Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
File: g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft (raw, json)
Hash identifier: VJdCxN0etupt1eP3PWONj8ukbGdNfN49R7alP2+gV8I=
Subject key identifier: 97:2C:2E:F4:1E:38:74:95:CA:1C:6B:2A:C6:E2:20:FC:EE:BE:15:6E
Authority key identifier: 83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
Certificate issuer: /CN=83646ab7062148edb8fa9b60a831c8240dcab804
Certificate serial: 01965838EDA5B0DE18845FC9043DF4022EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
Manifest number: 0BD5
Signing time: Mon 21 Apr 2025 12:00:47 +0000
Manifest this update: Mon 21 Apr 2025 12:00:47 +0000
Manifest next update: Tue 22 Apr 2025 12:00:47 +0000
Files and hashes: 1: 20epV1j0HCMZ-uCYpk_kUZek4Go.roa (hash: 0IJbxaBTBJrWj2eiqCnd7zV+Z0NBZxwRizr0fkaGu8A=)
2: g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl (hash: dKLMNVTs0l/nc8DxaPJBAfBjqZqDhm3kfj1sCjXKHgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:ed:a5:b0:de:18:84:5f:c9:04:3d:f4:02:2e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83646ab7062148edb8fa9b60a831c8240dcab804
Validity
Not Before: Apr 21 12:00:47 2025 GMT
Not After : Apr 22 12:00:47 2025 GMT
Subject: CN=972c2ef41e387495ca1c6b2ac6e220fceebe156e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:c2:1b:cf:bb:09:21:0e:fe:a0:cd:f6:66:
af:72:d5:6e:5e:cb:8e:e1:72:57:27:7c:98:97:d6:
13:5e:c1:9a:e5:8b:81:99:56:87:f5:a7:7c:46:43:
79:56:34:53:ee:26:91:d6:88:58:54:a1:5b:15:0f:
6d:bb:03:81:2c:a7:b6:ff:da:1f:b5:9c:9d:70:ee:
d7:f0:fb:47:c4:af:48:ba:62:3d:67:d9:de:dc:e6:
cb:04:ad:03:ef:f8:8f:a0:11:5a:e4:cc:57:d5:c7:
6c:d6:b4:c0:ed:9f:b9:65:24:c2:b5:f7:ff:1d:6a:
78:ad:1c:df:79:9f:ba:c7:61:44:64:1c:4c:79:00:
ee:9a:19:04:ed:23:c7:ce:95:15:11:d0:74:fb:88:
f2:d5:c4:3d:75:bb:01:b3:e3:9b:d7:cc:72:f3:bc:
d5:20:89:dc:c1:74:29:7d:14:57:90:17:d4:da:6e:
7a:a3:3a:28:46:31:15:11:1e:c0:fc:23:5e:bf:c0:
4d:53:1d:dc:00:2f:91:3d:44:32:8e:a1:c5:9a:6d:
bd:e1:5f:f7:2e:b2:af:f7:48:1c:87:bd:ce:05:21:
9a:00:54:65:b4:de:8b:ff:23:48:d5:e9:3c:3a:57:
7d:b5:21:fe:09:eb:b9:96:6f:31:db:94:69:3c:ea:
e9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2C:2E:F4:1E:38:74:95:CA:1C:6B:2A:C6:E2:20:FC:EE:BE:15:6E
X509v3 Authority Key Identifier:
keyid:83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:37:ff:61:4a:86:46:e6:ed:93:10:ac:0c:f0:54:52:ef:85:
cb:b8:81:75:ec:4d:f0:ad:e5:3e:0c:5d:fd:e4:04:d5:47:68:
62:bc:bf:fe:cb:dc:f1:ba:0f:4a:41:65:27:8f:98:b1:8b:88:
97:82:ce:89:76:5e:e7:2a:8c:91:c8:c1:c0:e7:54:a3:23:01:
1e:7e:7c:99:4f:27:0f:1c:b1:dc:f2:11:43:df:82:7d:f4:f3:
78:97:f7:58:1c:2f:17:69:91:bd:13:77:8a:c2:a1:eb:81:85:
5e:13:7f:ae:aa:81:3d:62:fb:59:e3:78:34:d1:68:54:17:4e:
99:99:4e:10:d5:36:6a:bd:3a:f0:11:49:94:e5:fe:f4:eb:ed:
e3:da:c3:9e:36:eb:d5:84:e6:1c:62:c2:c7:24:82:ec:10:07:
d0:0c:22:88:c6:37:1e:06:fc:4a:de:2f:7e:6c:f5:a8:d8:e2:
16:4c:46:2b:c3:8a:4b:a4:4d:dc:a4:48:d5:96:f4:56:91:b8:
f2:e8:99:33:4a:39:04:c2:9e:90:78:ef:24:4d:92:00:3c:5c:
2d:e3:0a:f5:49:70:ed:a9:e3:86:80:f1:a1:ea:68:54:07:d6:
0e:fb:a4:75:3b:21:8f:36:2c:46:f9:7c:39:fd:9c:a3:ed:4c:
d7:00:f2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:26:05 2025 by rpki-client