Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
File: 2qUj1biTySXsOoJgH5J0WCzvxvA.mft (raw, json)
Hash identifier: 4JZ0FB7+92eZd6V9l8WvGCR6VX/Vyfjwezzm4MipruI=
Subject key identifier: AE:C8:93:0E:53:9F:23:04:CC:1A:47:46:0E:A1:55:DC:61:D1:61:84
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 01965EDFABAB3CD2D942CD58FCF7EA11FA6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
Manifest number: 03D8
Signing time: Tue 22 Apr 2025 19:00:38 +0000
Manifest this update: Tue 22 Apr 2025 19:00:38 +0000
Manifest next update: Wed 23 Apr 2025 19:00:38 +0000
Files and hashes: 1: 2qUj1biTySXsOoJgH5J0WCzvxvA.crl (hash: +ZvvIG3b7+axGqDY/E1HJv5SVQ+HdH1/smaQGap6JyA=)
2: Fx2klUP1BUQWSve4HaBQkpAiNyk.roa (hash: zJ2Tt9osikAXRixamoNp+QrAMtzbTSaAfE5Ta0gGans=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:df:ab:ab:3c:d2:d9:42:cd:58:fc:f7:ea:11:fa:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: Apr 22 19:00:38 2025 GMT
Not After : Apr 23 19:00:38 2025 GMT
Subject: CN=aec8930e539f2304cc1a47460ea155dc61d16184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:4b:e8:3a:f6:99:a4:ef:12:79:6c:34:23:
63:ea:37:eb:44:65:e2:ab:70:65:71:6e:33:d2:8c:
c5:0c:cc:e9:4a:9a:a6:41:c3:9d:2f:98:b2:93:70:
73:9f:43:8f:1a:eb:19:f2:f5:ef:66:44:7e:3b:e5:
a7:27:fc:c4:92:95:38:5f:0e:a7:ed:69:c2:72:0f:
79:c3:2c:1a:b2:77:29:25:b5:33:1b:aa:5a:a8:87:
3b:c7:e6:b2:25:0f:34:ca:49:f7:d4:0e:90:7d:e9:
2a:9e:e2:36:6c:28:30:54:bc:bc:7b:88:48:a2:ba:
be:fa:15:ba:be:88:c8:98:c3:b7:75:96:40:e6:41:
74:a8:7d:cf:44:22:98:fa:05:f3:4a:89:4f:07:86:
f3:20:5c:3a:c4:5a:68:56:93:fa:01:52:2d:52:2c:
26:f2:e3:a9:8b:9a:2b:f4:71:51:08:83:3b:b6:b4:
14:82:73:9a:d7:98:c9:21:7e:c8:37:49:55:6e:e0:
60:46:a1:f8:cc:3e:0e:fa:5b:c9:7f:58:b9:86:3a:
ed:2d:48:f1:48:d8:c2:0c:53:d8:2e:b7:10:6f:f4:
63:e6:8b:5f:72:15:be:09:30:eb:a2:7a:41:ad:e8:
5c:00:f1:61:d2:37:17:18:e1:fd:86:3b:7d:73:68:
62:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C8:93:0E:53:9F:23:04:CC:1A:47:46:0E:A1:55:DC:61:D1:61:84
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2d:6b:37:a3:8b:37:51:4d:08:19:5d:ec:13:44:6a:67:3d:
d8:10:63:bf:78:38:e8:c3:23:3e:00:c5:26:ee:02:50:58:8f:
58:d3:a1:e3:60:cf:c1:52:f2:68:66:df:27:16:38:0e:34:f5:
c8:f4:8b:25:f8:aa:b2:1c:ea:34:7d:c2:e2:66:aa:df:df:f9:
87:e6:0b:ab:78:ab:c5:25:13:b3:3d:2b:29:5c:f8:dc:36:3f:
3e:f4:29:51:8f:3a:95:e8:c8:d7:0f:67:bf:d8:b8:86:b2:b3:
51:00:75:7b:bd:a4:76:22:c0:f3:b4:a1:d5:ab:0c:b8:49:fd:
15:f3:49:6a:a4:03:9e:da:b4:ba:8f:a5:67:03:e9:7b:36:dc:
48:7a:14:ca:db:26:6c:e1:b7:0c:93:c3:f8:67:01:5f:21:e2:
0e:b3:aa:64:3e:3b:51:40:bf:b4:d3:dd:70:0b:3b:8a:96:da:
81:70:b2:d1:83:e3:d0:7d:1f:de:2e:5e:99:e7:b4:57:7c:92:
2e:da:f3:39:d7:27:11:64:a7:fb:20:4b:00:e5:b1:53:a4:dc:
78:38:89:71:6f:62:31:8a:2d:db:02:7f:83:7e:e0:18:ec:16:
04:c5:b0:e8:4e:09:99:91:ed:d0:fd:b4:0e:32:c4:91:fb:5b:
62:06:09:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZe36urPNLZQs1Y/PfqEfpvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYTUyM2Q1Yjg5M2M5MjVlYzNhODI2MDFmOTI3NDU4MmNl
ZmM2ZjAwHhcNMjUwNDIyMTkwMDM4WhcNMjUwNDIzMTkwMDM4WjAzMTEwLwYDVQQD
EyhhZWM4OTMwZTUzOWYyMzA0Y2MxYTQ3NDYwZWExNTVkYzYxZDE2MTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcRL6Dr2maTvEnlsNCNj6jfrRGXi
q3BlcW4z0ozFDMzpSpqmQcOdL5iyk3Bzn0OPGusZ8vXvZkR+O+WnJ/zEkpU4Xw6n
7WnCcg95wywasncpJbUzG6paqIc7x+ayJQ80ykn31A6QfekqnuI2bCgwVLy8e4hI
orq++hW6vojImMO3dZZA5kF0qH3PRCKY+gXzSolPB4bzIFw6xFpoVpP6AVItUiwm
8uOpi5or9HFRCIM7trQUgnOa15jJIX7IN0lVbuBgRqH4zD4O+lvJf1i5hjrtLUjx
SNjCDFPYLrcQb/Rj5otfchW+CTDronpBrehcAPFh0jcXGOH9hjt9c2hieQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7Ikw5TnyMEzBpHRg6hVdxh0WGEMB8GA1UdIwQY
MBaAFNqlI9W4k8kl7DqCYB+SdFgs78bwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGIt
YTQ1MDI5NWE0OTBkLzEvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi83ZTdlYjQtNmU1Ni00Y2FmLThlZGItYTQ1MDI5NWE0OTBk
LzEvMnFVajFiaVR5U1hzT29KZ0g1SjBXQ3p2eHZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALC1rN6OL
N1FNCBld7BNEamc92BBjv3g46MMjPgDFJu4CUFiPWNOh42DPwVLyaGbfJxY4DjT1
yPSLJfiqshzqNH3C4maq39/5h+YLq3irxSUTsz0rKVz43DY/PvQpUY86lejI1w9n
v9i4hrKzUQB1e72kdiLA87Sh1asMuEn9FfNJaqQDntq0uo+lZwPpezbcSHoUytsm
bOG3DJPD+GcBXyHiDrOqZD47UUC/tNPdcAs7ipbagXCy0YPj0H0f3i5emee0V3yS
LtrzOdcnEWSn+yBLAOWxU6TceDiJcW9iMYot2wJ/g37gGOwWBMWw6E4JmZHt0P20
DjLEkftbYgYJYA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:32:22 2025 by rpki-client