Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
File: 2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json)
Hash identifier: KW91w2ohu2jmOQgsvg5DpD39dJ8FWLM+qFP7UhOEzEs=
Subject key identifier: 07:85:9E:D6:EE:0C:AD:7A:84:99:34:A0:3C:FD:A0:46:5B:48:87:15
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial: 019654CA07B5FF8A913A7BD16F6D62B8720B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
Manifest number: 0C44
Signing time: Sun 20 Apr 2025 20:00:48 +0000
Manifest this update: Sun 20 Apr 2025 20:00:48 +0000
Manifest next update: Mon 21 Apr 2025 20:00:48 +0000
Files and hashes: 1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: QkgGF2E6ky8ZbYS0ZOjWjNHBXhevnIN7tWai2J8aYXk=)
2: U7DbhF1x3gp_yB_uvm-ZnLT56oc.roa (hash: BgWurSq7ETy/ZjmZQYeAZmnnu0X5jrDz9abGJjfRlMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:ca:07:b5:ff:8a:91:3a:7b:d1:6f:6d:62:b8:72:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Validity
Not Before: Apr 20 20:00:48 2025 GMT
Not After : Apr 21 20:00:48 2025 GMT
Subject: CN=07859ed6ee0cad7a849934a03cfda0465b488715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b6:dd:ab:3b:43:02:05:ef:94:39:99:67:95:
89:c4:35:75:9b:f7:45:51:29:67:ec:16:0b:01:06:
af:25:53:9c:53:0f:b9:d4:6f:96:15:a4:d4:17:f4:
64:a9:a9:db:10:2b:ec:4a:ef:44:ce:4b:44:b9:24:
48:bc:97:5c:e1:b7:a3:d4:06:82:6b:b5:7a:33:fa:
70:5a:11:39:85:00:22:47:6b:74:2b:3c:42:07:2e:
68:f6:af:42:16:49:2d:dc:73:d9:cc:94:3d:c1:04:
37:db:48:00:1b:3e:39:a9:85:84:c3:b7:e7:93:30:
ea:a0:66:d9:2e:af:b2:8b:a5:ac:ef:d6:dd:1b:77:
db:0a:2c:67:ee:91:b5:4d:ba:95:d5:08:f2:d3:98:
85:80:20:d3:18:33:5e:1f:8a:e3:d2:4a:4c:02:4e:
b5:af:8e:bc:73:4d:a3:ea:0c:ba:41:c5:ae:a3:66:
c3:b9:2b:49:53:4f:fd:f2:2c:67:1c:61:15:5e:e0:
aa:32:03:be:e9:3d:ee:95:43:eb:5b:e3:ad:b1:f7:
57:7c:e4:c6:45:27:28:a0:cd:9a:b9:a6:b7:ea:24:
f4:5e:a7:35:3f:cf:69:6b:29:f3:06:3a:70:34:7d:
50:4b:7e:e8:89:ae:bd:7a:2d:35:87:1f:3d:36:7d:
9e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:85:9E:D6:EE:0C:AD:7A:84:99:34:A0:3C:FD:A0:46:5B:48:87:15
X509v3 Authority Key Identifier:
keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2a:f9:5f:da:cf:d7:54:2e:64:66:61:0d:c6:5f:e4:5b:6a:
dc:e3:c6:e0:b9:8e:8f:99:1c:30:11:72:02:cb:51:8b:70:37:
71:2e:36:24:15:a5:b9:15:14:5e:df:df:6f:63:8b:a8:64:3b:
7f:04:68:48:14:59:60:f4:ac:a7:71:5f:56:96:ad:9e:5d:c7:
8e:64:69:a6:f0:6e:7d:86:ea:dd:da:db:bc:e5:55:5d:95:f9:
90:11:5b:82:76:5e:41:44:34:cd:58:97:36:7c:27:14:94:c7:
bf:b3:bb:c7:b8:fd:21:11:ef:f0:93:a9:33:1a:14:43:3e:d2:
fe:e2:8b:d0:72:a3:16:e1:52:df:22:b7:2d:0e:02:ea:01:57:
36:6a:e6:23:3a:0e:3a:bc:cc:28:05:cd:27:77:b3:04:13:b9:
ae:9a:81:78:7e:f8:e9:ee:32:2c:13:94:63:ab:4e:63:a2:d2:
88:a8:4f:14:0a:ec:63:87:04:d2:f6:09:9b:68:26:b3:20:2d:
99:bd:ed:c9:97:ad:e3:bd:ea:4d:b8:f9:4c:13:3f:83:83:a8:
b7:31:61:3c:2b:98:74:c3:6d:c8:76:0b:b8:f4:ac:3e:f2:e4:
ab:d6:09:99:8e:57:37:4e:8a:1a:99:9e:1e:68:88:23:be:01:
74:e6:e0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:25 2025 by rpki-client