Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
File: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft (raw, json)
Hash identifier: HU9PlicqV3rdVtoisFSMDYkI2zJfql6Ryck0+RzVKDI=
Subject key identifier: F2:0F:AA:E8:5D:E3:43:C0:D8:1D:1B:59:07:0E:D1:75:92:83:9A:2C
Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
Certificate issuer: /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Certificate serial: 01964D7E5B3D12530BB04F272A9B4DA517D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
Manifest number: 0E97
Signing time: Sat 19 Apr 2025 10:00:48 +0000
Manifest this update: Sat 19 Apr 2025 10:00:48 +0000
Manifest next update: Sun 20 Apr 2025 10:00:48 +0000
Files and hashes: 1: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl (hash: Hd7hmgarHkF6umQ6hTXSYBqD6S1LD0eCQRdA7EZafTA=)
2: GcfGZsk2NpZK22JGd8D0XeNiNxw.roa (hash: xyiKkwW0L3cggM56dv+wqjei/Sm7QJIbhPrsiBjuOa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:5b:3d:12:53:0b:b0:4f:27:2a:9b:4d:a5:17:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Validity
Not Before: Apr 19 10:00:48 2025 GMT
Not After : Apr 20 10:00:48 2025 GMT
Subject: CN=f20faae85de343c0d81d1b59070ed17592839a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:8f:a3:c5:98:2b:0c:c3:79:62:e6:12:36:
19:d0:4f:83:86:0c:d4:8e:c4:95:cb:09:da:ee:4f:
9b:a9:41:48:60:4e:09:9e:78:71:18:27:23:cb:18:
4b:69:6b:94:37:92:6b:1c:09:2a:05:e2:68:f6:07:
61:40:c6:a4:31:b8:50:39:56:d9:32:fe:d8:1f:88:
ac:1f:17:b5:01:10:79:e9:d2:70:be:ac:5f:35:74:
a4:09:6e:3e:da:3c:9b:bc:18:68:67:7a:99:bb:a0:
da:5a:ab:fb:e1:8d:2c:89:92:a1:9a:55:47:cd:e0:
dd:87:38:b1:a9:e9:bd:3e:c4:b3:ee:43:71:3a:1c:
74:9c:d8:05:e7:bf:2d:ca:59:73:a1:dc:c9:3a:d7:
a3:33:8b:9a:06:68:8e:2f:5f:c5:41:ae:9f:12:8e:
e6:a7:24:53:fa:78:8a:be:e2:c1:a7:fc:07:0b:b2:
2f:e8:f9:84:ea:4f:ce:a7:ad:51:a8:31:c4:c6:6f:
39:16:45:f7:f8:4a:25:0f:f9:80:9a:a7:ea:c0:f1:
a1:d4:38:57:07:ae:4f:d0:e6:8c:01:ad:5a:a4:9f:
bd:a6:d2:33:b8:9e:6d:5d:ff:10:44:3d:db:18:23:
3c:ea:92:53:cc:af:fa:1c:8e:f8:1c:c6:f9:a0:a1:
5f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0F:AA:E8:5D:E3:43:C0:D8:1D:1B:59:07:0E:D1:75:92:83:9A:2C
X509v3 Authority Key Identifier:
keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:46:01:5c:37:57:f8:04:2e:8c:2c:b8:8f:50:35:60:4f:60:
95:18:d9:51:cc:8f:71:4f:ea:47:3d:e9:34:60:61:79:70:68:
33:52:56:5b:6b:8b:04:c0:2f:7f:69:22:05:82:08:eb:d3:32:
e1:de:60:74:c4:c4:68:45:94:0e:00:49:34:a3:72:57:e4:dc:
29:c2:33:53:8c:e0:3b:89:ae:df:25:df:9a:7e:7a:1b:a4:7d:
85:61:3d:d9:03:e4:ec:55:28:75:a0:f4:47:35:23:44:82:28:
50:14:56:de:f3:57:c8:85:bc:21:2c:01:c5:d6:30:d4:51:87:
67:5b:5a:3f:59:5e:46:cc:ab:4c:61:cd:b2:19:20:09:f3:17:
57:27:8b:3b:a6:37:63:5e:0e:78:df:d7:50:f3:de:70:11:ff:
a0:61:5e:30:42:f7:39:2b:55:cd:ea:e3:bc:b5:9c:29:55:ff:
bc:e6:e0:fa:f8:11:3c:8d:e2:be:6d:45:df:a7:8b:08:80:b9:
b8:91:4b:b3:17:c0:71:a6:ac:ac:e4:e8:cc:bc:13:e6:83:8d:
a8:c3:c4:50:f4:d8:cf:0c:98:46:c7:58:be:4c:f7:09:a0:78:
4f:f0:26:9f:5a:be:e9:a2:e8:a9:c0:20:38:7a:fc:9b:e0:9a:
16:0c:32:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfls9ElMLsE8nKptNpRfQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZWU1YTRjOWYzMDQ5ODY4MGU0ZDdiNTlkZGIwOGY4MmJj
NmY0YzcwHhcNMjUwNDE5MTAwMDQ4WhcNMjUwNDIwMTAwMDQ4WjAzMTEwLwYDVQQD
EyhmMjBmYWFlODVkZTM0M2MwZDgxZDFiNTkwNzBlZDE3NTkyODM5YTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRCPo8WYKwzDeWLmEjYZ0E+DhgzU
jsSVywna7k+bqUFIYE4JnnhxGCcjyxhLaWuUN5JrHAkqBeJo9gdhQMakMbhQOVbZ
Mv7YH4isHxe1ARB56dJwvqxfNXSkCW4+2jybvBhoZ3qZu6DaWqv74Y0siZKhmlVH
zeDdhzixqem9PsSz7kNxOhx0nNgF578tyllzodzJOtejM4uaBmiOL1/FQa6fEo7m
pyRT+niKvuLBp/wHC7Iv6PmE6k/Op61RqDHExm85FkX3+EolD/mAmqfqwPGh1DhX
B65P0OaMAa1apJ+9ptIzuJ5tXf8QRD3bGCM86pJTzK/6HI74HMb5oKFfhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIPquhd40PA2B0bWQcO0XWSg5osMB8GA1UdIwQY
MBaAFNnuWkyfMEmGgOTXtZ3bCPgrxvTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80N2E1NGEtNjM3Yy00NDg2LWIxMmMt
N2RiOWRmYmM0YWU5LzEvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi80N2E1NGEtNjM3Yy00NDg2LWIxMmMtN2RiOWRmYmM0YWU5
LzEvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0YBXDdX
+AQujCy4j1A1YE9glRjZUcyPcU/qRz3pNGBheXBoM1JWW2uLBMAvf2kiBYII69My
4d5gdMTEaEWUDgBJNKNyV+TcKcIzU4zgO4mu3yXfmn56G6R9hWE92QPk7FUodaD0
RzUjRIIoUBRW3vNXyIW8ISwBxdYw1FGHZ1taP1leRsyrTGHNshkgCfMXVyeLO6Y3
Y14OeN/XUPPecBH/oGFeMEL3OStVzerjvLWcKVX/vObg+vgRPI3ivm1F36eLCIC5
uJFLsxfAcaasrOTozLwT5oONqMPEUPTYzwyYRsdYvkz3CaB4T/Amn1q+6aLoqcAg
OHr8m+CaFgwy2Q==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:36:38 2025 by rpki-client