Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
File: 2gqhNedmvFsn3S9QFPtjrrWR-Po.mft (raw, json)
Hash identifier: IWD3Tt8yS4tVoaPCupBxtHVg2DVVOPhZhjU3sjOehX0=
Subject key identifier: 03:9D:89:EF:0F:42:45:0F:8A:25:1A:BB:E6:DB:C4:AD:C5:AF:11:31
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 019675D512507F5FCF2F2EDF1E88691BA662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
Manifest number: 0466
Signing time: Sun 27 Apr 2025 06:00:20 +0000
Manifest this update: Sun 27 Apr 2025 06:00:20 +0000
Manifest next update: Mon 28 Apr 2025 06:00:20 +0000
Files and hashes: 1: 2gqhNedmvFsn3S9QFPtjrrWR-Po.crl (hash: SS87Qa0GX4+ixvJwlmzuGg0z8VYd8ELrCVPPRbp75AM=)
2: XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa (hash: IO3j0G8UIN7fX3xi+MKX4YsNgu93V1b6w5hTqh+nJ+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:12:50:7f:5f:cf:2f:2e:df:1e:88:69:1b:a6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Apr 27 06:00:20 2025 GMT
Not After : Apr 28 06:00:20 2025 GMT
Subject: CN=039d89ef0f42450f8a251abbe6dbc4adc5af1131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2a:b1:bf:82:6f:de:56:72:e3:31:cf:f0:85:
f3:1a:9c:22:40:58:34:a3:c0:e6:2a:9a:0c:82:af:
20:4a:65:6a:f4:e2:98:98:a7:d8:a8:5d:e0:97:95:
e5:f3:73:53:d9:1c:b2:5e:ae:98:4f:0b:48:e3:a7:
bd:71:a2:3f:5c:50:0c:49:54:91:ee:69:ab:14:92:
dd:ac:68:6c:f5:fe:90:2b:c0:45:9e:87:aa:e1:2e:
79:ba:d7:19:4e:3c:86:25:9c:63:1d:99:50:47:7d:
f7:4f:f1:8b:cc:6f:80:8a:24:9f:08:86:25:0a:03:
d1:bf:5f:f3:b4:d0:05:ed:b4:0b:59:0a:79:3f:f4:
3d:eb:dd:ce:d3:5c:bc:08:f3:39:6b:00:8c:a2:64:
f4:25:cb:a2:2f:1f:fd:37:0c:72:f5:a8:e2:60:bc:
51:a7:cb:5b:ca:6e:02:c9:95:ae:1d:a3:e2:93:2e:
8d:ce:c1:f0:a5:fd:0c:0d:f8:d3:a0:d2:2f:6d:fa:
ad:fe:c3:e8:b3:63:4a:78:c9:9a:01:89:9f:6d:21:
ff:3b:14:c1:72:4a:35:f1:ca:f3:2a:98:d9:c4:6f:
90:10:43:6e:4f:83:fa:ae:6c:c1:44:73:2b:48:3e:
57:4d:4f:30:c7:9c:8b:47:c9:38:c1:f6:99:fc:7d:
23:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9D:89:EF:0F:42:45:0F:8A:25:1A:BB:E6:DB:C4:AD:C5:AF:11:31
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cc:d2:07:88:8f:3d:1a:a7:9f:2d:b5:71:6c:2f:c1:1c:c3:
0c:f5:13:4d:71:e7:1b:3f:2d:56:7d:20:e1:ff:0e:23:4d:6d:
4e:41:41:57:52:5a:82:a3:96:67:00:35:77:df:fb:af:9e:04:
e5:74:b5:4a:2a:2f:e8:3c:d3:4e:03:c6:b7:e0:ca:9c:0e:95:
f2:a8:3a:c1:19:fe:65:89:83:26:bc:1f:70:3c:d9:2d:95:a0:
0a:d9:2f:93:d6:d3:34:5c:db:e8:d1:95:e9:eb:e8:30:81:3b:
b7:bb:a3:b5:db:19:54:d0:a3:9f:e6:4e:34:63:79:95:4f:8f:
70:0e:ee:13:25:ff:56:41:ae:91:b2:fa:4b:a4:56:be:a7:8e:
2c:f0:55:67:6f:73:25:09:29:14:05:3e:ab:70:c0:a2:10:25:
f1:75:3b:dd:4b:96:d9:dc:4d:8a:07:11:ff:1b:49:92:e8:de:
30:48:34:85:6d:98:80:5c:24:ca:97:68:be:37:46:c0:27:be:
52:b1:66:b3:45:e7:6f:46:b2:e9:98:06:2d:9d:cf:4f:67:37:
56:9c:da:14:88:65:6e:e8:c0:5d:05:23:68:72:f2:90:33:33:
80:00:ed:40:7f:05:ec:48:26:fd:c7:91:7f:be:65:4b:ef:76:
f8:67:b0:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ11RJQf1/PLy7fHohpG6ZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGFhMTM1ZTc2NmJjNWIyN2RkMmY1MDE0ZmI2M2FlYjU5
MWY4ZmEwHhcNMjUwNDI3MDYwMDIwWhcNMjUwNDI4MDYwMDIwWjAzMTEwLwYDVQQD
EygwMzlkODllZjBmNDI0NTBmOGEyNTFhYmJlNmRiYzRhZGM1YWYxMTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiqxv4Jv3lZy4zHP8IXzGpwiQFg0
o8DmKpoMgq8gSmVq9OKYmKfYqF3gl5Xl83NT2RyyXq6YTwtI46e9caI/XFAMSVSR
7mmrFJLdrGhs9f6QK8BFnoeq4S55utcZTjyGJZxjHZlQR333T/GLzG+AiiSfCIYl
CgPRv1/ztNAF7bQLWQp5P/Q9693O01y8CPM5awCMomT0JcuiLx/9Nwxy9ajiYLxR
p8tbym4CyZWuHaPiky6NzsHwpf0MDfjToNIvbfqt/sPos2NKeMmaAYmfbSH/OxTB
cko18crzKpjZxG+QEENuT4P6rmzBRHMrSD5XTU8wx5yLR8k4wfaZ/H0jEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOdie8PQkUPiiUau+bbxK3FrxExMB8GA1UdIwQY
MBaAFNoKoTXnZrxbJ90vUBT7Y661kfj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEt
YWYzYWYwODJmOTQzLzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEtYWYzYWYwODJmOTQz
LzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZczSB4iP
PRqnny21cWwvwRzDDPUTTXHnGz8tVn0g4f8OI01tTkFBV1JagqOWZwA1d9/7r54E
5XS1Siov6DzTTgPGt+DKnA6V8qg6wRn+ZYmDJrwfcDzZLZWgCtkvk9bTNFzb6NGV
6evoMIE7t7ujtdsZVNCjn+ZONGN5lU+PcA7uEyX/VkGukbL6S6RWvqeOLPBVZ29z
JQkpFAU+q3DAohAl8XU73UuW2dxNigcR/xtJkujeMEg0hW2YgFwkypdovjdGwCe+
UrFms0Xnb0ay6ZgGLZ3PT2c3VpzaFIhlbujAXQUjaHLykDMzgADtQH8F7Egm/ceR
f75lS+92+GewlQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:50:01 2025 by rpki-client