Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: y+/mdMt8zW95naLXUDMBuUnlUOa5BR/g8p18TLaQHpI=
Subject key identifier: B6:66:F6:B3:02:7B:3E:FF:45:C1:D9:A0:8D:C9:CB:F9:50:50:D6:B4
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 01964556A2084ADBD762E823D998F6B039EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 05BB
Signing time: Thu 17 Apr 2025 20:00:27 +0000
Manifest this update: Thu 17 Apr 2025 20:00:27 +0000
Manifest next update: Fri 18 Apr 2025 20:00:27 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: Kbn2xnRpqsLeZK4dd31q7u8twFLw5/+Iy7sKLgz9sq8=)
2: O5dwSGpy0OL0LjPB3wap3UtIwjM.roa (hash: cR4roCPU2uE8JstXy3PNObd3k08fMc1QAFzMuYnt3oU=)
3: tnUPA6hUZaMc3DGBbjrE2vWk7tg.roa (hash: mdRQc0qGhPN3lwt7z9GCtElgPkcKD7V9qQWoyWEN/8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:a2:08:4a:db:d7:62:e8:23:d9:98:f6:b0:39:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Apr 17 20:00:27 2025 GMT
Not After : Apr 18 20:00:27 2025 GMT
Subject: CN=b666f6b3027b3eff45c1d9a08dc9cbf95050d6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:ac:b5:e1:88:58:2b:2b:9e:fe:0b:9e:5b:
38:4c:01:53:2c:53:b4:d1:6f:e3:18:95:7d:d7:16:
b1:2f:78:a1:ed:e3:c0:17:c4:d9:bd:b1:90:00:e9:
53:91:81:a3:41:80:0d:b3:6f:df:f4:30:d6:72:39:
80:87:00:d9:f7:38:79:9a:84:17:ea:d9:99:66:d9:
98:cc:c5:06:f7:68:cb:26:d8:83:86:4e:87:e0:d5:
92:fa:69:06:e5:5c:ea:a2:a7:04:f8:e7:c2:5f:9d:
a5:e2:4f:67:68:95:da:e3:96:39:4a:16:06:86:a4:
d2:18:17:97:48:a4:83:0a:d6:a4:d2:9b:af:0d:5f:
35:1a:4b:e5:8f:ed:b5:4f:e1:20:1e:12:63:b5:9e:
0f:c7:fc:25:91:02:ca:08:bb:13:0b:88:ed:e0:02:
b1:5d:e6:56:f0:13:cc:fd:03:35:55:72:bb:09:05:
75:31:32:d7:ed:15:80:be:34:dd:d9:3d:7f:4e:fb:
3a:d0:53:3e:9e:d1:b8:c6:0f:60:11:19:de:7f:c0:
6e:22:05:7e:88:0d:3d:90:0e:e9:00:a8:2f:52:81:
72:5e:5f:9f:f1:e7:4a:fa:2d:5f:96:9b:94:e8:d8:
05:83:a6:0f:fa:2a:27:d8:5a:49:ea:64:73:12:d7:
1e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:66:F6:B3:02:7B:3E:FF:45:C1:D9:A0:8D:C9:CB:F9:50:50:D6:B4
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:24:f5:15:bd:db:76:c8:06:e1:f5:02:10:2a:de:b5:63:3b:
7a:46:21:6c:d9:f4:2a:4c:d5:a7:ed:2c:77:ee:20:f9:6f:2c:
05:e8:12:8d:f6:0e:d4:b2:45:84:5b:a8:a8:ca:d6:3a:b7:bc:
7b:f7:eb:85:87:ce:65:15:96:cc:1a:b2:77:79:31:b9:29:77:
6f:cc:7f:75:c7:6e:87:d2:63:35:83:a3:af:5f:ad:29:a4:35:
4c:78:42:e3:60:e0:48:13:2c:2a:ca:e1:7b:15:42:c5:43:7e:
45:f3:3a:0a:56:5a:83:b5:bf:f1:77:b0:60:59:90:6b:7c:34:
80:0c:64:62:42:34:73:c5:3d:d3:92:c7:27:e9:3c:d4:14:8f:
66:ee:ce:37:73:49:13:9f:b8:d9:93:af:ad:f1:6e:d8:29:b4:
d8:29:60:0a:4a:87:25:f4:19:a4:02:a1:c1:d8:7f:0d:e1:9d:
71:84:b3:f8:d6:de:2e:80:69:e9:4a:eb:92:6a:6e:a2:6d:f1:
f0:77:d4:7a:e0:7e:f6:5a:3a:0d:b1:f9:57:4d:68:ab:3a:30:
bd:7d:7d:1c:a5:e8:25:6b:85:d7:20:1d:cc:db:f2:42:56:04:
a2:ec:20:f8:05:74:e3:f1:01:af:cf:56:60:3d:66:61:86:ed:
5d:12:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:47:06 2025 by rpki-client