Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
File: gUBMBMbCfTKfnIegKvBt2Ybudns.mft (raw, json)
Hash identifier: o9LZM5+B6ZuG978fROckl2tyg9q6cpdeWAJicF5G78s=
Subject key identifier: 87:98:0A:1F:D5:1D:F9:D1:5F:A5:9C:1A:CB:A7:C7:5F:9B:16:D1:93
Authority key identifier: 81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
Certificate issuer: /CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Certificate serial: 0194C4635745D0FD9719E06AE05EFEC2C421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
Manifest number: 51
Signing time: Sun 02 Feb 2025 02:00:32 +0000
Manifest this update: Sun 02 Feb 2025 02:00:32 +0000
Manifest next update: Mon 03 Feb 2025 02:00:32 +0000
Files and hashes: 1: VWvh8oQqbM3sr_YgNU9ovk9YXAA.roa (hash: T1v1mXcrdaWQMWpNfocO7FriUxPCLmULf/wIMAuWmIk=)
2: gUBMBMbCfTKfnIegKvBt2Ybudns.crl (hash: 4LpX49jLmeb2oIxuxBa137jGouvYG4tErsjEZWpAbFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:57:45:d0:fd:97:19:e0:6a:e0:5e:fe:c2:c4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81404c04c6c27d329f9c87a02af06dd986ee767b
Validity
Not Before: Feb 2 02:00:32 2025 GMT
Not After : Feb 3 02:00:32 2025 GMT
Subject: CN=87980a1fd51df9d15fa59c1acba7c75f9b16d193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:6d:ef:48:b9:b5:95:d9:17:e7:06:81:98:
f2:c4:10:68:4b:1a:4e:24:9f:e6:a7:12:18:d7:8c:
7f:85:16:50:ba:c0:08:c7:c4:5c:05:f3:d7:fc:76:
23:fa:5e:c4:ee:e5:43:3d:62:27:ac:98:90:23:f0:
77:6e:0f:5a:7f:f3:b6:b4:05:c7:91:cf:d3:e5:8a:
3e:51:b5:7d:5a:1a:9b:da:ef:4e:26:bc:e2:23:98:
41:49:05:0a:c3:ee:91:d3:a5:d3:ea:78:d0:61:64:
6c:6d:20:8b:01:85:8e:67:33:6b:b5:35:ae:87:9d:
2a:c9:94:84:03:1a:0f:07:60:ae:9e:23:41:62:bf:
e4:79:2b:51:a1:21:ec:40:08:2e:3b:ed:14:19:90:
ee:6a:aa:7a:83:e1:9f:e5:a9:ca:51:fc:61:0d:eb:
bc:a8:7a:20:01:ce:30:e4:38:f1:89:9d:9b:3b:dd:
39:04:a5:a4:c0:9a:7e:18:2a:30:64:65:44:6c:98:
41:d0:b6:99:27:e7:a3:8c:66:be:13:f9:7d:b4:5a:
a8:d8:0f:5d:fb:c0:91:37:25:c0:64:97:f4:ca:59:
18:66:b4:6c:8a:85:3d:94:fc:3d:b2:96:9c:32:9f:
07:53:e0:e2:76:e3:75:4f:f8:87:51:f1:a6:b0:e5:
bf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:98:0A:1F:D5:1D:F9:D1:5F:A5:9C:1A:CB:A7:C7:5F:9B:16:D1:93
X509v3 Authority Key Identifier:
keyid:81:40:4C:04:C6:C2:7D:32:9F:9C:87:A0:2A:F0:6D:D9:86:EE:76:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUBMBMbCfTKfnIegKvBt2Ybudns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2bea45-83ec-4bbb-96b7-f468ee331474/1/gUBMBMbCfTKfnIegKvBt2Ybudns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e3:e9:da:4c:38:53:ec:61:08:96:f9:ae:be:b9:ab:cb:4c:
c1:d2:2c:40:5d:d4:00:cc:0d:90:4c:9d:c4:c7:d3:57:95:3a:
16:bf:61:2c:a2:63:fc:88:df:77:f5:80:83:d6:ae:85:f2:f8:
56:ff:bc:37:69:b8:88:a0:a1:ef:b3:53:38:29:3b:d5:65:60:
df:0a:b9:77:18:b2:db:8f:8c:c0:e3:4b:e7:20:db:88:32:32:
5f:f5:75:6a:25:5f:5a:24:27:2f:9d:bc:93:63:a1:42:40:d0:
41:e8:71:bb:d8:0a:79:21:13:81:17:8b:7c:df:2c:2a:c6:a0:
30:44:54:d9:7c:4c:f3:47:bb:62:ee:51:5f:e2:5d:7f:ce:06:
a0:b6:ef:14:5e:38:c3:18:69:28:10:69:26:3c:e3:07:47:46:
df:4f:17:28:f6:14:d0:24:ac:b5:de:b3:3f:5f:84:d8:3e:18:
4e:2e:f8:89:4c:1c:9a:19:67:f2:85:53:31:13:68:9f:bc:f6:
22:d8:68:79:1d:ad:db:13:e5:66:bf:7c:c1:09:1a:6f:75:e4:
32:d2:7d:33:45:16:ce:00:af:d6:b5:0f:71:c3:7e:87:3e:0d:
d9:fd:18:fb:d2:1c:b1:eb:6d:66:3e:ea:13:3b:35:f1:b0:fa:
54:5f:bb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:20 2025 by rpki-client