Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier: GvzuMtVfX5zmnuK9WEUk1KmizRXsLHkGM2Hl2eYJ1h8=
Subject key identifier: FD:4B:49:0B:B8:4C:01:81:49:67:4D:C7:49:4C:30:0B:B7:0C:DD:69
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial: 0196C314CB5DA73A8479024C3AFBAA4738BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number: 021A
Signing time: Mon 12 May 2025 06:00:41 +0000
Manifest this update: Mon 12 May 2025 06:00:41 +0000
Manifest next update: Tue 13 May 2025 06:00:41 +0000
Files and hashes: 1: 9EiTee9k8nFjET11hPatStF9nkM.roa (hash: rKaveA0rfCcy5/zhxw6q4cAzgO9tcO/IcjE7cyeyoGI=)
2: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: S9mhsUDxbWL68mDhh/Nzw03DmoJQO+C3HuSWB2SOKys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:cb:5d:a7:3a:84:79:02:4c:3a:fb:aa:47:38:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Validity
Not Before: May 12 06:00:41 2025 GMT
Not After : May 13 06:00:41 2025 GMT
Subject: CN=fd4b490bb84c018149674dc7494c300bb70cdd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e6:45:ea:6a:e7:08:c3:fe:dc:b0:69:c3:de:
b1:34:af:8f:62:b2:38:e0:48:67:d4:05:dc:bb:d5:
1a:19:04:6e:bb:e3:df:d5:94:fe:fa:3e:b3:41:c0:
79:54:03:74:1e:53:d8:99:89:30:3d:ea:e9:ed:67:
c8:09:c5:d0:9d:00:cc:1c:75:c7:a8:cb:69:24:ba:
46:99:8e:f5:6f:24:1e:6d:6d:7e:d0:bd:4f:82:61:
ce:3e:6d:3b:20:be:df:d9:c6:88:7b:11:89:a4:4e:
5f:49:a4:e3:e0:8a:bb:5c:0a:63:69:77:da:c3:c4:
44:4e:33:90:3e:17:35:4c:9b:dd:a6:38:2e:43:81:
54:70:11:95:76:ba:f7:eb:e5:2d:cd:81:2d:47:88:
0f:90:2a:5a:50:9b:74:20:f9:93:f9:eb:cf:63:48:
82:0f:2f:40:31:24:7a:a4:03:fe:0c:56:6e:06:32:
4b:eb:19:8d:e3:dd:25:ff:8c:be:df:52:b7:94:d3:
25:24:c4:78:d9:72:b2:c3:99:63:cb:2b:c1:31:95:
21:79:43:03:2b:b1:90:80:1b:18:7a:4c:a7:9c:41:
6e:2c:c2:eb:09:93:6f:01:c4:33:00:eb:e5:b6:46:
58:f8:4f:d9:37:a5:64:34:44:71:00:62:cf:be:43:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4B:49:0B:B8:4C:01:81:49:67:4D:C7:49:4C:30:0B:B7:0C:DD:69
X509v3 Authority Key Identifier:
keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8a:83:79:d5:b8:de:54:ad:5a:50:b0:f2:19:96:c2:dd:a5:
80:76:ec:80:a7:9a:51:42:06:c8:7e:a0:8f:60:85:03:0a:fe:
d0:8d:17:4e:70:1a:ab:ee:aa:da:de:5c:4b:c8:d3:8b:87:a4:
0c:6d:9d:25:c4:3c:1b:47:52:9c:36:97:aa:3b:7e:eb:e9:ee:
34:bd:46:41:24:2a:6d:c4:e9:36:8d:b5:7f:40:3c:82:4d:7e:
39:8b:82:2a:84:51:81:c8:31:13:fe:e4:10:8b:2f:9b:ca:de:
5e:fd:62:63:75:22:fd:d7:be:d0:5f:aa:d5:e9:66:bd:29:31:
90:e3:04:62:75:1d:c5:31:0d:39:90:cc:83:b4:1b:9b:c8:79:
c7:2a:86:12:54:bb:51:41:00:e5:eb:f9:f6:47:3f:c0:6a:b1:
ab:0d:14:42:0c:75:68:40:08:9e:78:04:20:6a:4a:c0:49:65:
6d:54:b6:64:1a:8d:e1:e5:25:67:26:52:e0:4d:eb:6f:49:47:
d9:f7:81:2b:87:e7:84:93:76:8d:a5:e3:c0:48:c2:cd:90:39:
a0:ca:f5:93:d3:7b:28:70:a6:05:f7:2f:b8:90:0b:8d:33:f5:
da:66:3c:6d:72:c5:8e:3b:0f:a5:38:45:04:7b:5e:7e:db:2c:
68:96:a6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:01:07 2025 by rpki-client