Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
File: 2dHiILYBtn_jDLt7fBvyL74i-08.mft (raw, json)
Hash identifier: 23bFDFkUW/VuxlbHa0GWCpx1gtRd0sGd+wXBB/nOk/U=
Subject key identifier: A0:EB:9A:CB:FF:0C:D2:3A:6A:09:F8:F8:85:D6:2C:69:A4:0C:2A:B1
Authority key identifier: D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
Certificate issuer: /CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Certificate serial: 0196A05186F106CFF15A076119E9F0425F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
Manifest number: 09B2
Signing time: Mon 05 May 2025 12:00:19 +0000
Manifest this update: Mon 05 May 2025 12:00:19 +0000
Manifest next update: Tue 06 May 2025 12:00:19 +0000
Files and hashes: 1: 2dHiILYBtn_jDLt7fBvyL74i-08.crl (hash: J7CDQnA6lvjr+BQyaJxjqFGZ/ROmLlBgiv2IOEhEXOw=)
2: jIeL0Ff1YswP2z65Y_1AGOy9fmw.roa (hash: OwVjmKWjz0aDaa4mX/kuMdsef7BkmTlqjQTaGRRWwQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:86:f1:06:cf:f1:5a:07:61:19:e9:f0:42:5f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1e220b601b67fe30cbb7b7c1bf22fbe22fb4f
Validity
Not Before: May 5 12:00:19 2025 GMT
Not After : May 6 12:00:19 2025 GMT
Subject: CN=a0eb9acbff0cd23a6a09f8f885d62c69a40c2ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:62:08:da:a4:26:46:18:11:f8:28:8f:cd:
1b:6c:e1:fe:fd:63:fc:fa:47:ea:ec:34:3b:2d:25:
41:62:45:b9:ba:08:e2:49:02:f1:f6:67:a9:62:88:
b0:9e:14:be:f4:eb:61:4f:1a:65:19:7e:a2:06:2e:
b1:c5:10:98:3b:df:80:09:a1:6c:92:48:4a:84:93:
76:2a:c8:41:64:89:dc:2e:2a:56:6b:28:6b:5e:d1:
cb:70:fc:40:70:f8:6a:9d:bc:0b:57:f3:8e:96:cb:
c1:6e:23:af:b7:74:18:03:42:b4:5d:e2:16:d0:c2:
b1:47:4d:5a:79:b8:c8:97:98:48:ef:23:16:9e:41:
65:a4:54:b5:98:eb:2d:fc:ea:8f:86:43:8a:51:57:
bc:4f:07:2d:53:c4:8d:76:fc:b6:7e:9c:a2:28:db:
9a:ae:cb:d4:e6:d2:e4:ac:ff:8b:13:41:21:d3:6b:
bf:eb:d9:d0:48:a7:9a:a9:a9:7a:c0:41:9b:e3:3a:
80:9b:93:d5:40:25:4f:ff:a3:82:50:3c:ff:00:8d:
27:74:62:69:77:31:49:b5:33:93:c1:f4:ba:97:c1:
35:e7:83:fe:a8:3a:cb:6d:5e:70:45:d8:53:01:8b:
8a:3b:da:53:83:bd:23:84:95:e8:9f:ef:e8:5f:dc:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EB:9A:CB:FF:0C:D2:3A:6A:09:F8:F8:85:D6:2C:69:A4:0C:2A:B1
X509v3 Authority Key Identifier:
keyid:D9:D1:E2:20:B6:01:B6:7F:E3:0C:BB:7B:7C:1B:F2:2F:BE:22:FB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dHiILYBtn_jDLt7fBvyL74i-08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/64119f-9684-4284-b232-af27d7ca1bf6/1/2dHiILYBtn_jDLt7fBvyL74i-08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:df:df:73:7a:76:d8:24:37:cd:13:da:db:21:1f:7c:12:6a:
3e:c0:ad:ec:a7:bd:72:e7:c3:8a:fb:19:4a:ac:96:41:74:30:
36:cd:0e:cd:1e:62:f5:9c:d3:20:a3:5c:3b:02:f2:c5:c7:85:
cb:de:35:1c:8a:42:09:a2:27:f8:3e:77:50:82:5c:2e:d5:1b:
f5:f1:19:d3:06:c4:cb:3a:13:1f:db:92:7b:8b:6f:7c:e2:05:
44:42:c9:b6:f0:d0:43:c9:0f:cb:dc:90:24:1d:06:a0:de:b9:
f6:2b:78:63:9f:37:6b:91:23:0f:47:4e:a4:f5:38:8a:88:44:
ed:a8:4e:42:b6:0a:22:48:64:82:89:17:ac:55:cc:f1:21:f5:
03:61:e9:73:4c:19:a0:3c:c9:d5:c9:e3:3b:be:a5:6c:de:b5:
d8:11:da:60:5d:a0:1c:5c:ce:3f:0f:c0:e0:6b:6e:68:75:45:
46:ca:57:38:7c:ae:b9:65:23:23:ac:2e:1c:b5:c1:24:d3:48:
75:cb:2a:8c:92:3e:5f:4a:c1:af:7c:c4:86:eb:92:d4:b3:ca:
ba:3a:e5:d2:19:32:f8:42:88:b2:b4:6f:ac:11:f4:97:b5:23:
46:75:bf:cf:5b:25:c4:2d:d1:f8:30:12:f2:98:d3:7b:5f:c8:
1f:58:02:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:36:13 2025 by rpki-client