Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
File: 2GucF3igUp7n4jIAPL5cmTw2_ds.mft (raw, json)
Hash identifier: xNDrdmPvKx0sh2wRwZ0Yly5MQfigitCELAOsGMssZkc=
Subject key identifier: E5:EE:CB:74:4C:E1:28:4D:FF:3E:F6:72:AA:66:78:64:0F:3F:D7:89
Authority key identifier: D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
Certificate issuer: /CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Certificate serial: 019683C809C99D4CF3642C3DBD9E2784141A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
Manifest number: 0276
Signing time: Tue 29 Apr 2025 23:00:47 +0000
Manifest this update: Tue 29 Apr 2025 23:00:47 +0000
Manifest next update: Wed 30 Apr 2025 23:00:47 +0000
Files and hashes: 1: 2GucF3igUp7n4jIAPL5cmTw2_ds.crl (hash: tTR9/RNoZIHAas512C54J8UO4R0ZRWm1ez/BSfwCRFc=)
2: xaTFNHvIwGFGt2nvvisSJGJJn1U.roa (hash: dncutlGZCp4ijfHdULe589Ce9+6dKbRvNV71t7mvtSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c8:09:c9:9d:4c:f3:64:2c:3d:bd:9e:27:84:14:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86b9c1778a0529ee7e232003cbe5c993c36fddb
Validity
Not Before: Apr 29 23:00:47 2025 GMT
Not After : Apr 30 23:00:47 2025 GMT
Subject: CN=e5eecb744ce1284dff3ef672aa6678640f3fd789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:75:2d:43:ff:c1:f3:89:9a:fe:5a:fb:51:
08:9b:e8:fd:bb:c0:35:6e:41:cc:af:66:e5:3f:7f:
ad:3b:ba:17:c3:1c:ef:50:6c:01:f5:71:50:17:b4:
1f:6d:24:78:f8:24:a3:7b:f1:69:bc:1e:fd:7f:fe:
df:41:7d:33:b1:f5:e9:ac:b2:df:f9:8d:58:6e:f7:
76:89:5b:eb:59:06:ed:80:b3:01:bc:03:0b:92:d6:
33:f7:06:ea:ce:6b:b9:5f:7a:98:05:bc:ed:37:5c:
ab:1f:b9:d0:2e:66:ac:93:11:4f:b8:4d:5b:8c:e3:
0d:00:d1:c8:48:57:97:4c:83:5b:7f:2d:a1:4e:50:
4f:ca:24:e4:62:d5:f7:73:32:6f:65:d5:2f:fd:02:
ac:6b:66:d5:dd:7c:5b:e4:6b:36:f2:b5:7a:2a:43:
36:40:73:a9:e6:dd:aa:6b:fd:71:c8:1e:42:a4:31:
0e:2c:f7:47:3e:7d:34:9d:bd:ea:c7:08:5a:b9:35:
dc:ce:e3:4d:77:91:8b:95:9c:3a:20:47:af:b9:6a:
48:71:a6:2c:36:a7:37:06:24:4f:3a:da:19:81:8a:
0b:4a:d9:bd:33:25:e2:69:bb:7a:de:f4:68:96:26:
8d:21:8d:03:a3:b9:bd:02:b8:e6:f6:9d:22:cd:6a:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EE:CB:74:4C:E1:28:4D:FF:3E:F6:72:AA:66:78:64:0F:3F:D7:89
X509v3 Authority Key Identifier:
keyid:D8:6B:9C:17:78:A0:52:9E:E7:E2:32:00:3C:BE:5C:99:3C:36:FD:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GucF3igUp7n4jIAPL5cmTw2_ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/970f9a-9480-4fdd-a4f4-a80a95e5a099/1/2GucF3igUp7n4jIAPL5cmTw2_ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d8:17:50:b3:62:86:6d:aa:50:92:67:b0:ca:03:c3:12:56:
68:18:95:d0:17:c2:5d:5d:c2:a8:0f:b1:f4:1e:4a:94:c7:13:
10:95:46:d2:ad:a1:7c:86:99:48:15:2e:b3:81:df:aa:53:2d:
bc:39:bc:1d:34:50:d4:2b:5a:ec:1a:45:29:23:30:b5:b0:80:
d5:90:eb:2e:a6:96:a8:42:81:18:70:d2:a3:0a:99:0d:66:64:
1d:4b:97:15:34:68:12:67:a8:e3:f7:b0:1c:f3:b2:f6:08:3d:
6a:82:8d:87:ce:b9:61:5c:0d:a2:66:66:21:8f:fc:ef:8c:0a:
99:69:b7:8e:f3:d7:4c:64:a4:59:12:78:ec:62:b6:e1:db:57:
86:bc:a5:dc:68:73:3d:32:e3:22:cf:cb:cd:68:d3:16:34:62:
2f:98:1d:19:d8:6f:35:f1:0c:49:e0:8b:18:d8:fb:f8:49:a2:
52:b3:5f:d5:68:e4:cf:d6:e6:07:a7:bd:89:78:9d:36:e4:d4:
de:8c:35:1f:d2:e6:e7:9a:96:32:94:e7:82:00:82:76:8d:4a:
7c:35:7e:93:2d:d0:bc:37:84:da:e0:1a:a1:b4:4a:61:b9:cb:
b1:d9:59:f5:30:2a:bf:69:dc:06:d8:45:db:52:06:6d:bf:01:
a0:c0:25:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:26:44 2025 by rpki-client