
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
File: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json)
Hash identifier: bAEqg7myhhOSUC+7tGlntrWbdixAeOTUghXW6iwFI3o=
Subject key identifier: 6D:03:85:FD:B7:96:E6:DB:84:AA:90:59:0E:80:BE:C3:81:ED:06:40
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial: 01964F6CCE9434626F41861AB947555E9889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 19:00:52 +0000
Manifest this update: Sat 19 Apr 2025 19:00:52 +0000
Manifest next update: Sun 20 Apr 2025 19:00:52 +0000
Files and hashes: 1: TsaeWiaMsP1j_z_xMCDhi5soRx0.roa (hash: cFv4JeYxc6KlGhF0oX6eBMNahY8RJkA5Wg3CLEjEyhU=)
2: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: NdhCdc3XALRR7adpvcGozHQCQ9N3+4E/rEEE+pcDcB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:ce:94:34:62:6f:41:86:1a:b9:47:55:5e:98:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Validity
Not Before: Apr 19 19:00:52 2025 GMT
Not After : Apr 20 19:00:52 2025 GMT
Subject: CN=6d0385fdb796e6db84aa90590e80bec381ed0640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:12:20:13:d5:6b:7b:a0:85:25:a9:f8:9d:9c:
a5:5b:bf:d7:07:58:9d:ba:ea:85:3e:12:e6:e2:69:
a6:36:7e:e3:fd:9b:90:05:af:64:aa:2d:d5:ca:6e:
f9:70:ab:5b:93:80:4f:6f:1a:fc:e3:97:d6:bd:ca:
be:4d:19:23:9e:d7:d2:16:71:4e:18:04:f9:bd:55:
1c:1b:9b:09:f5:44:6a:8d:61:f9:db:78:e7:a2:84:
d9:6d:50:ed:12:fc:d5:f6:78:e7:83:ab:17:49:b5:
2e:9a:5e:05:6a:df:b2:b5:97:38:d8:fc:c1:2b:16:
55:c5:e0:fe:c6:af:9e:69:29:49:51:97:f0:d1:cf:
c7:b0:df:95:88:7b:db:09:8e:1e:76:21:10:52:1e:
77:48:07:ff:48:a2:67:cf:a3:93:53:9d:48:eb:bd:
4e:65:65:a5:f2:c3:96:d1:96:5c:39:9f:c9:8a:5b:
e6:56:f3:04:2c:b4:ab:cd:ef:c2:db:b5:7a:55:4f:
d1:a8:dd:f8:a2:b5:1f:eb:de:00:e6:21:fd:43:91:
a9:ec:82:c5:35:eb:d5:5c:e5:31:7b:ee:ea:ed:20:
1f:09:17:f9:73:19:bc:42:95:64:0e:c4:dd:05:a5:
95:46:bc:a5:e9:fd:4e:9d:cd:e2:86:85:f8:9a:1f:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:03:85:FD:B7:96:E6:DB:84:AA:90:59:0E:80:BE:C3:81:ED:06:40
X509v3 Authority Key Identifier:
keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e4:f3:2c:66:3d:74:54:e6:4d:13:02:a1:8c:c8:15:4f:d5:
d6:ef:e5:35:59:e3:bd:16:25:5b:56:26:df:8c:e8:4b:2d:16:
8c:1c:38:0d:16:ce:46:d8:1b:0e:7e:7e:e3:6f:bc:5b:ca:8d:
8b:ae:0c:0a:34:f7:32:0b:0a:55:b8:ce:9d:84:e3:ca:cf:82:
a5:37:41:16:d4:ce:0e:8f:17:96:08:dc:3a:84:0d:1c:3d:2e:
bf:fb:ab:22:fd:a8:3b:02:d4:3e:70:a7:f9:1d:c8:e6:ba:61:
ef:ce:30:dd:fa:5a:6f:9e:fc:47:27:e5:21:ff:36:c9:93:42:
59:f3:bc:69:6b:43:a7:b7:30:ba:58:fa:1a:f1:d1:de:bb:d8:
44:fe:b5:66:34:81:c9:27:9a:25:df:e3:bb:d2:e5:76:5a:a3:
9c:9a:39:ac:11:08:a5:4b:4a:2d:e1:12:f9:eb:43:97:28:9a:
24:bf:2a:49:59:de:fc:b7:7b:41:37:86:a1:82:ae:63:a2:67:
8d:fc:1f:b9:a8:2d:92:eb:0c:a8:fe:3b:89:13:c0:cd:a0:3e:
21:4e:1e:27:7a:c6:77:5e:d6:45:88:5c:9f:ed:e9:85:e1:4c:
fa:63:7a:62:e4:1d:8a:76:48:ef:4a:d3:3d:0e:7d:33:72:d3:
1f:bf:16:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:10:13 2025 by rpki-client