Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File: 2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier: Bqe+yEc8B23DySXP6dGJb6oDDj6beantdVvZ/3sgH4o=
Subject key identifier: 1E:A6:2D:52:2E:13:8C:B2:B1:A4:BB:10:F6:07:BD:3E:F2:B5:FB:6B
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer: /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial: 0196594B94DC53CE39ACD187015AA15AA565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 17:00:47 +0000
Manifest this update: Mon 21 Apr 2025 17:00:47 +0000
Manifest next update: Tue 22 Apr 2025 17:00:47 +0000
Files and hashes: 1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: FLYEkny5scvm0aZZfTQgvtVILbsp+kusd/I2wpYdK74=)
2: TtL1ROIX4qoe3FCQrbezbJvdiQE.roa (hash: EUtuOvVr+TGeDq+HxLBuoNhksrH6/dbzAs2zVkQm8sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:94:dc:53:ce:39:ac:d1:87:01:5a:a1:5a:a5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Validity
Not Before: Apr 21 17:00:47 2025 GMT
Not After : Apr 22 17:00:47 2025 GMT
Subject: CN=1ea62d522e138cb2b1a4bb10f607bd3ef2b5fb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:0a:c2:ee:e3:34:52:3e:1a:56:5e:55:6b:
a3:cd:6a:b0:cf:58:99:ce:46:fc:91:e7:8f:b5:35:
6b:cc:9a:31:3f:78:97:b5:fc:1a:07:4b:ba:99:43:
03:e6:90:e6:2e:90:00:0a:f4:b5:84:fe:16:a4:4f:
97:41:2e:49:22:ac:f2:a0:92:e2:84:dc:cc:5a:8c:
e8:45:69:03:6f:19:02:7d:d2:db:7c:10:61:dd:b6:
dc:86:e4:28:1f:38:85:65:e5:c0:0a:5a:f7:0a:4d:
94:17:2f:ed:63:ab:ca:31:73:40:62:65:82:6e:2f:
46:44:4e:9c:87:f0:03:5e:bc:dd:72:ed:bf:16:04:
18:1c:f5:1e:c9:db:b3:87:05:92:bc:8a:43:c1:51:
5b:3c:07:c5:78:40:5a:85:1c:8a:a4:57:a2:36:b3:
90:e2:47:42:f0:83:fb:94:4e:90:a9:2d:48:dc:f1:
de:2a:2d:57:ec:3e:71:43:b6:34:b3:51:35:a6:da:
dc:7a:86:a6:42:af:7c:67:29:ca:93:47:38:73:13:
22:15:07:18:84:2e:25:71:24:a3:33:75:8e:78:7a:
aa:f8:bd:e6:82:44:94:64:5e:9f:08:4a:a5:83:26:
94:c0:b4:dc:1b:95:4a:ed:99:ce:13:79:62:8c:0a:
05:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A6:2D:52:2E:13:8C:B2:B1:A4:BB:10:F6:07:BD:3E:F2:B5:FB:6B
X509v3 Authority Key Identifier:
keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:06:7d:bc:29:ce:42:67:7e:cd:c2:99:5f:f4:1c:11:94:b4:
c4:bd:27:79:35:ee:b2:a0:14:4d:b3:93:1f:1d:93:db:f6:cb:
b3:75:ab:75:2b:45:72:b6:b7:c1:18:a3:80:46:c1:9f:be:1a:
72:dc:35:aa:f5:5d:41:38:5c:f1:3f:9f:4a:12:ef:4c:84:cf:
99:bc:22:f9:06:8d:55:bb:af:46:a0:cf:91:72:2f:e8:e7:ed:
b6:11:e3:4d:ee:59:26:0a:5b:37:4f:c4:a9:64:ba:03:e1:23:
f2:1e:d3:8a:27:91:4d:77:75:3a:58:2e:9c:06:72:d5:54:88:
eb:65:d6:d8:8f:c6:ac:f3:48:c2:5c:aa:cf:9e:71:b6:69:b2:
25:88:26:ec:d4:3e:55:46:0e:6c:e9:93:cc:8e:01:7f:0e:8f:
41:31:20:c7:7d:f5:f6:e0:20:5a:80:32:63:2c:dc:1a:d2:60:
af:0b:bb:c8:2f:92:1b:a1:c2:32:07:8e:dc:50:fa:7b:42:dc:
13:01:7a:13:36:b8:5d:26:cb:0f:41:ad:2a:45:c1:f3:b2:ed:
91:76:c6:e6:34:21:93:ef:e2:84:f4:3d:60:4f:25:fb:18:02:
12:2a:16:e1:3a:35:f2:fe:17:27:5b:18:0f:f7:f8:75:e6:0c:
b9:e0:6e:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZS5TcU845rNGHAVqhWqVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMTg2NDIyMjc5ZDlkOGI0ZTY4ZTY5YjEyOTZlNTMyZDRk
YTBjM2YwHhcNMjUwNDIxMTcwMDQ3WhcNMjUwNDIyMTcwMDQ3WjAzMTEwLwYDVQQD
EygxZWE2MmQ1MjJlMTM4Y2IyYjFhNGJiMTBmNjA3YmQzZWYyYjVmYjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2oKwu7jNFI+GlZeVWujzWqwz1iZ
zkb8keePtTVrzJoxP3iXtfwaB0u6mUMD5pDmLpAACvS1hP4WpE+XQS5JIqzyoJLi
hNzMWozoRWkDbxkCfdLbfBBh3bbchuQoHziFZeXAClr3Ck2UFy/tY6vKMXNAYmWC
bi9GRE6ch/ADXrzdcu2/FgQYHPUeyduzhwWSvIpDwVFbPAfFeEBahRyKpFeiNrOQ
4kdC8IP7lE6QqS1I3PHeKi1X7D5xQ7Y0s1E1ptrceoamQq98ZynKk0c4cxMiFQcY
hC4lcSSjM3WOeHqq+L3mgkSUZF6fCEqlgyaUwLTcG5VK7ZnOE3lijAoFswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6mLVIuE4yysaS7EPYHvT7ytftrMB8GA1UdIwQY
MBaAFNsYZCInnZ2LTmjmmxKW5TLU2gw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnhoa0lpZWRuWXRPYU9hYkVwYmxNdFRhREQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wYzAxYzUtMTU3ZC00MGE3LThmY2Mt
NWM3NzIzNDYwMjIzLzEvMnhoa0lpZWRuWXRPYU9hYkVwYmxNdFRhREQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8wYzAxYzUtMTU3ZC00MGE3LThmY2MtNWM3NzIzNDYwMjIz
LzEvMnhoa0lpZWRuWXRPYU9hYkVwYmxNdFRhREQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQZ9vCnO
Qmd+zcKZX/QcEZS0xL0neTXusqAUTbOTHx2T2/bLs3WrdStFcra3wRijgEbBn74a
ctw1qvVdQThc8T+fShLvTITPmbwi+QaNVbuvRqDPkXIv6OftthHjTe5ZJgpbN0/E
qWS6A+Ej8h7TiieRTXd1OlgunAZy1VSI62XW2I/GrPNIwlyqz55xtmmyJYgm7NQ+
VUYObOmTzI4Bfw6PQTEgx3319uAgWoAyYyzcGtJgrwu7yC+SG6HCMgeO3FD6e0Lc
EwF6Eza4XSbLD0GtKkXB87LtkXbG5jQhk+/ihPQ9YE8l+xgCEioW4To18v4XJ1sY
D/f4deYMueBueg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:16:20 2025 by rpki-client