Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
File: g2pzvtdapO-ld-2QrTVi4hlR0bI.mft (raw, json)
Hash identifier: uENoNT9vphiiPyRm9ribreyYS8XOan+xiksNPEljSDo=
Subject key identifier: CF:F6:BA:40:F4:83:F0:FB:4D:B5:7C:A6:F3:0C:2D:00:40:F0:51:7B
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Certificate issuer: /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial: 019656B8000C9EFC0E93F112CC54CE6C89A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
Manifest number: 1305
Signing time: Mon 21 Apr 2025 05:00:21 +0000
Manifest this update: Mon 21 Apr 2025 05:00:21 +0000
Manifest next update: Tue 22 Apr 2025 05:00:21 +0000
Files and hashes: 1: g2pzvtdapO-ld-2QrTVi4hlR0bI.crl (hash: uKhb2xH1o85f00bMxb91L2l/qGgn9jZUPp5hWHvb8hA=)
2: pCExSDuPpylceZEh-3ghVJcWtXU.roa (hash: EmDT0awECjqFFQZyEcdl/Y2PrhZj4pSyXOCLhHqwv2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:00:0c:9e:fc:0e:93:f1:12:cc:54:ce:6c:89:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Validity
Not Before: Apr 21 05:00:21 2025 GMT
Not After : Apr 22 05:00:21 2025 GMT
Subject: CN=cff6ba40f483f0fb4db57ca6f30c2d0040f0517b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:cc:8e:7e:de:88:7f:c3:2c:a2:77:4b:fe:
13:d0:14:68:1d:d7:d6:65:58:7c:6f:5c:8c:32:cc:
55:ac:2d:9a:50:cd:38:21:dc:5a:f0:96:24:3e:bd:
70:aa:78:48:85:c6:b9:4b:df:b1:50:5b:eb:52:36:
55:2e:bf:81:a7:f3:e5:e0:f9:59:0b:f0:c2:90:9b:
00:fd:1f:81:fa:c9:6d:ce:a4:df:c3:5f:53:49:1f:
03:9d:08:9d:89:6c:bc:99:8a:f6:4e:d6:9a:94:2d:
4f:fb:a5:71:e2:12:ca:11:b6:5c:a2:e5:12:77:bd:
4f:b8:ab:95:0f:b8:94:f0:83:fc:18:e0:46:e3:6f:
b6:97:0f:9b:dc:aa:53:54:04:56:66:17:d9:96:b5:
9f:6d:9a:16:90:90:c1:c1:bd:41:3b:72:6c:7a:3a:
05:91:d4:5f:9a:81:e4:b1:43:72:a9:33:3a:0d:ca:
04:29:48:28:dd:5f:1d:60:00:ed:e4:d2:71:01:bf:
78:41:42:b4:91:52:74:c7:1d:b5:a4:eb:02:74:17:
3d:6f:fb:5f:d4:15:46:e0:1b:3d:31:7b:1f:78:0d:
e3:25:eb:3e:9b:9b:21:0c:51:5a:7f:93:10:4c:98:
f7:b2:60:1e:b5:4f:8e:c4:11:9a:76:0d:65:85:62:
a0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F6:BA:40:F4:83:F0:FB:4D:B5:7C:A6:F3:0C:2D:00:40:F0:51:7B
X509v3 Authority Key Identifier:
keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:54:f6:db:89:18:7c:96:e1:c2:8f:7c:45:c9:05:cf:f6:46:
39:83:d5:ed:e0:7c:aa:cd:f8:1c:17:1c:78:9f:53:60:10:aa:
4f:d2:de:60:bb:ba:ce:97:a8:4b:45:a7:33:34:71:53:86:b1:
02:48:62:2a:df:a6:91:c8:1f:3f:88:13:75:cb:72:93:a0:21:
ab:35:e3:24:44:96:20:77:db:58:9a:fd:3e:2b:43:68:28:e8:
bc:98:9c:5f:78:4f:05:52:de:96:2b:ab:29:4a:71:35:6b:5e:
5f:88:ce:58:97:39:f5:18:61:a5:72:b3:34:af:4e:81:47:3b:
19:84:8f:d8:92:03:5d:98:5c:74:bf:3a:24:40:c3:ba:97:41:
82:35:d7:db:d2:e8:a4:03:e0:13:5f:d8:0c:16:55:b1:47:76:
ca:d0:40:f4:b7:7e:6f:1e:7c:4f:4d:11:58:07:67:f9:fe:fc:
34:ed:1e:5f:53:6e:c8:c9:28:83:d2:9f:ca:d8:ed:fd:8c:3d:
09:bb:30:0c:43:08:a4:10:53:13:cd:c8:83:d2:90:57:d4:1c:
31:85:13:c5:de:48:51:d5:fb:a8:70:0a:80:c4:14:09:6e:fe:
bc:a2:a9:44:a7:25:0d:af:cb:0f:7c:8d:fd:6d:f0:de:e7:a8:
5a:b8:44:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:52:20 2025 by rpki-client