Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: n8blmdYXpd9PDHKg76msLn3kXfrwFf3tt6mWp+5gR6s=
Subject key identifier: 8B:8A:B5:15:B0:FF:84:B6:9E:66:26:0D:F7:DD:5A:B0:43:BD:8F:81
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 0196B1458167CC4B286B7F763FA1D5C14B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 19:00:44 +0000
Manifest this update: Thu 08 May 2025 19:00:44 +0000
Manifest next update: Fri 09 May 2025 19:00:44 +0000
Files and hashes: 1: 5uzu_v5gS3ug0oMvGUm8-v7KY5E.roa (hash: ZuCvDvn0y3TKVlnUg7+MwjLLh4Hpu3o4dv6iNubePz8=)
2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: /8wwLSUbdKjZtcrDXImPbWStZZOrgDwjS/R/2OXt79A=)
3: MR8dTdhjmaYLwS5_RZWgeGpHZAs.roa (hash: uHa1AqEKqp9fMO1EIg5qvgkndRdXUoq9xzHg1+rgjtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:45:81:67:cc:4b:28:6b:7f:76:3f:a1:d5:c1:4b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: May 8 19:00:44 2025 GMT
Not After : May 9 19:00:44 2025 GMT
Subject: CN=8b8ab515b0ff84b69e66260df7dd5ab043bd8f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:aa:99:82:43:9d:93:d3:c6:bb:21:84:b2:
a6:8d:0f:9d:e0:6f:59:5f:62:3e:87:49:c7:72:22:
45:0f:24:bf:21:65:0d:73:fb:cc:1d:6f:43:eb:ac:
04:24:0c:67:d4:b1:b6:90:b3:6c:e3:81:06:58:4c:
39:58:9a:1d:38:d7:16:06:90:b5:b6:f0:6b:39:40:
34:23:03:cf:a5:84:f6:f0:f1:eb:a8:c3:88:dd:8a:
b1:bc:3f:29:d6:74:40:29:76:bd:2e:16:16:5b:28:
9c:b0:98:ee:92:0e:04:a4:7e:2f:25:57:41:4d:a8:
55:a2:65:ff:8a:21:73:b1:ce:31:3b:d2:b9:48:bc:
11:c1:54:d8:d1:9c:15:5d:63:02:91:db:93:9c:e8:
fc:e1:81:9e:a3:66:8d:14:9b:e6:61:7f:53:b2:35:
7f:61:ac:84:bc:3d:67:73:64:18:56:dc:c7:71:0c:
9b:86:2d:95:d7:71:73:fd:a6:39:2e:bc:3b:79:3d:
a9:f4:8d:c2:2c:ba:d1:1b:2a:6d:60:29:b2:eb:04:
25:e7:ea:70:f7:7c:9f:85:6a:42:c9:5c:68:50:c9:
2a:be:2a:ce:1f:e9:d1:10:a2:af:8a:83:45:30:cd:
2c:d6:ce:6f:fa:02:91:e6:92:d2:c7:23:96:8d:92:
ff:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8A:B5:15:B0:FF:84:B6:9E:66:26:0D:F7:DD:5A:B0:43:BD:8F:81
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0f:c0:ad:fd:9c:68:bc:20:57:85:f8:19:f8:56:8b:f4:44:
eb:07:ac:dd:0a:51:af:f4:1a:c3:d9:07:a0:04:2a:89:b7:7c:
4f:b3:b7:b9:76:4f:c5:04:5a:ad:13:1b:af:e8:f1:c9:9d:bb:
84:be:03:11:bb:54:3e:55:dd:22:e5:33:e0:16:e6:4b:c0:6f:
c5:77:6a:d7:db:58:5f:eb:e2:cd:14:5e:33:53:16:fa:24:c8:
61:7e:b8:4e:db:c7:c5:00:b9:b2:78:7c:b3:1b:70:dc:4f:63:
54:43:77:b4:2b:e7:2f:0b:4f:52:99:83:a4:b4:37:60:3d:94:
5c:46:6e:ab:d9:d4:fd:c7:0c:bd:aa:8b:4d:cb:6b:82:de:b0:
9f:15:59:e5:be:db:e3:0e:46:02:88:5a:61:3e:e1:6c:9d:b9:
0a:6a:28:83:98:69:2c:5e:41:87:f0:ac:f5:11:84:0a:83:ce:
5e:bf:25:5e:98:39:62:e5:6b:e0:e2:08:d8:15:c6:10:e8:74:
3c:87:08:be:03:3a:48:70:ce:e2:a2:d1:b8:b5:1e:5c:4d:26:
12:49:ae:5d:42:e8:3c:a6:db:02:c7:6c:92:e5:23:5f:6f:52:
0e:d6:d4:48:35:85:01:3a:7e:6e:ff:ee:0d:a6:7e:21:e8:c3:
03:4b:39:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:47:14 2025 by rpki-client