Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
File: 10zp2eGKKooGy02bCLWc12siEYQ.mft (raw, json)
Hash identifier: K+yFm8f/2MRFpaZoVohWorWNu7n15KY75ZiafLR7I8M=
Subject key identifier: 60:95:E1:96:43:14:8D:B7:20:5D:83:68:F8:6F:4A:47:86:7E:83:B7
Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
Certificate issuer: /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Certificate serial: 019655A5E6A46F974DDD2540CEAA301FC39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 00:00:57 +0000
Manifest this update: Mon 21 Apr 2025 00:00:57 +0000
Manifest next update: Tue 22 Apr 2025 00:00:57 +0000
Files and hashes: 1: 10zp2eGKKooGy02bCLWc12siEYQ.crl (hash: Uy1MbHIn84mjImLQ02S7TWOIYHwl2ziFAMa/31rY8ZA=)
2: ukTm-wxzEJj-s_OEsyy8V9c_Wr4.roa (hash: fj9aOH6SJjD+OTCiFFLafnYvA1jJNlZv9daAJcHZMJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:e6:a4:6f:97:4d:dd:25:40:ce:aa:30:1f:c3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Validity
Not Before: Apr 21 00:00:57 2025 GMT
Not After : Apr 22 00:00:57 2025 GMT
Subject: CN=6095e19643148db7205d8368f86f4a47867e83b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:72:6c:98:dd:9c:d2:cf:c7:c2:d5:b8:46:93:
8b:fa:4a:d3:0e:e0:e5:99:55:28:1b:93:67:74:4f:
c5:9b:02:84:12:6a:d0:92:b6:da:73:70:f5:03:2b:
ec:8e:0a:33:de:2c:30:a6:be:a9:29:13:1f:8c:ce:
a6:8e:15:4f:53:5f:dc:0d:8b:b9:bc:a0:7e:ba:57:
17:3d:88:89:71:84:7d:1d:99:02:06:39:f8:9a:6f:
e3:b5:8f:29:3e:0f:5d:df:d0:67:4c:68:35:19:7a:
6e:36:d1:bf:a5:01:a8:63:02:b5:d8:e9:17:5f:4c:
b8:39:36:fd:ac:1c:bd:a3:fc:d5:d6:c5:cb:27:76:
3b:9b:23:d7:93:4c:f3:e2:95:84:b3:5b:8c:3f:36:
82:67:4d:82:09:9a:57:62:95:e1:02:d1:b2:59:9a:
2e:43:8d:d1:0b:46:9c:12:0e:d3:7b:d2:18:ef:21:
43:d5:73:0a:13:87:93:98:31:ba:63:f6:be:20:44:
9c:ee:87:5d:b6:00:40:a7:5e:e6:0b:c6:16:f1:e2:
d8:5a:27:f1:b6:c0:ad:df:3f:a6:0d:bd:4b:08:04:
73:41:f3:7c:68:e8:17:c0:1f:ec:98:78:0b:50:fd:
93:43:e6:40:9b:b6:7b:39:5d:de:4e:73:bb:bf:3b:
e7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:95:E1:96:43:14:8D:B7:20:5D:83:68:F8:6F:4A:47:86:7E:83:B7
X509v3 Authority Key Identifier:
keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:89:1c:98:4a:14:d7:6c:94:25:27:47:f1:fe:be:4c:c0:78:
a4:f4:37:05:93:0a:f5:66:ee:b9:f6:f2:18:74:90:07:49:ff:
bb:6b:a7:d2:6d:17:36:22:a3:59:3a:8e:6c:cf:fd:8a:f8:c7:
57:59:bc:43:e7:fb:bd:c6:72:93:49:fe:43:69:37:b7:7a:70:
0b:53:d1:9b:3d:5c:cd:3e:be:e8:04:2f:fb:b4:9e:98:1d:85:
c2:3b:60:fb:1a:56:9f:b1:5d:b4:5a:c7:30:92:e2:4f:8b:ce:
f5:85:07:84:9f:12:52:49:19:76:83:e3:df:f0:ce:1a:da:37:
5c:6c:13:16:6f:ad:82:67:2d:6f:a7:2c:c8:2a:ad:21:46:44:
59:32:6b:0e:af:8f:c7:1d:7b:79:bf:a4:67:0b:87:99:4d:d2:
c6:1e:cc:19:db:6a:61:1f:3c:0e:5f:86:db:58:69:00:e1:e8:
c0:50:f5:a7:2c:0f:79:70:72:df:2f:53:a3:1d:f9:79:8b:82:
09:d1:73:c2:1c:c6:36:29:97:83:a3:8a:05:2d:2d:91:f1:c6:
7b:ee:18:df:d5:3b:15:65:b9:10:6f:60:bf:be:6d:83:bb:37:
2f:b7:96:2d:ed:01:4c:bb:7b:38:a6:65:90:dd:07:a0:27:a8:
5b:87:57:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:30 2025 by rpki-client