Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
File: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft (raw, json)
Hash identifier: CLPGV5O6S9NH63sQl2Ihh5CoW5ZWentt6FgLJDGPWnQ=
Subject key identifier: 00:B8:0D:07:37:6C:B4:7C:90:27:37:75:04:1F:2D:1A:79:CF:1D:00
Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
Certificate issuer: /CN=d8182a98d6ef80ffb291827da8acca74491080b4
Certificate serial: 019652A46575C472EAFD9F3928287A69A265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
Manifest number: 0F73
Signing time: Sun 20 Apr 2025 10:00:27 +0000
Manifest this update: Sun 20 Apr 2025 10:00:27 +0000
Manifest next update: Mon 21 Apr 2025 10:00:27 +0000
Files and hashes: 1: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl (hash: vjUeO9cgn7kXTXIwsUqF2JBm7PrApEvQp5XjoAEVRbw=)
2: 30vA-2Ti9J4x6gcI-EHLbrCUZpU.roa (hash: TTYewcef5lOn0EHzwdEkvaED9fy4qKHbWldg8iBnGRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:65:75:c4:72:ea:fd:9f:39:28:28:7a:69:a2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4
Validity
Not Before: Apr 20 10:00:27 2025 GMT
Not After : Apr 21 10:00:27 2025 GMT
Subject: CN=00b80d07376cb47c90273775041f2d1a79cf1d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0e:b1:ce:cb:7e:f4:21:f6:46:7a:36:1f:aa:
ae:b8:4b:de:18:94:e1:78:ce:02:dd:e1:f5:4a:f7:
52:c1:c3:90:bf:81:2d:26:5d:10:e8:69:a2:bb:cd:
bd:ae:60:e6:dc:0a:af:8f:36:08:7e:d4:98:7f:21:
55:98:c4:95:eb:5b:7c:32:cd:61:b5:81:30:a1:4a:
af:0f:fb:0c:2f:24:ac:10:ac:18:47:e3:ce:38:4d:
67:f8:5e:26:25:46:99:94:24:55:66:47:c6:9e:cb:
c2:b5:40:cd:77:84:60:d7:b4:78:fe:a7:7b:a3:b9:
13:88:2e:51:9b:14:19:a9:90:fd:5b:69:90:ec:ff:
ed:15:55:2f:93:8b:9d:11:b5:94:79:99:45:4a:d4:
6e:d5:74:c4:eb:82:02:87:79:91:25:af:e1:56:91:
bb:9a:62:e1:ac:d1:5c:8b:44:ce:35:6e:f7:63:a4:
ec:64:be:8a:2c:53:19:75:82:b8:9b:be:3f:75:5e:
d7:0a:89:b0:de:45:5f:8e:96:cf:d0:77:4d:a6:c1:
f3:01:51:0e:7d:0d:f3:0a:de:be:b6:81:91:39:5d:
06:83:7b:6c:8f:07:14:1d:c2:65:70:9f:df:25:06:
9d:06:89:b8:33:4e:06:e2:2a:9b:f8:a1:f2:90:74:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B8:0D:07:37:6C:B4:7C:90:27:37:75:04:1F:2D:1A:79:CF:1D:00
X509v3 Authority Key Identifier:
keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:99:59:ab:be:c7:8f:82:34:81:5a:81:92:a4:76:25:f4:86:
88:1d:f0:e0:77:ba:79:64:d7:50:72:05:5e:b2:a6:65:29:88:
f7:0a:6c:dd:c4:42:a6:cf:e1:25:af:77:b7:75:94:2c:22:67:
ca:7c:c8:99:a1:75:b0:35:7a:7a:85:c4:2f:c9:73:cc:03:9d:
ae:16:0a:38:e3:0f:9c:a3:66:58:04:a2:b6:2c:bf:c8:50:34:
12:b3:1f:50:98:93:f0:83:0d:e4:49:9e:1d:5c:00:96:9c:8c:
9e:e5:42:e7:49:18:73:a8:59:f5:7e:12:ca:c3:10:0a:f5:99:
f0:76:b5:f2:22:2d:c3:72:62:5a:61:e9:a8:81:ef:69:dd:bb:
4c:c9:2c:19:84:7b:ed:db:87:ee:d0:7a:8c:3c:4d:30:06:b2:
01:7c:c6:82:dd:7f:b9:74:b5:db:b8:41:ae:12:44:7f:80:be:
d3:b8:79:2e:aa:85:f9:e4:cb:85:55:ff:33:cb:26:01:21:0f:
38:b1:82:9c:3a:24:35:be:b3:01:ad:23:3f:86:94:d0:83:4e:
a0:71:3d:79:eb:6e:f5:29:e6:ba:1b:89:20:88:1c:9b:be:b9:
d5:12:7e:2a:ed:03:04:6e:54:d6:db:aa:62:5a:6c:95:b1:92:
7d:4a:18:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:56 2025 by rpki-client