Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
File: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft (raw, json)
Hash identifier: WPj1wjtqvckhZn/JEM8cRgyf75M+FEoAjBklUzx0MgI=
Subject key identifier: E3:18:C6:B8:FD:63:32:D1:29:2F:D3:EA:F5:9A:03:75:D4:5D:DC:D9
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 019646322546822FF3502CE95A352E528BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
Manifest number: 114D
Signing time: Fri 18 Apr 2025 00:00:13 +0000
Manifest this update: Fri 18 Apr 2025 00:00:13 +0000
Manifest next update: Sat 19 Apr 2025 00:00:13 +0000
Files and hashes: 1: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl (hash: siuHvG2CHaVvGNG6yFtoRTB4eTRejVjKQtorcpXU+48=)
2: a0IOHkR8Hy4G4S5yuBNMKITBrOY.roa (hash: 1vK3mpE9sJgd81KLmucTH/3OWCFME4WKb3CLP0pv4Go=)
3: rYY4LoHLKvwtUeUNSpp95Qcfcq8.roa (hash: /s16opQaCPrDK0FCkiKZL+BAqy0vK7xfbC0nU+PFPrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 00:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:32:25:46:82:2f:f3:50:2c:e9:5a:35:2e:52:8b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: Apr 18 00:00:13 2025 GMT
Not After : Apr 19 00:00:13 2025 GMT
Subject: CN=e318c6b8fd6332d1292fd3eaf59a0375d45ddcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a7:b6:51:ec:64:2b:ba:82:cc:d9:8f:69:68:
c1:2c:00:5c:ab:25:c4:a4:b9:84:db:6e:12:cd:12:
1c:b1:f4:15:f5:a2:ed:11:60:5b:d2:87:64:87:89:
58:7f:63:cc:65:ef:28:29:09:67:2a:3d:90:b6:ce:
3e:f6:bc:cb:94:dd:76:8b:bf:93:94:52:c9:ec:53:
f3:8e:20:35:82:dc:98:23:6c:75:41:a8:aa:c1:35:
6d:88:80:03:5b:ac:79:ab:39:9d:c3:be:5f:ca:70:
82:63:20:73:3c:e1:7a:13:5b:7f:02:3e:11:a6:85:
1a:e3:e9:b3:74:8b:20:ab:08:21:61:d7:5f:11:3e:
8d:ef:d1:41:67:2b:e9:1a:fc:32:14:0f:1e:a7:4c:
2a:93:2f:85:73:3d:fc:69:57:40:2a:77:29:12:98:
c1:44:60:39:a8:90:16:90:b1:08:be:9f:bf:62:c3:
08:d9:37:df:39:31:8a:ba:d9:e6:78:ea:b2:af:cd:
92:f9:c6:ce:b0:8d:4d:fb:e7:8a:2d:37:cd:28:c6:
7a:b0:23:c0:4f:e8:81:3e:db:fc:34:0a:63:ad:7a:
0b:33:34:7a:03:9a:52:87:bd:a6:0e:d3:a2:c4:16:
c7:68:b9:aa:73:fe:b6:31:9b:23:af:49:81:8c:30:
98:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:18:C6:B8:FD:63:32:D1:29:2F:D3:EA:F5:9A:03:75:D4:5D:DC:D9
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:73:10:62:9f:16:ac:83:4d:83:e4:0e:f3:9d:e2:6c:fe:04:
1e:e3:0b:67:8e:cd:12:7f:17:dc:db:eb:0e:78:72:ad:ad:91:
39:08:60:80:18:b0:85:ab:18:d4:27:c8:5a:0c:c3:61:78:dd:
98:31:91:97:f5:01:2f:89:1a:0e:57:eb:d3:39:f2:96:03:96:
80:e3:db:92:bf:7b:69:a7:08:d0:99:f7:99:ff:aa:ac:0e:82:
f8:44:79:2f:0c:67:95:08:b0:30:72:b9:82:44:e8:59:84:35:
ab:77:7e:c9:27:9f:55:f1:79:3b:59:6f:77:3c:76:44:cd:9f:
ac:e0:a1:e0:a5:d9:c0:fa:62:95:81:6d:67:fa:80:40:07:d6:
72:81:1b:37:d9:db:f0:3b:7c:44:0b:19:38:11:d0:a5:7c:05:
04:c3:9f:6f:f2:a3:d5:d1:75:fd:55:96:f5:9b:b4:90:75:62:
29:fb:d7:53:89:e2:90:e7:6d:f1:be:93:49:96:b7:77:c8:4e:
c9:34:63:ce:35:04:4e:ee:ba:8b:b2:7b:81:46:e9:ba:1a:18:
69:11:02:6b:8e:3f:25:a4:bc:e2:cd:35:a9:5c:c0:aa:0b:6f:
98:04:08:cd:1f:fc:e9:1e:53:63:a3:1b:c5:0d:8e:46:b8:64:
e4:bf:74:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:52:25 2025 by rpki-client