Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
File: 2GchBXUrmCF00QQMEDgXVwuNNNY.mft (raw, json)
Hash identifier: o4EO+WD+MVyjGitXU4ifW4ZPr5JAbeFuNyaP20MASno=
Subject key identifier: CC:6B:32:BC:1E:41:C5:49:90:27:8E:CC:89:09:F9:7C:C1:42:D0:81
Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6
Certificate serial: 0194BAF208D1908C8011706BAB1168AE09A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
Manifest number: 1289
Signing time: Fri 31 Jan 2025 06:00:11 +0000
Manifest this update: Fri 31 Jan 2025 06:00:11 +0000
Manifest next update: Sat 01 Feb 2025 06:00:11 +0000
Files and hashes: 1: 2GchBXUrmCF00QQMEDgXVwuNNNY.crl (hash: Nf1dJ4qlmNu6MAHjcEGk9Bo3nxypbAFzQFP+Y0qZI2I=)
2: MPv0ZIQf8gF63bRVzj_wdZ-dXZY.roa (hash: KkiJFkcyvUz1heqkxBgEPmTtzY4d9T2+9il0WhHIMyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:08:d1:90:8c:80:11:70:6b:ab:11:68:ae:09:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8672105752b982174d1040c103817570b8d34d6
Validity
Not Before: Jan 31 06:00:11 2025 GMT
Not After : Feb 1 06:00:11 2025 GMT
Subject: CN=cc6b32bc1e41c54990278ecc8909f97cc142d081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:5c:07:21:cf:a7:a7:63:d5:7b:a2:12:ed:
55:b9:3f:a7:b5:ae:57:25:f1:da:31:df:a3:d6:ed:
9b:15:d2:89:b2:c8:4a:54:94:a8:37:0e:5b:d9:c0:
79:85:1d:a5:45:72:cf:6d:a7:bb:53:9c:6c:d5:e0:
96:73:bf:f0:68:e2:ed:4c:ab:fa:56:79:5b:6d:88:
0b:c3:a4:78:c4:8e:e4:6d:ed:06:5f:c4:e3:4a:ce:
75:20:60:0f:d8:eb:df:e6:69:da:1b:bb:97:7e:19:
b7:50:45:a5:08:4c:bb:55:1f:cf:0b:f0:d6:68:77:
aa:19:b5:46:1f:85:b7:96:26:9b:d2:0f:60:d6:fb:
d7:3f:b2:b7:2c:57:40:5c:fb:71:9b:bf:ca:3d:4e:
76:b4:37:62:9b:66:3c:b5:ad:72:1b:93:8e:81:b4:
e2:7a:ce:b2:f4:de:80:8a:9c:ef:ce:4b:b6:81:7c:
3e:89:e7:5c:f4:2f:6b:51:8a:de:61:c8:f7:93:f1:
1b:c2:76:28:29:d8:0e:04:dd:4b:ab:e1:e7:ad:5d:
19:c7:38:9b:91:9d:40:a9:83:03:f1:1c:bf:f5:4a:
f0:74:0c:16:23:ef:42:14:2c:94:17:44:fd:03:92:
09:55:39:98:69:9f:d7:d2:e7:17:66:9e:f0:72:94:
28:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6B:32:BC:1E:41:C5:49:90:27:8E:CC:89:09:F9:7C:C1:42:D0:81
X509v3 Authority Key Identifier:
keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:48:ca:b4:c7:5c:c4:b5:26:13:2a:ae:34:79:08:41:bd:d9:
2c:41:bf:76:09:5b:6d:fa:e2:06:5a:30:91:eb:9d:f6:ae:24:
07:11:b1:58:c7:a5:4b:76:36:7d:20:82:44:5e:4f:3a:a4:bd:
7b:b8:5b:9e:95:4a:9f:6f:de:ee:32:1c:cd:c2:89:7d:36:8d:
8b:a7:38:e1:42:64:8e:f1:20:f6:44:77:f9:cf:9b:f0:a5:27:
fc:bc:61:2a:5c:75:7a:37:cd:c3:e9:43:f1:51:3c:87:38:42:
7e:33:70:73:99:f9:92:40:d8:53:82:54:e0:2d:05:59:10:2a:
72:70:00:35:ff:6e:8d:6a:67:34:6d:af:90:29:ae:3e:c3:2c:
5a:e9:21:31:fc:f9:9a:1c:c5:78:2d:bc:47:0a:be:84:49:f8:
3a:12:a9:30:d0:98:4f:c1:be:31:fa:25:42:ac:ca:fb:ad:35:
56:b2:95:46:6d:27:21:66:9d:7f:3a:58:21:03:1a:94:eb:7d:
9a:52:86:7f:0e:b5:32:72:65:21:88:fa:c2:ea:22:ad:c2:05:
e1:bb:39:c9:39:16:e2:1f:b4:11:ef:e1:6c:7a:08:b3:87:e3:
33:cd:1d:f0:88:41:9a:96:49:43:51:38:a9:fd:e2:83:19:e3:
f8:5f:2f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:44 2025 by rpki-client on console-fra.rpki-client.org