Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
File: 0ubd2kDXglWe5l5Q-QjhaJplqAA.mft (raw, json)
Hash identifier: qp1StDHmLE7jXenQc1Pm3zJNOVAhQH+ppRXZVsyguic=
Subject key identifier: 7A:F7:59:FD:31:A8:88:CA:C1:F8:40:3A:50:72:7B:24:6E:9C:49:62
Authority key identifier: D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
Certificate issuer: /CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Certificate serial: 01965493340EA733E2C90B0E121467AD3F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
Manifest number: 0A75
Signing time: Sun 20 Apr 2025 19:00:55 +0000
Manifest this update: Sun 20 Apr 2025 19:00:55 +0000
Manifest next update: Mon 21 Apr 2025 19:00:55 +0000
Files and hashes: 1: 0ubd2kDXglWe5l5Q-QjhaJplqAA.crl (hash: 2ilVsD8YPO9/A7Br0Cm4+pt6X78r8iQNqctC5XvSCZY=)
2: 2Bx_ZuBj3ywzIO5mlvk2Okv22hQ.roa (hash: guPg5C9izx8vPW7Ld4+sGxeIZUZPSLOzjQE1liVIecw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:34:0e:a7:33:e2:c9:0b:0e:12:14:67:ad:3f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Validity
Not Before: Apr 20 19:00:55 2025 GMT
Not After : Apr 21 19:00:55 2025 GMT
Subject: CN=7af759fd31a888cac1f8403a50727b246e9c4962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:ed:c9:1d:02:f1:75:c6:90:d8:f0:7f:61:
b7:ad:78:c7:fb:11:e0:65:26:3a:aa:9e:d5:93:29:
56:10:ee:50:b6:d8:70:6e:49:ac:82:ac:65:7a:f6:
27:9d:74:32:bf:2e:89:a3:a4:ae:88:e0:f0:85:7c:
8c:92:90:72:2c:58:a7:0d:40:73:8e:2d:0a:9f:12:
60:5b:11:7a:94:bf:f6:9e:25:40:5d:1f:53:67:60:
34:80:b1:af:f4:5d:03:1f:6a:51:9f:67:dd:4c:38:
ac:8d:25:2d:cd:70:4a:62:71:fe:e9:8e:c1:bc:38:
7f:5c:30:90:55:a7:5e:3e:ff:08:bf:27:3b:ec:6c:
d1:fa:64:62:3b:8a:6a:4e:21:68:10:a6:75:7f:e2:
ac:c7:d2:80:43:c3:fb:8a:b3:e1:79:4b:b8:33:70:
b2:49:4b:95:71:f6:c7:78:99:4e:85:bb:00:08:27:
b8:c2:02:83:a7:a6:ba:aa:5e:ef:86:10:74:ab:2f:
60:6d:fd:35:67:c3:90:7d:cb:b7:16:09:50:b8:31:
ad:21:7f:93:c4:c3:09:44:80:2c:31:3b:a5:ca:d1:
0e:c1:d8:d0:80:c0:ee:89:03:df:47:43:42:ef:5a:
c6:d3:61:66:88:38:0d:43:e9:26:97:63:9c:be:05:
7e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F7:59:FD:31:A8:88:CA:C1:F8:40:3A:50:72:7B:24:6E:9C:49:62
X509v3 Authority Key Identifier:
keyid:D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d6:a3:63:26:83:20:06:d2:06:3b:f7:9e:f5:03:57:c3:1e:
1b:81:19:27:21:d8:09:a7:86:2e:86:e2:70:23:8b:c2:8f:58:
2f:14:e5:02:ce:c6:80:b8:23:d7:94:66:d4:14:9b:87:d9:03:
71:5e:c0:62:d3:44:e9:0a:d7:1c:e0:0e:da:ca:61:18:a6:ce:
8a:ad:5f:7f:66:b6:9d:1d:39:4a:70:a3:60:90:3f:cc:17:55:
93:47:0d:09:62:b5:d9:75:2c:6e:78:1f:5f:47:7d:c8:ad:99:
13:f8:d2:24:a2:fd:a7:ba:7b:34:f1:77:ba:ef:3c:3d:9e:2a:
90:05:51:69:9c:2e:5b:4b:3a:38:4e:32:c3:6c:fe:04:ae:af:
69:55:15:4a:73:7c:83:07:9a:26:45:84:ef:7e:b9:2f:61:d5:
30:5a:7c:fc:4f:d0:fe:a1:1c:e4:fd:76:15:b0:00:38:ab:1b:
55:45:0d:fd:06:31:67:a5:81:03:fe:2d:9d:3f:c3:4e:6f:e4:
86:c8:1d:53:1e:8f:dc:7a:ef:31:48:57:18:fc:14:ef:d4:be:
69:03:2d:81:66:de:be:1b:2e:79:a1:26:c8:dd:6f:0c:3a:11:
17:65:b6:e2:91:b2:27:35:ae:ae:82:48:be:29:2a:a9:51:e2:
d8:5f:9e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:11 2025 by rpki-client