Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
File: 2GchBXUrmCF00QQMEDgXVwuNNNY.mft (raw, json)
Hash identifier: iwpqYO5+9Jkf7Xvv9rJa5xZfpxYVzBCwOGYOo1jpv1g=
Subject key identifier: 7D:5F:20:F4:01:F6:B9:86:98:9E:CC:74:0F:87:A9:9F:70:18:4E:D8
Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6
Certificate serial: 019612B3A8035771BE0901CEEA8A4C565BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
Manifest number: 133B
Signing time: Tue 08 Apr 2025 00:01:25 +0000
Manifest this update: Tue 08 Apr 2025 00:01:25 +0000
Manifest next update: Wed 09 Apr 2025 00:01:25 +0000
Files and hashes: 1: 2GchBXUrmCF00QQMEDgXVwuNNNY.crl (hash: foVIaHb1ZjiqEaNAAhy/mhbOSa7+Ih2u16hwTngRZts=)
2: MPv0ZIQf8gF63bRVzj_wdZ-dXZY.roa (hash: KkiJFkcyvUz1heqkxBgEPmTtzY4d9T2+9il0WhHIMyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:b3:a8:03:57:71:be:09:01:ce:ea:8a:4c:56:5b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8672105752b982174d1040c103817570b8d34d6
Validity
Not Before: Apr 8 00:01:25 2025 GMT
Not After : Apr 9 00:01:25 2025 GMT
Subject: CN=7d5f20f401f6b986989ecc740f87a99f70184ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:31:e2:5b:0a:17:31:fa:c6:86:94:dd:e9:27:
1d:86:63:b1:46:f9:bf:6c:5c:33:f9:47:56:06:dc:
da:69:1e:65:fc:99:a1:3e:62:f4:ed:d0:34:54:c4:
58:76:83:bd:3f:c0:0a:eb:03:86:5a:4a:10:a0:f5:
39:8a:b4:50:d4:65:16:65:61:12:32:36:16:5c:a4:
e1:c1:3f:95:fe:b1:fc:68:1f:54:a0:53:09:3b:39:
28:d5:c2:0a:8d:11:66:89:b2:54:c2:50:ee:a8:6d:
11:54:11:9a:37:5e:d7:4e:d6:f5:ef:be:f9:db:ca:
cd:98:ba:8f:57:2d:f3:35:8d:d4:dd:25:32:de:f4:
b7:27:59:8b:1c:fb:5d:57:83:b0:b7:b9:0a:59:84:
93:f4:91:88:14:6f:e1:08:49:f3:19:75:a9:82:f1:
4a:41:6c:59:d4:91:92:8d:b0:2e:71:d3:5f:55:a0:
d2:ea:92:43:58:9d:77:63:62:9a:08:09:2b:0e:fe:
a2:de:e6:73:23:c1:c1:e4:b7:de:03:3a:11:27:02:
c9:a9:e8:83:a8:21:92:bd:0c:6d:8b:23:95:cb:c8:
41:2d:2b:b8:f4:d5:5b:fe:97:26:28:b9:b8:ca:28:
ac:47:b2:7a:7a:6e:17:eb:22:7f:b3:35:1f:15:21:
39:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5F:20:F4:01:F6:B9:86:98:9E:CC:74:0F:87:A9:9F:70:18:4E:D8
X509v3 Authority Key Identifier:
keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e0:48:b0:dd:ae:2b:3e:a9:3a:9b:9b:4c:83:11:3b:03:c1:
8b:7f:4e:66:85:56:8c:17:8d:96:e3:5f:66:3b:4a:df:22:61:
68:53:2d:57:e8:65:cf:a9:46:03:81:ef:7d:29:93:e8:ae:f4:
f3:60:5d:24:79:80:cc:1f:fd:a7:16:64:dc:4c:2d:31:bc:24:
ef:26:d8:19:a1:e6:79:bb:2b:f2:3e:a0:a6:0c:a7:90:f9:28:
40:fd:9d:6b:8b:7c:64:eb:61:c0:54:ff:41:08:60:ea:63:67:
86:c1:ac:c3:29:5f:17:56:62:be:8d:b8:6a:f4:e9:29:bf:fa:
12:f9:89:96:97:7f:46:aa:11:a3:01:cf:d7:dc:2a:e1:e2:ae:
a0:c9:ca:ef:e9:4d:62:1c:17:23:9f:0a:6b:62:4b:2a:ac:e0:
0b:5a:be:00:a5:7a:e5:2f:2d:56:fc:9c:59:1b:5f:d9:15:6a:
8d:e7:ee:88:e9:d4:02:78:d2:f5:99:27:2d:22:f7:04:0b:11:
87:4a:da:a0:01:ab:e4:1d:d1:32:aa:3f:1d:f7:31:ba:fa:e7:
1b:5d:01:93:e9:19:2c:b0:a7:59:63:a5:0f:48:08:88:a4:8c:
45:5f:36:24:c0:4d:7f:40:be:e6:1e:a6:88:c7:11:87:13:cc:
5b:c3:cf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:15:45 2025 by rpki-client