
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
File: 2GchBXUrmCF00QQMEDgXVwuNNNY.mft (raw, json)
Hash identifier: aTWhzvy8XFYRtmI6/iGsKFo5f5PhDKyv5/p6e/0ayl0=
Subject key identifier: 33:68:92:F1:FE:E6:24:4D:1C:A8:1F:BF:96:A2:66:72:94:E8:60:69
Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6
Certificate serial: 01987E2EF963E40D3353EAFFDA01D997CCC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
Manifest number: 1480
Signing time: Wed 06 Aug 2025 07:01:04 +0000
Manifest this update: Wed 06 Aug 2025 07:01:04 +0000
Manifest next update: Thu 07 Aug 2025 07:01:04 +0000
Files and hashes: 1: 2GchBXUrmCF00QQMEDgXVwuNNNY.crl (hash: ZoLJbaCcpO2d8k+o3Slpj3Yt4+/R/gtAG5ddyF+kz/E=)
2: LP9-87x2sFdExSVGnQl66ksWebM.roa (hash: FCz58YZkBtrnj9bFMj0dGjpjaE2bGxIe0P3tBukrHxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:f9:63:e4:0d:33:53:ea:ff:da:01:d9:97:cc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8672105752b982174d1040c103817570b8d34d6
Validity
Not Before: Aug 6 07:01:04 2025 GMT
Not After : Aug 7 07:01:04 2025 GMT
Subject: CN=336892f1fee6244d1ca81fbf96a2667294e86069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:3f:4d:22:80:c2:ad:57:9f:c1:b5:c1:c7:
3d:3f:35:a4:89:b7:6e:ba:53:39:dd:7b:77:20:90:
92:45:97:d3:2f:38:87:d7:03:4a:b7:16:37:6c:25:
bc:48:13:01:e5:0a:3a:ec:11:dc:2b:08:8d:f2:d3:
c1:35:eb:6d:90:4a:5c:d2:49:97:bf:f0:a7:bb:60:
bd:3d:6c:56:7a:c1:dc:be:58:f6:c7:77:fa:ed:2b:
2d:71:fb:78:d2:b8:c2:7a:59:bf:7e:54:29:7f:64:
d7:37:97:3b:34:16:28:8f:72:16:c5:4c:23:f3:7e:
e3:39:7e:13:e1:33:f4:48:58:eb:98:91:03:de:f9:
47:8f:e2:b0:c9:1b:0b:1c:d5:63:06:ba:52:9b:33:
a8:fd:6d:8b:b8:11:ce:69:21:a2:12:ea:aa:a2:d3:
ea:53:c0:d6:80:3d:5d:8a:bc:26:7a:4d:ad:9c:85:
6d:72:b6:44:8d:b5:66:de:e4:1b:e8:12:c7:c0:d1:
37:b9:82:c2:31:57:cc:6f:a0:d5:c3:0c:9d:1f:99:
fc:9d:bf:7e:53:f5:4c:19:ab:1e:90:ea:19:97:f9:
99:ef:5c:4c:e8:8e:c2:3f:90:ab:86:81:90:9b:a8:
3a:34:ce:5a:1d:36:da:da:4b:6e:bb:fd:54:ee:5f:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:68:92:F1:FE:E6:24:4D:1C:A8:1F:BF:96:A2:66:72:94:E8:60:69
X509v3 Authority Key Identifier:
keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ba:37:81:87:bd:02:26:c3:45:5b:d0:6b:54:b9:b2:55:37:
f9:a5:96:fa:d9:09:47:a7:5b:db:da:73:ff:46:fa:dc:5a:38:
08:6c:09:55:ad:d6:a1:aa:0a:26:0b:42:77:0f:61:2e:c2:b6:
6d:b0:84:72:d2:91:fa:0b:99:dc:ba:9d:a0:74:2a:1b:02:45:
a0:60:e1:25:df:3d:23:ba:58:4e:ef:2c:b6:33:54:2e:db:4a:
2f:4f:09:73:a5:44:4f:ee:30:c2:96:50:76:df:31:d7:0f:e4:
d3:e0:cd:b8:9b:14:43:59:51:d1:f2:f4:7e:81:b0:5f:b0:87:
7c:c7:35:d6:f7:9d:11:93:2b:d7:02:c9:63:92:79:21:38:e8:
2d:59:b3:5c:a5:33:e5:61:ce:01:c5:4c:a3:c2:38:cd:cf:04:
2c:7e:b3:f5:b8:d4:0e:65:ec:53:94:6d:95:ca:e7:47:44:d5:
f5:45:8d:a1:82:0f:63:24:82:02:7d:e0:36:33:35:22:bb:ad:
cf:05:75:04:d3:94:6f:41:7d:6a:8a:2a:4f:c0:72:00:56:31:
1e:e6:20:7e:9a:d4:ac:5a:e6:13:42:fd:18:bd:fc:39:2b:f0:
49:59:95:9d:0e:89:32:c5:ee:5f:cc:e3:9a:c9:2c:4f:04:34:
aa:7e:ec:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:03:10 2025 by rpki-client