Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json)
Hash identifier: GKQhqOpP9VaicUnF+qCO2b0ee0jUiXEoEdOrjZ8Vjz8=
Subject key identifier: FE:09:C1:88:21:90:F9:3E:E0:89:83:9B:24:B2:12:1B:95:0C:7A:D0
Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Certificate serial: 0196759E6E688F4CE0602C70CF654371089D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
Manifest number: 05D4
Signing time: Sun 27 Apr 2025 05:00:39 +0000
Manifest this update: Sun 27 Apr 2025 05:00:39 +0000
Manifest next update: Mon 28 Apr 2025 05:00:39 +0000
Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: kiRSbGAXIahGlpUyrIEJ9Ev7j0l32Sc5p5D8ID7G/bg=)
2: O5dwSGpy0OL0LjPB3wap3UtIwjM.roa (hash: cR4roCPU2uE8JstXy3PNObd3k08fMc1QAFzMuYnt3oU=)
3: tnUPA6hUZaMc3DGBbjrE2vWk7tg.roa (hash: mdRQc0qGhPN3lwt7z9GCtElgPkcKD7V9qQWoyWEN/8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:6e:68:8f:4c:e0:60:2c:70:cf:65:43:71:08:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8
Validity
Not Before: Apr 27 05:00:39 2025 GMT
Not After : Apr 28 05:00:39 2025 GMT
Subject: CN=fe09c1882190f93ee089839b24b2121b950c7ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:8a:bb:52:0f:e9:4a:d8:44:b7:5f:be:f9:
ab:e9:47:e4:bc:7b:d8:46:da:47:0a:4f:e1:de:6f:
21:37:09:a4:42:36:38:b3:05:56:bf:93:53:48:73:
bd:7b:e3:c1:0d:49:e4:3a:85:17:d0:6a:33:57:a6:
d3:3d:00:31:a9:85:78:5a:5f:b6:a3:5f:2a:86:63:
58:0a:b5:0b:5c:31:0f:35:b5:35:5b:c3:a2:d6:31:
0f:97:3f:0c:84:03:35:c1:94:55:fb:1e:8a:a2:a1:
c7:c0:30:ea:16:5b:1d:48:d4:7d:08:68:84:4c:11:
cd:9e:80:a9:0a:48:db:87:cb:28:29:bd:3e:4c:90:
da:2e:7f:56:cc:9c:cd:89:a5:e6:85:c2:c0:62:51:
21:6f:b0:df:e4:ea:29:d5:89:e7:91:99:3e:14:7c:
be:e0:79:35:2e:e7:18:c4:df:48:62:3c:9d:86:9e:
b4:ea:17:cf:ce:d4:b0:de:df:cb:81:33:65:61:4c:
f1:52:d2:b4:3c:68:21:c2:f2:93:74:65:53:35:b9:
a0:37:f9:b6:2e:bf:92:15:7b:eb:76:01:5c:6e:75:
ca:cc:29:98:44:71:9b:7b:a9:b3:19:cf:ae:97:42:
32:bb:b7:d5:75:9a:97:40:37:9a:a2:32:ab:08:64:
48:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:09:C1:88:21:90:F9:3E:E0:89:83:9B:24:B2:12:1B:95:0C:7A:D0
X509v3 Authority Key Identifier:
keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:74:97:44:64:b8:13:48:f0:91:06:70:eb:a2:77:05:80:c5:
c5:75:4d:bd:4e:93:3f:10:b7:fd:cf:15:e5:6f:83:14:0d:01:
ac:40:df:f6:2f:0e:92:74:06:8a:c7:c2:5a:8c:e5:e8:b7:ab:
90:75:6a:55:3c:a6:94:e8:19:dc:17:e9:85:c4:37:11:fb:cb:
93:66:04:04:fb:44:91:ab:02:c0:8a:04:c1:a9:28:68:1c:f6:
ce:6a:2b:8a:86:35:cc:90:a9:36:f8:4c:86:85:b4:6c:50:53:
09:3a:74:dd:07:30:94:25:e2:06:c4:59:fd:80:fe:04:34:ec:
9b:03:43:f5:52:02:6d:04:00:2f:ef:b5:d0:8e:ef:91:a1:f6:
34:73:81:df:bc:0f:7f:2f:a5:0f:62:e2:40:ba:3a:61:68:4e:
71:99:35:40:f1:c0:1b:d0:25:19:af:70:3d:c1:fb:0b:d5:5f:
1e:72:29:71:8f:2f:55:bf:cc:3f:bc:c8:5f:73:7e:67:64:cd:
30:02:6f:60:4d:7f:d7:ba:6d:c8:40:38:b3:d2:3f:80:95:66:
67:5d:0e:16:66:93:61:ab:23:4d:59:80:74:88:e6:b4:6b:06:
8d:51:f4:d2:e7:2d:2e:9e:7f:4f:b6:cc:43:79:a5:2a:58:bc:
7b:58:43:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:29:19 2025 by rpki-client