Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: OCval726dcYvzxxI+F345LbcpPOxxPSe4izGftfNE3c=
Subject key identifier: 71:E6:78:C4:13:72:94:ED:74:45:61:1B:43:A8:E5:99:E6:E4:9D:50
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 01962C7333BED345813CE9A038C9460F3648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 0E8D
Signing time: Sun 13 Apr 2025 00:01:09 +0000
Manifest this update: Sun 13 Apr 2025 00:01:09 +0000
Manifest next update: Mon 14 Apr 2025 00:01:09 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: Dc4AlZAnyfFgKqYjhncObl8rR7yhVlHRBnLPW6uiQXU=)
2: lh0r2c2rRWOg01uWo5CM03GyM1s.roa (hash: k3pD8AzqS8DbrBmJNcxRYtTDyImlclNux7CY8s079js=)
3: uTLyh0W8m68_V2bMQcHtyK_zdWA.roa (hash: 2XUbaOIwLIl96z8qId5rz9LYBuQvv5k3VK/Av3lKN20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:73:33:be:d3:45:81:3c:e9:a0:38:c9:46:0f:36:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Apr 13 00:01:09 2025 GMT
Not After : Apr 14 00:01:09 2025 GMT
Subject: CN=71e678c4137294ed7445611b43a8e599e6e49d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:10:52:51:93:27:3b:03:35:1b:47:1b:4e:
e0:fa:4a:5b:8d:9c:c9:3b:00:94:a8:64:9a:7b:f2:
0c:12:96:b9:44:fb:b2:93:ef:e6:37:e0:33:c8:48:
89:61:01:d1:d5:79:8a:b9:6c:b3:e2:fa:ce:49:e8:
28:e4:b9:e2:a0:f1:02:3f:42:2b:1e:3c:e7:bd:07:
4e:bc:bf:55:7f:53:4a:b8:d7:fc:d2:d2:9b:1f:d6:
f8:3b:4b:e7:e1:43:88:a7:79:48:6a:72:17:e5:ad:
7a:24:da:e2:d9:ae:29:68:3e:ca:d8:5d:1f:da:4c:
88:fc:63:6c:83:44:a8:31:f8:09:88:ef:83:ff:da:
b5:75:f7:26:32:d6:0a:f0:26:31:0c:bc:18:04:62:
b9:b1:8d:bb:f8:de:d5:09:06:48:f6:3d:0a:c3:f1:
ee:2b:25:1d:0c:f6:d4:a7:45:9c:8c:08:62:bd:1f:
8f:38:56:13:40:9e:60:66:a0:1e:26:f5:8f:62:4f:
11:a7:6a:77:ad:aa:68:59:5c:7a:a8:bd:f5:55:92:
7d:d5:a9:86:d1:a9:5d:33:83:2c:ba:86:50:39:1f:
95:d5:d7:55:a6:e3:9b:ad:7b:6e:8d:14:dd:af:75:
2c:fc:c9:71:ff:f2:ee:63:ab:d9:dd:ae:0a:ed:50:
68:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E6:78:C4:13:72:94:ED:74:45:61:1B:43:A8:E5:99:E6:E4:9D:50
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:92:18:8f:d7:a4:d7:23:c5:fb:9d:60:d0:98:a2:eb:d6:94:
cf:80:e1:a8:93:c5:4d:22:f3:23:f1:d9:db:3f:33:ad:6c:07:
1d:ea:f9:84:b7:45:2b:53:b2:37:75:5f:e4:76:22:4a:12:f1:
58:cc:2a:4b:be:61:89:a7:22:8d:de:aa:63:86:8e:51:b4:83:
eb:dd:52:9f:46:6d:ab:3f:97:58:ff:f7:78:38:51:b7:4d:54:
f2:58:23:6f:c7:9a:e7:a8:db:c0:6b:e4:25:01:5a:db:83:42:
31:cf:7b:70:71:b5:ba:48:36:20:d9:e1:06:59:8b:57:10:28:
03:c3:21:5c:cd:d9:b0:82:dd:a6:fa:8c:71:65:f9:9f:a2:c1:
3f:23:49:8c:19:e5:78:01:18:a6:a7:b9:cb:cc:60:01:b1:32:
d0:82:66:f7:d6:a7:e0:b7:cf:c2:3a:e4:43:7d:47:94:4c:c5:
8b:e3:44:fa:59:f9:24:49:d6:69:9f:d5:cf:7a:15:47:25:f7:
12:a8:80:fb:9d:86:b0:74:01:02:0e:42:44:c0:4b:0b:e3:0c:
74:38:5f:84:93:61:56:83:6b:0c:95:8a:16:a4:0c:13:ad:be:
22:bc:4c:b9:29:a1:86:d1:db:06:9d:38:3a:76:51:8d:99:d7:
0b:11:c6:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYsczO+00WBPOmgOMlGDzZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MmNhZDExZjEyZDg2ZDE4OTUxY2JkNzUxZWU1MTI0Zjcx
ODk1MWYwHhcNMjUwNDEzMDAwMTA5WhcNMjUwNDE0MDAwMTA5WjAzMTEwLwYDVQQD
Eyg3MWU2NzhjNDEzNzI5NGVkNzQ0NTYxMWI0M2E4ZTU5OWU2ZTQ5ZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs28QUlGTJzsDNRtHG07g+kpbjZzJ
OwCUqGSae/IMEpa5RPuyk+/mN+AzyEiJYQHR1XmKuWyz4vrOSego5LnioPECP0Ir
HjznvQdOvL9Vf1NKuNf80tKbH9b4O0vn4UOIp3lIanIX5a16JNri2a4paD7K2F0f
2kyI/GNsg0SoMfgJiO+D/9q1dfcmMtYK8CYxDLwYBGK5sY27+N7VCQZI9j0Kw/Hu
KyUdDPbUp0WcjAhivR+POFYTQJ5gZqAeJvWPYk8Rp2p3rapoWVx6qL31VZJ91amG
0aldM4MsuoZQOR+V1ddVpuObrXtujRTdr3Us/Mlx//LuY6vZ3a4K7VBoFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHmeMQTcpTtdEVhG0Oo5Znm5J1QMB8GA1UdIwQY
MBaAFNksrRHxLYbRiVHL11HuUST3GJUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wOWJkOTEtNWUxOC00MjEzLTgwNTMt
MWIwM2ZkYmEwYTI0LzEvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8wOWJkOTEtNWUxOC00MjEzLTgwNTMtMWIwM2ZkYmEwYTI0
LzEvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZIYj9ek
1yPF+51g0Jii69aUz4DhqJPFTSLzI/HZ2z8zrWwHHer5hLdFK1OyN3Vf5HYiShLx
WMwqS75hiacijd6qY4aOUbSD691Sn0Ztqz+XWP/3eDhRt01U8lgjb8ea56jbwGvk
JQFa24NCMc97cHG1ukg2INnhBlmLVxAoA8MhXM3ZsILdpvqMcWX5n6LBPyNJjBnl
eAEYpqe5y8xgAbEy0IJm99an4LfPwjrkQ31HlEzFi+NE+ln5JEnWaZ/Vz3oVRyX3
EqiA+52GsHQBAg5CRMBLC+MMdDhfhJNhVoNrDJWKFqQME62+IrxMuSmhhtHbBp04
OnZRjZnXCxHGKg==
-----END CERTIFICATE-----
Generated at Sun Apr 13 06:53:25 2025 by rpki-client