Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
File: AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json)
Hash identifier: +OvJ9CiwJvZGF2pxIwkL6cREH74mb8h6ZnsVA5iTBjk=
Subject key identifier: D3:A1:47:40:5C:4C:28:2D:BE:9A:8B:9A:D0:C5:DB:16:97:92:05:1F
Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
Certificate issuer: /CN=030be91321074434c9e820db661c91ca62ccb0fd
Certificate serial: 0196AA3174EF407B63D89D2CCBA37B39BEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
Manifest number: 0F22
Signing time: Wed 07 May 2025 10:01:29 +0000
Manifest this update: Wed 07 May 2025 10:01:29 +0000
Manifest next update: Thu 08 May 2025 10:01:29 +0000
Files and hashes: 1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: bLyjuZpZ0vbt3FdWom78ypcMHHYW03oEULSjme7XESQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:31:74:ef:40:7b:63:d8:9d:2c:cb:a3:7b:39:be:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd
Validity
Not Before: May 7 10:01:29 2025 GMT
Not After : May 8 10:01:29 2025 GMT
Subject: CN=d3a147405c4c282dbe9a8b9ad0c5db169792051f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:49:88:a1:83:b0:f6:30:f2:b2:53:16:92:
8b:f8:fe:32:5a:12:2c:02:6f:5e:0e:4a:66:ba:4a:
b0:db:60:0a:8c:86:a4:a0:bb:be:3f:e2:06:e7:ff:
b8:63:75:f2:3a:c3:34:6f:02:0c:b6:8d:b3:76:89:
cb:19:cc:16:18:85:a6:cd:a5:59:f2:fe:7d:b4:c5:
cf:b4:a9:ce:e9:6b:ad:8b:81:c7:07:97:44:b2:de:
b9:55:45:ae:d8:77:76:12:64:c4:e4:6e:ea:bb:6d:
dc:e9:1c:e0:c4:d5:9d:90:4c:f0:85:d0:37:0c:40:
e9:ae:0c:7d:a1:03:3a:b5:10:5c:bb:01:cb:7c:1c:
15:b7:20:14:fd:28:8d:f7:bf:fb:f9:52:51:fd:b1:
b5:29:54:88:59:6c:71:59:22:ee:80:04:04:0f:32:
e1:1f:75:ae:67:bf:35:1b:f6:42:e3:d9:da:6d:71:
36:b1:47:33:5b:52:ad:14:16:2d:2d:6b:c1:cf:aa:
12:96:a3:63:4b:9c:aa:7e:82:72:63:79:67:20:47:
2b:52:d4:29:76:9b:d5:a5:88:36:27:b8:f8:67:f9:
b1:fd:c2:54:27:b8:e1:4e:94:06:dd:9c:a7:cd:5b:
89:38:98:2c:de:61:a6:4e:80:e0:c6:e9:7c:36:68:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A1:47:40:5C:4C:28:2D:BE:9A:8B:9A:D0:C5:DB:16:97:92:05:1F
X509v3 Authority Key Identifier:
keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6e:c8:a1:fb:28:53:0c:7a:78:60:89:9e:3c:36:68:77:3e:
bb:b5:c4:33:6b:4b:0c:fa:4b:d8:b5:d2:85:a2:b6:6a:31:d3:
44:20:5a:ee:87:67:a9:32:01:8d:65:54:70:91:f1:ba:96:68:
98:e6:d0:d9:61:a0:db:bc:e0:de:52:23:7e:14:23:90:c7:9d:
17:94:0c:4f:8f:59:27:a3:cf:af:99:f8:7c:4b:6f:2f:92:4c:
e1:30:e8:14:46:43:ad:ce:a9:65:38:78:3c:75:7d:62:44:b5:
bd:56:31:6a:6e:89:29:d4:0a:70:40:e7:38:b4:90:f2:f3:80:
10:08:f3:97:dd:32:78:12:52:a1:84:4c:81:30:43:d5:6d:e1:
53:26:e6:71:d8:e0:b0:61:77:6a:56:97:fe:c8:d2:7a:e5:7e:
2c:bb:b1:53:0b:9e:01:a7:f4:b5:85:fe:b3:3e:cb:7c:e8:d9:
2d:80:fc:9e:d3:84:ba:91:6e:43:44:ad:9c:56:c8:7d:37:67:
82:aa:1f:99:a5:2f:12:51:58:a2:a9:f1:a4:de:c0:76:30:8c:
5e:fd:56:22:51:96:29:85:12:3e:00:63:3a:80:f5:89:73:f3:
5e:db:ec:c0:63:bc:0e:c7:c8:9d:ee:02:d3:75:a1:b2:68:96:
68:7d:40:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:51:12 2025 by rpki-client