Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier: M1XCVVT0EOw6e8CfWElmxFSE+d68HFBL+RxWT4/8QDI=
Subject key identifier: 05:95:7E:6B:89:CF:BB:E4:56:68:52:8E:7A:25:93:5E:36:57:DD:86
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 0195903DF704DDB11392105AEB387B7AA12B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number: 036D
Signing time: Thu 13 Mar 2025 16:02:14 +0000
Manifest this update: Thu 13 Mar 2025 16:02:14 +0000
Manifest next update: Fri 14 Mar 2025 16:02:14 +0000
Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: PhfvOOQ/0ooB2MlI7SCieizImGKXMK+BsjR4wBx4FVs=)
2: Fx2klUP1BUQWSve4HaBQkpAiNyk.roa (hash: zJ2Tt9osikAXRixamoNp+QrAMtzbTSaAfE5Ta0gGans=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:f7:04:dd:b1:13:92:10:5a:eb:38:7b:7a:a1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: Mar 13 16:02:14 2025 GMT
Not After : Mar 14 16:02:14 2025 GMT
Subject: CN=05957e6b89cfbbe45668528e7a25935e3657dd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:d7:9e:7c:e0:50:c4:f5:af:9a:78:17:b2:
76:45:0b:49:8f:3d:30:49:63:34:7c:e9:85:b5:a3:
b0:76:4e:5c:17:26:c7:4a:e5:aa:69:d3:31:06:1c:
50:77:05:ac:6a:0d:5a:31:0f:8c:17:97:1d:ce:65:
69:1d:98:bc:7a:3d:ab:8f:b7:c0:ce:be:9d:29:b4:
e3:2d:c5:7c:f1:59:bc:24:bb:df:09:59:cf:4d:23:
5a:52:83:e4:f9:89:0f:07:a5:2b:ff:a8:ca:32:e6:
84:0d:97:37:3b:43:05:76:5a:cb:f0:23:08:84:12:
24:3a:cb:1e:66:d5:e3:40:29:c2:8a:ca:d3:38:76:
e6:0e:6a:05:d9:19:e7:0d:a2:a6:2b:be:02:26:f7:
3c:6f:c0:cb:12:e2:19:9d:74:03:77:0b:8a:39:d9:
d3:0e:cf:58:cf:be:73:fc:be:d4:3b:86:b0:2f:b9:
f9:3d:a0:3c:3f:e4:c4:67:67:9a:71:b8:a4:fa:67:
10:35:f0:7a:95:22:e1:fb:5d:ec:12:64:8a:f2:48:
4e:90:a4:d4:8b:0d:88:f9:5c:86:dc:61:40:2f:99:
5d:96:41:de:5e:84:4a:38:63:73:ce:3a:89:9e:37:
f9:84:53:ae:e4:fa:f0:a1:b4:68:52:b4:9e:7d:f0:
5e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:95:7E:6B:89:CF:BB:E4:56:68:52:8E:7A:25:93:5E:36:57:DD:86
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a9:35:ec:a5:a8:78:f1:38:03:fe:67:02:aa:ef:4e:6f:85:
1a:47:bd:77:60:b3:c9:d8:0b:03:7d:75:f1:5c:c4:d6:17:da:
92:3e:7b:fa:07:9e:cb:be:9a:86:ed:ec:9a:d0:b2:43:34:d2:
6e:f8:fa:c8:5d:f9:e1:a9:76:da:75:21:53:8f:9e:3a:21:1a:
ea:d8:17:98:ad:e0:69:15:e2:6d:56:aa:c6:84:7a:49:ef:ec:
d8:07:0b:38:71:3f:dd:91:fa:ef:52:ad:a2:1b:31:f9:d0:01:
aa:26:3e:94:bb:1c:44:07:72:ef:21:89:65:74:01:c5:41:78:
37:35:18:2b:d0:23:d0:99:3a:c1:e5:0e:99:c7:e1:b8:ae:71:
34:a3:b8:88:6c:0a:91:2e:f1:bc:65:3b:45:5f:5c:53:14:72:
7c:3e:a5:77:be:48:d6:a3:43:5c:1d:16:50:d0:34:cd:83:33:
57:0d:20:2f:ad:74:23:4b:52:8e:bd:9a:2d:8d:28:f7:b6:f6:
a8:04:5c:26:ab:09:47:d8:1f:d0:f1:6d:7e:f0:96:f4:1d:fb:
dd:9b:7f:53:9c:1f:91:ba:37:aa:1e:59:30:28:0f:9d:48:7f:
f7:09:56:db:95:65:29:dd:de:1e:61:70:30:40:97:bd:6e:8c:
48:e8:44:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQPfcE3bETkhBa6zh7eqErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYTUyM2Q1Yjg5M2M5MjVlYzNhODI2MDFmOTI3NDU4MmNl
ZmM2ZjAwHhcNMjUwMzEzMTYwMjE0WhcNMjUwMzE0MTYwMjE0WjAzMTEwLwYDVQQD
EygwNTk1N2U2Yjg5Y2ZiYmU0NTY2ODUyOGU3YTI1OTM1ZTM2NTdkZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZfXnnzgUMT1r5p4F7J2RQtJjz0w
SWM0fOmFtaOwdk5cFybHSuWqadMxBhxQdwWsag1aMQ+MF5cdzmVpHZi8ej2rj7fA
zr6dKbTjLcV88Vm8JLvfCVnPTSNaUoPk+YkPB6Ur/6jKMuaEDZc3O0MFdlrL8CMI
hBIkOsseZtXjQCnCisrTOHbmDmoF2RnnDaKmK74CJvc8b8DLEuIZnXQDdwuKOdnT
Ds9Yz75z/L7UO4awL7n5PaA8P+TEZ2eacbik+mcQNfB6lSLh+13sEmSK8khOkKTU
iw2I+VyG3GFAL5ldlkHeXoRKOGNzzjqJnjf5hFOu5PrwobRoUrSeffBeUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWVfmuJz7vkVmhSjnolk142V92GMB8GA1UdIwQY
MBaAFNqlI9W4k8kl7DqCYB+SdFgs78bwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGIt
YTQ1MDI5NWE0OTBkLzEvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGItYTQ1MDI5NWE0OTBk
LzEvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtqk17KWo
ePE4A/5nAqrvTm+FGke9d2CzydgLA3118VzE1hfakj57+geey76ahu3smtCyQzTS
bvj6yF354al22nUhU4+eOiEa6tgXmK3gaRXibVaqxoR6Se/s2AcLOHE/3ZH671Kt
ohsx+dABqiY+lLscRAdy7yGJZXQBxUF4NzUYK9Aj0Jk6weUOmcfhuK5xNKO4iGwK
kS7xvGU7RV9cUxRyfD6ld75I1qNDXB0WUNA0zYMzVw0gL610I0tSjr2aLY0o97b2
qARcJqsJR9gf0PFtfvCW9B373Zt/U5wfkbo3qh5ZMCgPnUh/9wlW25VlKd3eHmFw
MECXvW6MSOhElw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:04:06 2025 by rpki-client