Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: rUvmZCMNBPV/hLdfK01H471aUy7rjE+UgNN7npLqtj4=
Subject key identifier: 3A:48:D5:EB:F8:2E:58:4C:1E:F9:F5:B7:59:1D:33:46:0A:7C:D4:72
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 0196342CDB302D295228931A264E183AFE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 0444
Signing time: Mon 14 Apr 2025 12:01:17 +0000
Manifest this update: Mon 14 Apr 2025 12:01:17 +0000
Manifest next update: Tue 15 Apr 2025 12:01:17 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: RjeRGvgpYHKj0819C4CC/isjt5kB+HDKI0qcYHQpJrQ=)
2: XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa (hash: IO3j0G8UIN7fX3xi+MKX4YsNgu93V1b6w5hTqh+nJ+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:34:2c:db:30:2d:29:52:28:93:1a:26:4e:18:3a:fe:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Apr 14 12:01:17 2025 GMT
Not After : Apr 15 12:01:17 2025 GMT
Subject: CN=3a48d5ebf82e584c1ef9f5b7591d33460a7cd472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c0:1f:d0:4b:22:0e:7d:1e:4a:f5:a6:69:69:
6f:c1:db:f3:7d:da:7f:cf:4c:d6:56:19:e8:12:97:
a7:7b:cd:bc:8b:bb:10:c9:11:12:1c:33:99:28:6a:
28:29:9c:6f:6c:80:c4:ca:8e:d8:de:53:8a:0d:b8:
ee:5d:4f:73:d6:84:99:58:24:a5:31:a0:de:0a:c5:
69:bb:23:8d:63:23:1e:77:35:60:bc:e0:19:e4:fb:
59:61:42:91:c4:56:36:30:d6:be:0b:61:da:f5:1f:
d0:aa:87:c5:f0:17:a5:69:5c:8b:98:e2:f8:2c:be:
bf:9c:5e:8d:02:f2:bb:8e:d6:17:88:7e:e7:b0:38:
14:2a:96:f6:2d:db:e1:a5:04:f2:ce:32:e9:00:f0:
11:83:03:fd:8b:31:60:8f:75:9c:d7:f7:79:2d:b5:
55:7b:5c:db:31:e9:58:46:97:60:9b:4a:9e:b1:60:
95:8e:71:9e:1e:af:b7:b1:f4:97:ce:77:6a:b2:42:
16:d7:68:07:95:4e:2b:d3:58:19:bd:39:e8:7d:82:
8f:ff:e5:5a:35:2f:d2:40:e4:27:88:43:2c:a9:4c:
af:cd:71:4c:b3:a2:cf:2a:8a:6d:88:97:41:32:91:
fe:6e:05:89:9a:62:e1:d9:2f:08:e5:1b:f9:e0:a1:
c7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:48:D5:EB:F8:2E:58:4C:1E:F9:F5:B7:59:1D:33:46:0A:7C:D4:72
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9d:94:79:4a:b7:68:78:3b:03:46:73:48:7e:c4:61:7a:3c:
de:74:68:0b:78:7d:33:84:05:15:31:99:1b:76:58:ff:d1:23:
c3:c7:b7:cb:16:b1:fd:00:9d:21:ce:fb:c2:e2:f0:6a:3d:2f:
9e:8b:ed:3e:03:9c:d1:74:87:eb:01:22:8a:bb:44:1c:32:94:
97:19:b4:6a:7a:89:57:2a:ae:a1:59:92:28:ae:b5:40:70:fa:
a2:09:dd:d7:a4:c7:a9:b6:1f:03:7c:58:55:d8:e5:39:fa:af:
92:6f:4e:1c:35:ca:15:38:52:e8:42:93:2a:82:94:90:66:4b:
29:75:b6:1a:66:b3:80:15:51:fe:fe:05:74:90:3d:6d:6f:64:
db:99:12:9e:29:99:16:d0:18:db:ce:98:b2:94:28:d8:c7:76:
cb:24:b8:4f:3f:83:ad:ad:46:18:66:9b:28:d6:dd:46:66:4c:
68:9a:aa:88:f8:cf:dd:a8:ec:3c:e2:c3:7d:a2:83:a4:a6:0b:
10:61:8e:7d:02:b7:18:69:a6:fb:ea:91:1c:fb:a4:a8:cd:ba:
8e:53:e1:85:95:9d:08:90:53:d1:ce:31:9d:ff:ca:60:d9:1f:
6f:8b:25:72:8c:56:59:b3:f8:20:db:46:51:92:10:58:d2:38:
a6:d1:c4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:47:59 2025 by rpki-client