Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
File: 2UeygTSKvawkwr0W2gZ3XKdV9BA.mft (raw, json)
Hash identifier: WdhV0+RTEPChbhFa5dmp3NSU2lqW8mQhkyMX3Qkp28k=
Subject key identifier: 14:D9:46:15:77:DE:0E:DA:6E:AA:D0:F7:1E:FC:29:E7:F5:D1:72:08
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Certificate issuer: /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial: 0196534A34E5B5D1E7C86D191B72DC71E52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
Manifest number: 0B68
Signing time: Sun 20 Apr 2025 13:01:34 +0000
Manifest this update: Sun 20 Apr 2025 13:01:34 +0000
Manifest next update: Mon 21 Apr 2025 13:01:34 +0000
Files and hashes: 1: 2UeygTSKvawkwr0W2gZ3XKdV9BA.crl (hash: O2BRaHUlBJYsOrx4blzaE5RIiJleBZ79STT1W2eCFrY=)
2: FhBIS1oPkd9pTGuzUmZAfI1zqao.roa (hash: 7QOPsIrD6zeyN12zbcfLMatMMhBciTAhTQcY5qqAE98=)
3: LBfcizWSKlLS0AFemCzGH_wAzTA.roa (hash: PWrt9j2gJyGMu1EqKyEgePzznWupiIAtAIf0z5PbNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:34:e5:b5:d1:e7:c8:6d:19:1b:72:dc:71:e5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
Validity
Not Before: Apr 20 13:01:34 2025 GMT
Not After : Apr 21 13:01:34 2025 GMT
Subject: CN=14d9461577de0eda6eaad0f71efc29e7f5d17208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:e2:b8:2c:7f:8a:20:c0:57:11:34:c2:df:
5a:98:ee:da:cc:de:e0:5d:4d:6a:e4:62:0e:70:43:
ed:5e:d7:8c:8e:01:00:bd:7f:ab:80:c3:60:8c:52:
f5:ef:12:5b:f7:00:ee:ac:89:8c:67:2e:37:5a:a4:
0e:50:57:0a:e5:72:2f:83:f4:1f:97:c1:cf:d4:7e:
35:a1:b0:89:45:b4:9b:02:1f:78:d0:47:51:4b:9b:
50:22:84:55:b3:f7:4d:cf:a2:68:8a:71:82:b2:73:
37:43:27:d9:92:4c:d3:2a:d5:90:d3:2c:36:84:16:
5c:f8:50:e7:3b:14:5f:af:35:5c:ee:d1:7c:d6:4e:
15:79:53:5a:09:3f:91:be:6a:99:91:18:bd:30:cb:
f6:f4:8e:2f:26:fe:b8:05:27:69:43:c8:82:d1:10:
3e:4c:dc:5f:7b:e3:7b:9b:18:77:b4:01:1d:47:04:
82:68:e5:a6:74:b3:df:ea:8c:29:d8:93:76:1a:c8:
f5:16:e3:49:7c:32:53:38:66:50:12:b0:16:71:d9:
5b:8f:a5:53:52:ea:9f:d5:1b:e6:16:6f:aa:ac:19:
4a:d9:4f:7b:e8:db:fb:a0:6b:6f:b0:c9:14:2a:9f:
c8:42:57:b9:91:80:99:98:89:3c:81:63:6f:cd:86:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D9:46:15:77:DE:0E:DA:6E:AA:D0:F7:1E:FC:29:E7:F5:D1:72:08
X509v3 Authority Key Identifier:
keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:97:97:d8:43:8e:5b:98:98:9c:f3:d8:99:3b:f5:e5:a0:d1:
21:54:52:27:44:cc:14:c7:ce:75:24:bc:31:6f:b7:a2:56:ca:
f5:d7:24:57:f6:9b:d4:9f:6d:69:18:2f:e6:38:11:a5:b5:d7:
b9:f0:d9:22:0f:24:e2:5b:75:5e:d7:84:a6:b5:2d:6c:0d:9d:
59:87:27:36:f7:64:e0:b1:a2:c2:11:00:4b:98:3d:38:76:f4:
3b:72:f5:9a:71:6b:27:12:ce:84:8b:c2:94:2e:d9:a9:60:31:
b4:83:e1:fd:56:36:a6:1a:9a:ed:88:f8:c1:c0:5c:59:3f:b1:
0d:0c:1c:ea:6d:c2:4a:b6:b1:83:04:ee:67:29:b8:c1:08:2d:
54:ca:64:c6:c7:4e:10:21:bf:db:4d:1c:dc:4a:67:8e:24:c6:
7a:00:d1:cc:97:ac:37:b2:4f:40:ee:68:5a:5e:fd:74:b6:53:
ab:8f:63:39:bb:6f:0a:c9:2e:16:0d:de:53:fa:81:2e:49:86:
a3:8a:87:da:7a:7a:b1:07:a0:4a:b7:06:c9:5a:b5:da:96:17:
fc:e6:a8:90:74:ce:92:84:39:5f:8a:57:29:c9:11:aa:30:4b:
1a:68:4f:69:0c:61:24:36:59:b8:e5:24:ff:7b:82:5d:ba:fe:
57:5a:65:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:38:28 2025 by rpki-client