Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
File: 2k9XRqbcdAthuY74LcbDPdsjjtg.mft (raw, json)
Hash identifier: y7F6UEHx4NN2SVPnptc4l3pJBc3zKr71YbvR7+V0PM0=
Subject key identifier: 3C:31:F6:C9:C3:D1:19:6B:73:C0:A5:7E:A8:45:CF:1F:81:E6:F5:6C
Authority key identifier: DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
Certificate issuer: /CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Certificate serial: 019657267118EE1EA7AA79485EACED10C071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
Manifest number: 04BF
Signing time: Mon 21 Apr 2025 07:00:59 +0000
Manifest this update: Mon 21 Apr 2025 07:00:59 +0000
Manifest next update: Tue 22 Apr 2025 07:00:59 +0000
Files and hashes: 1: 2k9XRqbcdAthuY74LcbDPdsjjtg.crl (hash: GVIW4ZU1ZCC6VO++vv047eW4nL0Oi9xzJoJvYoPJ+Vw=)
2: dxg__1hqTnA8TMbpWBwZfn6ppbM.roa (hash: kDw35iVGkJPphXSekvAqYPL9igKO28xDC7qPxSMDVQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:71:18:ee:1e:a7:aa:79:48:5e:ac:ed:10:c0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Validity
Not Before: Apr 21 07:00:59 2025 GMT
Not After : Apr 22 07:00:59 2025 GMT
Subject: CN=3c31f6c9c3d1196b73c0a57ea845cf1f81e6f56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:07:0e:71:f4:da:b9:34:42:cb:ae:7f:f1:
c9:45:68:88:ac:63:f2:b8:fd:a1:7a:46:86:a7:eb:
16:ca:ed:41:f2:7c:de:51:d6:a0:d3:e9:3c:58:e0:
40:c4:84:39:3f:ff:a4:9a:5f:92:8f:f0:cb:69:7a:
08:5f:f8:04:ec:2a:15:00:ce:8e:6c:25:36:2c:8a:
1c:3f:f5:61:d0:86:85:06:6c:2d:b5:fa:d4:e4:c6:
89:70:00:d9:9a:86:bb:55:96:8d:f0:47:5c:5a:a2:
1a:88:10:1e:24:71:10:f2:c6:a5:54:80:a3:bb:78:
24:2b:37:ad:1a:f6:e9:e4:b1:63:63:69:86:69:7e:
64:46:de:28:01:36:d9:78:39:09:f6:a2:e6:7b:f2:
72:d2:7e:2f:fb:17:b2:ad:61:6c:b6:4d:6f:c2:e6:
e4:aa:01:cb:56:92:c8:3e:32:07:fb:ae:b2:7b:12:
cc:4c:28:1c:5a:d3:a1:5f:69:cc:04:e8:0a:54:dd:
ff:52:bf:79:45:77:85:ba:0e:25:11:01:20:43:55:
0e:80:cd:37:95:73:7a:c6:29:73:8c:a5:4a:89:56:
0b:c3:7f:e1:97:cf:4f:e3:5d:aa:f1:fd:d3:98:58:
53:18:68:b0:0b:49:6c:0f:bc:ff:44:06:10:34:4c:
bb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:31:F6:C9:C3:D1:19:6B:73:C0:A5:7E:A8:45:CF:1F:81:E6:F5:6C
X509v3 Authority Key Identifier:
keyid:DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d7:a7:d6:d0:a5:94:4c:f1:d3:86:94:9e:da:c1:ee:fe:dc:
2f:22:96:e8:1f:76:33:2e:91:38:70:03:fd:18:ae:3b:ce:6c:
1e:f6:39:15:7a:a3:25:5f:69:52:97:9d:21:76:0c:42:a2:6e:
fb:55:20:12:5b:8b:4e:7d:6d:1d:7f:ca:27:26:f9:1d:c4:60:
23:d9:17:99:a1:a2:ae:da:27:4f:98:76:db:58:7c:61:55:2b:
18:b9:ad:72:10:6f:61:7e:85:5d:41:ed:73:f7:26:3c:2a:78:
df:c5:49:2f:13:50:30:83:59:50:46:6f:e9:85:6d:a0:f6:0f:
2b:e0:24:dc:2d:a2:17:0e:39:f2:a7:d6:da:a5:cf:38:10:6a:
a2:27:7b:2f:45:b3:40:5a:51:2e:9c:fd:41:82:09:3b:d7:2f:
61:82:c2:d6:9b:dc:37:6a:f4:87:0e:13:fc:b5:3e:c9:70:ed:
16:df:cd:bc:b9:b1:2d:54:79:1a:fe:30:b4:b6:74:ae:50:87:
ca:a5:03:16:ae:aa:7d:5d:b6:79:f4:57:19:e1:6e:c7:77:f0:
50:5a:0e:96:69:98:e5:0a:ba:f7:16:53:81:5e:67:3f:c0:fe:
26:f3:8b:8f:94:10:ae:b5:0c:32:8b:d9:c0:29:66:01:4d:93:
67:4c:60:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:19 2025 by rpki-client