Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
File: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft (raw, json)
Hash identifier: 1xYGIdocpOGY13V4QnM4V44otzf8m4xePSo9MmMgLGM=
Subject key identifier: 75:2C:5B:C2:F7:29:FF:3B:07:8E:05:64:76:0E:9E:23:AF:03:09:80
Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096
Certificate serial: 01965BA80864F2F14F6067F44176B67A0FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
Manifest number: 0A01
Signing time: Tue 22 Apr 2025 04:01:00 +0000
Manifest this update: Tue 22 Apr 2025 04:01:00 +0000
Manifest next update: Wed 23 Apr 2025 04:01:00 +0000
Files and hashes: 1: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl (hash: Bt4YmwSsL0fT+INtPLo63kJf//W/CBlXdACgM3EtyOM=)
2: 73kskguN1VPO4tq3u0I-6VPbcl8.roa (hash: IOUFc++3ERmMqSZYKktHNh8ojKEPsIX8mty7/JMNR8c=)
3: pwFLoSIf9VUbET6QAXvLZY5rPr0.roa (hash: va4qzagh1XVOL80SDuYlOL0AHUwEGtmHAcyNr2+1pWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a8:08:64:f2:f1:4f:60:67:f4:41:76:b6:7a:0f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096
Validity
Not Before: Apr 22 04:01:00 2025 GMT
Not After : Apr 23 04:01:00 2025 GMT
Subject: CN=752c5bc2f729ff3b078e0564760e9e23af030980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:05:95:24:6b:27:7e:a2:41:87:3c:8c:a1:e6:
a4:fd:23:45:a9:73:74:82:9c:72:db:03:1d:b6:30:
43:94:08:b8:30:6e:58:98:40:85:30:0c:e7:fa:d5:
44:02:da:5d:2b:05:3a:eb:58:97:a4:66:c2:8a:9a:
57:7b:19:ea:aa:d8:6a:bb:2e:35:ba:e6:78:67:cb:
e0:b8:d8:6e:6b:78:f9:2a:e5:3b:09:db:aa:e5:65:
80:5d:b3:a1:f6:4a:77:ba:5c:1e:1d:a2:0e:ea:34:
77:b5:fd:18:0b:90:47:62:ea:f1:9d:33:af:bf:63:
5e:26:f5:34:98:06:27:5c:80:93:b1:85:3a:0b:6d:
26:56:9c:19:70:4f:61:ba:60:05:ed:58:73:8d:53:
fa:e7:09:cc:c6:57:a2:e1:ae:73:55:de:2d:cc:ce:
a3:82:5c:d0:ca:19:e9:b9:07:e8:c8:b9:aa:d2:ca:
a8:9a:65:75:89:39:e0:39:0a:9d:fd:e0:e2:ef:cb:
5e:1b:36:d7:a4:f8:c4:63:bc:14:f0:a5:a2:9c:68:
23:b7:eb:1f:c1:68:43:18:5b:01:e4:06:7d:c4:bf:
a1:09:38:5b:71:7e:79:6f:84:d3:40:e1:98:50:00:
6e:04:c4:ed:4e:dc:56:94:3c:d1:6a:f6:6a:50:c7:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2C:5B:C2:F7:29:FF:3B:07:8E:05:64:76:0E:9E:23:AF:03:09:80
X509v3 Authority Key Identifier:
keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:78:b8:fb:84:ce:3f:89:af:b9:84:37:93:94:79:82:ef:0d:
b4:78:9f:b5:7a:88:68:c1:e9:17:72:53:33:dc:3d:77:76:34:
d4:de:d9:fd:8d:0a:be:6f:db:4d:fc:9f:f0:d2:f0:68:50:e2:
66:fa:13:53:37:8a:3a:fa:3c:de:02:be:18:83:8f:de:95:06:
11:01:c5:ea:06:61:08:2f:e8:60:3a:d5:34:65:48:37:52:43:
18:14:0a:15:c0:d7:6c:75:2d:d4:3b:38:a4:f0:e7:5e:ed:1c:
4e:3c:25:96:7c:a8:65:af:04:6a:a6:46:8e:58:db:0d:90:d9:
7f:5d:84:13:1d:26:d3:1d:37:51:b1:05:bc:50:c0:d9:a8:96:
0f:8b:72:8b:c6:f2:a2:83:bf:fb:0b:84:bd:48:e2:53:25:03:
ee:b6:a5:25:66:3b:76:33:c6:23:27:fe:67:9e:8b:e8:45:9d:
44:f4:7f:1c:a3:c5:49:ba:d8:1b:fb:75:25:eb:10:34:29:65:
1a:eb:e3:95:7b:8a:ac:ee:dc:01:d8:b8:a8:52:32:ea:5d:69:
b1:3c:58:3b:45:55:32:96:71:0e:46:35:06:52:0f:a0:56:92:
14:fc:7b:af:b3:d6:e2:33:7d:4d:8d:60:81:c5:18:81:64:8d:
34:a3:3f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:56:40 2025 by rpki-client