Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
File: 2GchBXUrmCF00QQMEDgXVwuNNNY.mft (raw, json)
Hash identifier: HkQQ9Yz1wyIQ9j5uxtWgrV38ASQJqjUzRAsMLmrVJlk=
Subject key identifier: D5:8F:17:4F:38:FF:1B:BF:29:F0:8B:D9:BD:18:A2:20:3A:50:D9:0E
Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6
Certificate serial: 0196B8C7987994270D12BABDA7E61644F907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
Manifest number: 1391
Signing time: Sat 10 May 2025 06:00:10 +0000
Manifest this update: Sat 10 May 2025 06:00:10 +0000
Manifest next update: Sun 11 May 2025 06:00:10 +0000
Files and hashes: 1: 2GchBXUrmCF00QQMEDgXVwuNNNY.crl (hash: WhxAOXMEC9pbozPTObaoiFCTAD8qzB1z8qeyq/nH33Y=)
2: MPv0ZIQf8gF63bRVzj_wdZ-dXZY.roa (hash: KkiJFkcyvUz1heqkxBgEPmTtzY4d9T2+9il0WhHIMyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:98:79:94:27:0d:12:ba:bd:a7:e6:16:44:f9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8672105752b982174d1040c103817570b8d34d6
Validity
Not Before: May 10 06:00:10 2025 GMT
Not After : May 11 06:00:10 2025 GMT
Subject: CN=d58f174f38ff1bbf29f08bd9bd18a2203a50d90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:21:0c:bd:db:09:48:29:cd:50:22:a6:46:
38:83:71:f7:8f:ef:4e:a4:1d:59:29:1d:64:26:47:
b3:ff:11:bb:95:81:4a:d0:4b:23:06:20:41:71:74:
c7:50:9d:65:32:77:31:79:a6:82:c8:29:2a:17:58:
16:5c:b1:ad:3f:09:85:ac:3b:97:24:81:68:16:60:
09:62:d3:fa:0c:54:e5:25:e6:26:ef:c2:e4:5d:69:
e1:31:91:86:39:63:83:0e:ff:75:a6:c3:de:86:8a:
40:2d:e8:e3:54:d8:7c:fa:a4:33:b1:03:d9:eb:3e:
54:8d:2f:4a:4c:22:bf:0d:5a:40:4b:e4:4f:97:aa:
84:5e:9b:10:cf:b9:e6:bc:08:25:5e:f3:55:27:e9:
b5:53:13:cb:d9:a5:3d:be:55:eb:6a:00:40:81:a8:
56:27:ba:e1:62:b0:ae:37:50:4d:49:48:bc:a1:c7:
39:a6:1c:c3:7f:70:89:bf:c9:f5:6e:be:6f:11:9d:
d9:32:44:66:ad:8e:8a:44:fb:80:3e:90:80:ce:34:
90:3e:2b:1c:60:5c:9f:4f:38:35:c7:21:e5:b7:eb:
d6:f1:d5:b3:aa:cd:7d:b9:bf:68:50:a4:16:c5:0e:
d2:f9:98:0e:c3:5d:7b:36:a9:a5:7c:2d:da:99:84:
63:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8F:17:4F:38:FF:1B:BF:29:F0:8B:D9:BD:18:A2:20:3A:50:D9:0E
X509v3 Authority Key Identifier:
keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0c:bd:74:7f:68:94:46:7a:cc:84:2a:7f:32:41:f5:ab:ff:
92:c0:2e:79:1e:2e:f2:fb:05:92:36:ed:86:5b:ed:b5:aa:57:
6c:cf:02:5f:92:5f:6f:3c:69:f2:cf:0a:53:54:74:bf:ab:93:
98:75:1f:ae:45:e8:9b:fc:3a:aa:e6:01:fd:b3:40:87:8c:9f:
26:7e:17:2f:b0:c1:ae:cd:b3:e1:e6:d3:2e:b4:99:3e:bb:0b:
8e:63:f4:8e:ae:29:75:32:a0:48:f5:1d:15:a6:ff:04:07:7a:
36:fc:02:16:8f:5f:5e:db:44:c7:6a:c7:6f:ce:0d:ae:bd:67:
77:73:f2:57:e4:b5:17:16:d5:2a:db:e0:08:73:9c:48:4a:20:
fc:e8:cb:3c:8c:34:eb:bc:ca:35:a0:53:b1:48:fd:32:7c:1b:
0c:db:e4:c0:ea:2a:69:88:ee:fd:6e:58:f6:81:05:a5:2d:72:
b1:2c:b7:d3:55:39:e0:d1:d3:51:82:43:dd:7e:a7:8c:67:1a:
df:8a:96:95:6e:98:d1:b3:9b:a8:5b:b3:35:01:51:82:70:c1:
47:f5:76:54:85:24:d5:a9:81:e4:b0:0e:ee:ec:c7:d3:4d:e0:
d3:f7:1e:e7:5b:9b:1b:5d:59:a8:62:6d:8e:1d:ab:fb:7c:e2:
20:09:b0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:13:18 2025 by rpki-client