Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
File: 2nFI11vcOc6d0uO9qnWEexezTss.mft (raw, json)
Hash identifier: vjDTVYGhmZKHoce6aNWaiO/Fs9QUxG7ys+U4VTwL1uc=
Subject key identifier: F9:9B:ED:77:2E:E9:E7:8F:9D:B9:D2:E5:A7:C9:93:67:4C:B4:40:F4
Authority key identifier: DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
Certificate issuer: /CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Certificate serial: 01962C739839C4307FB9F77583D3C5C1BB69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
Manifest number: 14E7
Signing time: Sun 13 Apr 2025 00:01:35 +0000
Manifest this update: Sun 13 Apr 2025 00:01:35 +0000
Manifest next update: Mon 14 Apr 2025 00:01:35 +0000
Files and hashes: 1: 2nFI11vcOc6d0uO9qnWEexezTss.crl (hash: IQu5Xv42XVBQF/D+CzUIVBtRXeLmpfGkP65VZFBrfwQ=)
2: 5p4iEJjCWHg2NCuzUgou4J5Rpxg.roa (hash: NfyhhVjM+im96vYLz64L3GHHSJz/s1weqZvBCCm8Yaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:73:98:39:c4:30:7f:b9:f7:75:83:d3:c5:c1:bb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7148d75bdc39ce9dd2e3bdaa75847b17b34ecb
Validity
Not Before: Apr 13 00:01:35 2025 GMT
Not After : Apr 14 00:01:35 2025 GMT
Subject: CN=f99bed772ee9e78f9db9d2e5a7c993674cb440f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:1f:fb:7b:c8:52:94:00:86:56:55:5d:29:
25:8b:54:cb:be:72:13:fd:93:ab:0b:6a:6b:18:86:
76:a2:fc:b1:a6:30:f6:f9:04:14:2c:79:a6:11:6d:
17:68:fb:06:c6:46:df:5a:5f:02:7a:54:44:d2:ca:
e3:2a:a3:96:6d:c4:a6:76:cb:b0:12:7e:0f:3a:19:
60:14:4d:d4:81:fd:5a:1b:74:86:bf:d7:e4:ba:db:
72:01:9f:96:78:81:31:5f:48:ef:e6:e2:54:15:3d:
8b:dd:19:0a:3a:85:61:4c:40:58:13:df:6b:3a:db:
93:fa:6c:87:e5:4a:44:84:ec:e6:c4:05:17:00:58:
8b:79:1b:26:1a:d6:d7:cc:70:20:3e:3b:af:f3:29:
ed:58:c6:ff:59:60:d6:cc:a1:0c:a4:6a:88:41:9f:
86:2d:2a:07:33:0c:65:ce:04:97:c3:86:1e:c9:c1:
45:94:09:78:46:54:9e:e1:47:ed:11:a8:e7:a7:49:
5b:fa:b8:94:69:ec:bd:5c:6f:cb:92:ac:96:24:36:
c4:63:d7:af:4e:0c:16:bd:20:05:82:dd:cc:c3:db:
5e:5d:08:8e:c8:5a:9e:9d:97:b0:0a:75:11:bb:32:
7e:f7:52:cd:b2:c7:1a:d3:ab:5f:ff:a3:02:5b:17:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9B:ED:77:2E:E9:E7:8F:9D:B9:D2:E5:A7:C9:93:67:4C:B4:40:F4
X509v3 Authority Key Identifier:
keyid:DA:71:48:D7:5B:DC:39:CE:9D:D2:E3:BD:AA:75:84:7B:17:B3:4E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nFI11vcOc6d0uO9qnWEexezTss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/077a53-314b-4004-8f1e-def0cc34e008/1/2nFI11vcOc6d0uO9qnWEexezTss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7d:0d:5a:b4:1c:17:ad:34:f1:7c:9d:8c:27:a7:a7:7a:62:
8d:f9:9a:f7:8f:52:4d:3f:42:d4:e5:30:87:05:32:42:92:fb:
59:58:9c:1a:dd:a8:f0:28:f7:f1:81:85:5a:48:d7:47:d1:fb:
9a:0a:07:f2:46:d1:86:af:7e:74:58:15:8f:72:17:6f:5b:9b:
b5:0f:8a:98:5a:d9:2b:2b:a7:1a:63:c8:94:59:64:64:70:fa:
3b:f0:10:e4:8d:dd:14:98:1e:ca:56:e5:b1:5c:86:a4:df:fd:
cf:8d:c5:1e:dd:13:3d:91:0b:66:01:1a:fa:95:8d:63:93:c4:
60:76:8a:80:7d:8f:0c:c0:1d:38:c6:8f:b8:5f:ed:ef:3d:56:
1d:0a:07:79:e9:a5:c4:d4:ce:d1:5f:84:21:e6:c7:a1:08:f0:
80:64:26:6b:bb:86:26:2a:a1:21:3a:9d:21:a4:ab:29:9c:e2:
7f:d3:51:8e:27:17:69:e2:f8:ed:d4:39:04:17:54:da:3b:e0:
e4:b6:da:52:7c:79:f9:5a:99:42:73:18:9f:c1:c9:da:3d:1e:
97:5f:b7:da:da:f5:51:57:69:e0:d5:ca:0f:4e:23:db:c5:1c:
50:0b:11:c8:21:fd:20:f6:42:aa:f3:f9:0e:e5:56:0a:f3:1b:
1f:41:8e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:32:53 2025 by rpki-client