5:ec:3b:00:d8:8e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Apr 27 01:00:49 2025 GMT
Not After : Apr 28 01:00:49 2025 GMT
Subject: CN=f677a2256d38d971f363f6d319f3e90ce7c6c980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:58:7b:91:2c:26:14:68:5a:4e:0c:48:52:
3b:52:c0:d7:6b:ac:86:16:67:b6:5c:70:bd:e9:86:
96:bf:30:b8:8a:f0:ff:cc:63:70:5b:94:12:a6:2a:
86:9c:70:a0:ad:54:0b:10:8e:04:c8:fc:d5:a4:42:
95:36:81:2c:31:18:cf:2c:a7:1a:8d:07:ff:95:c0:
5f:94:95:25:2e:06:cd:37:dd:17:0d:a1:ff:f4:8c:
69:41:68:1a:a8:19:df:fb:46:11:7f:43:2e:f3:2d:
39:f0:f4:27:6d:1a:1a:6b:32:46:cb:d4:fb:3f:91:
dd:9a:7d:86:56:88:00:2e:e8:89:50:8c:0c:84:1d:
91:4a:87:9a:f3:db:e7:79:e3:41:1e:80:2b:0a:08:
30:5b:4e:25:be:0d:a1:fa:21:af:ae:5f:e9:3c:e1:
2a:f6:fc:0f:c0:9b:f5:fb:a3:64:25:4f:a7:43:a2:
a2:dd:68:cb:9d:ea:8b:2f:a1:af:35:c6:e8:41:97:
9f:fc:8a:af:0c:cb:66:10:4b:df:c9:bb:f6:d9:35:
d8:dc:f3:7b:31:24:7e:c0:25:f1:3f:f7:3b:8e:8f:
ec:1b:fc:a1:10:8d:69:1c:4c:a9:d2:78:df:de:9a:
44:bd:0e:e9:b1:6a:d6:a4:65:84:dd:bd:58:fa:8b:
93:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:77:A2:25:6D:38:D9:71:F3:63:F6:D3:19:F3:E9:0C:E7:C6:C9:80
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:8e:91:e9:8d:4f:52:14:f0:29:d8:11:18:6a:d1:a3:b8:5e:
d8:90:71:b0:54:01:50:d0:4d:39:7f:0b:1f:d4:e8:fd:76:f2:
1a:8f:2f:9a:54:83:d4:4f:48:9c:27:7f:ac:19:63:fa:4d:d9:
32:62:65:45:2d:7c:98:27:9b:1d:cd:f4:a9:38:1f:40:5c:97:
d6:a4:d8:30:d4:c1:a5:f4:44:5a:36:80:f4:2d:1a:da:02:cc:
80:f4:e5:9a:7e:bb:9a:71:87:68:9d:f0:f1:01:e6:28:3f:89:
65:69:6d:b0:35:de:99:fb:be:3f:20:8c:01:0a:ec:35:bd:3b:
77:56:c1:19:54:d0:2a:c6:36:a6:82:60:08:76:51:73:2a:51:
e8:c9:b4:ed:0c:4f:59:0a:e9:84:32:e6:a0:86:ae:39:6f:39:
49:ed:ac:87:1e:b1:03:7d:f3:cc:86:18:f8:ad:b9:48:56:f6:
d4:f3:b9:be:9b:b0:b5:4f:02:d4:02:06:ad:86:db:fb:f0:d6:
11:36:cb:61:4a:0c:cb:f1:55:91:2e:c6:6a:cb:9d:dc:ac:24:
ad:c4:6f:36:eb:b0:75:a2:45:fb:41:16:0c:6c:9e:a9:68:0d:
d2:8d:74:45:98:a3:6f:35:b3:b5:3c:fb:2f:d2:f4:ef:c0:4a:
46:06:8e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:17:38 2025 by rpki-client