Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7abca5-77ac-4987-8a2b-52498a7dece9/1/2uVkx87d21-Job3md9roielx8BA.mft
File: 2uVkx87d21-Job3md9roielx8BA.mft (raw, json)
Hash identifier: 9fyF/wfgFEkUlfzz0fJi7o6uRoowwZZIQsLz5UDYdY0=
Subject key identifier: 17:03:28:83:EF:7E:E0:7A:30:66:3E:A3:1F:64:C3:8A:28:4D:B6:47
Authority key identifier: DA:E5:64:C7:CE:DD:DB:5F:89:A1:BD:E6:77:DA:E8:89:E9:71:F0:10
Certificate issuer: /CN=dae564c7cedddb5f89a1bde677dae889e971f010
Certificate serial: 01960C7AA0EE5E143AFB02EDD47250F1CAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2uVkx87d21-Job3md9roielx8BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7abca5-77ac-4987-8a2b-52498a7dece9/1/2uVkx87d21-Job3md9roielx8BA.mft
Manifest number: 0239
Signing time: Sun 06 Apr 2025 19:01:25 +0000
Manifest this update: Sun 06 Apr 2025 19:01:25 +0000
Manifest next update: Mon 07 Apr 2025 19:01:25 +0000
Files and hashes: 1: 2uVkx87d21-Job3md9roielx8BA.crl (hash: DqK4qWxmsQtPaz5Dc/rGHnuKnbMC5RGJ1vSHaYWA6F4=)
2: rfglLUnXtW1bLGWSkf5ECHoCphY.roa (hash: iNTsnpqxL1z0jo4De4q7TGzAt43nrGIiUj9zY7jQRw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7abca5-77ac-4987-8a2b-52498a7dece9/1/2uVkx87d21-Job3md9roielx8BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7abca5-77ac-4987-8a2b-52498a7dece9/1/2uVkx87d21-Job3md9roielx8BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2uVkx87d21-Job3md9roielx8BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:7a:a0:ee:5e:14:3a:fb:02:ed:d4:72:50:f1:ca:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae564c7cedddb5f89a1bde677dae889e971f010
Validity
Not Before: Apr 6 19:01:25 2025 GMT
Not After : Apr 7 19:01:25 2025 GMT
Subject: CN=17032883ef7ee07a30663ea31f64c38a284db647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:bc:88:7f:69:31:a5:a0:e5:99:43:d3:83:
82:b0:8e:73:24:63:15:2c:6f:3c:26:46:97:9a:19:
e3:04:4f:68:8b:3a:a7:07:30:44:b9:f6:d7:87:97:
76:86:f2:eb:c4:51:d2:fb:04:1d:c9:62:1d:c5:e9:
22:a6:b4:40:95:39:3f:a2:0c:6a:b4:60:7e:7b:b2:
96:13:79:d2:f6:2a:84:2a:3f:ce:99:18:42:f5:70:
45:99:18:29:a5:d5:1d:0a:54:42:71:3d:b4:be:c6:
ce:7b:bb:49:cb:fa:45:0e:9e:2d:ed:b3:9f:29:ce:
f5:e8:4f:56:7d:6e:0f:16:41:b0:cf:7b:a1:2d:b1:
6b:d9:a3:c9:25:a5:42:0a:31:6d:e2:48:fd:2b:45:
59:24:ff:94:c9:1a:54:13:db:f9:ef:b8:30:0b:45:
4c:6c:4c:6b:f4:d3:f7:53:11:e3:a3:07:b3:76:5c:
42:10:2c:ae:fa:f5:d0:90:b0:cf:73:b4:3e:75:22:
55:1c:56:aa:3f:6c:5d:02:0d:85:b7:ce:ba:dc:b3:
d4:fa:77:ec:ec:d2:8e:10:e5:be:63:d1:b9:9d:9a:
36:e6:c9:04:49:40:92:9c:6a:45:5c:0b:88:f9:db:
58:33:2d:1e:e1:6d:e9:37:27:82:48:11:8a:41:91:
d3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:03:28:83:EF:7E:E0:7A:30:66:3E:A3:1F:64:C3:8A:28:4D:B6:47
X509v3 Authority Key Identifier:
keyid:DA:E5:64:C7:CE:DD:DB:5F:89:A1:BD:E6:77:DA:E8:89:E9:71:F0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2uVkx87d21-Job3md9roielx8BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7abca5-77ac-4987-8a2b-52498a7dece9/1/2uVkx87d21-Job3md9roielx8BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7abca5-77ac-4987-8a2b-52498a7dece9/1/2uVkx87d21-Job3md9roielx8BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:28:c8:b4:93:a1:93:59:f6:2f:04:59:38:8e:10:c8:39:19:
04:6b:e1:3e:51:16:b1:66:88:da:49:24:f0:21:2d:0f:bf:0f:
4c:ed:f7:e2:df:f6:ee:70:c9:06:22:b2:2e:b8:e2:44:ea:b2:
e2:3e:a2:a9:8f:4e:28:3f:1c:fb:9e:5e:d2:00:7e:14:40:a8:
d5:3f:86:4d:ac:e1:4d:02:11:9a:8d:a8:bc:70:04:64:ec:40:
36:bb:0a:84:fc:a1:75:62:88:6d:9b:23:de:43:67:22:14:25:
9c:38:63:3f:26:8b:47:d6:40:ec:51:59:fe:6b:df:32:e3:7a:
51:75:1d:a9:31:ff:d7:3d:7c:dc:8a:a5:1a:cf:0a:b8:94:c6:
a3:73:3e:33:d3:71:49:ae:ea:fb:77:42:86:02:df:c5:9e:23:
e0:e7:bd:e5:f1:23:40:c2:b9:2c:2f:be:63:3b:7b:53:3e:bd:
33:bc:ba:52:88:fd:f9:5e:c8:32:ef:5c:a9:12:68:29:26:ad:
28:14:0f:14:d2:d6:c4:c5:c0:24:80:2e:37:d2:79:86:b4:e1:
4f:07:92:37:4f:01:b8:01:81:f3:20:15:38:18:c3:6c:0d:1e:
7b:54:04:03:8c:d8:c0:7a:5d:e9:14:25:8a:e9:e7:56:d9:c5:
0e:fd:31:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:55:55 2025 by rpki-client