Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: 8qSTbBSoSCLM2K3DfD2rZ4v/CHgUarh0MBkZSY8jcWI=
Subject key identifier: D2:40:6A:44:35:BA:B4:00:C8:FB:52:08:2D:0F:FF:41:11:5A:75:4E
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 0196CEAAE33E0B79CFF99EEEC72545E2A67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0A68
Signing time: Wed 14 May 2025 12:00:27 +0000
Manifest this update: Wed 14 May 2025 12:00:27 +0000
Manifest next update: Thu 15 May 2025 12:00:27 +0000
Files and hashes: 1: 5uljjHiNNOaac26tRfDYMvtnMkY.roa (hash: Q7M6Bp79D6O8dYm6M5ML2nLIMBbVb2sxR0r3nfKEu6U=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: wR1nJ5NcFsO60YQWPB72ytQfG6X66hwacIkxBPgcnqQ=)
3: v48Lr2EX71CfbBZZKT-B2CDMZWI.roa (hash: FbcS7Loz8XtWLz+emLVfELqvfvzTkNt/9jQwmw4FZhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:aa:e3:3e:0b:79:cf:f9:9e:ee:c7:25:45:e2:a6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: May 14 12:00:27 2025 GMT
Not After : May 15 12:00:27 2025 GMT
Subject: CN=d2406a4435bab400c8fb52082d0fff41115a754e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:b6:20:4e:75:da:0b:4d:46:5b:d2:d8:09:
aa:fa:b6:f1:38:c3:fe:96:a8:11:05:2a:e1:4c:a7:
2d:d9:19:9e:fa:79:63:23:ad:a0:6b:42:68:a8:f2:
0d:73:33:50:38:55:1d:c6:a4:e8:5c:90:c8:dd:d9:
8a:4c:b7:86:fc:7e:e3:e2:54:4c:c7:15:60:57:19:
b4:69:10:72:ae:73:a0:07:6f:ef:11:26:9e:50:c5:
27:37:0b:62:25:29:c6:d3:54:13:e4:38:c5:15:52:
3d:83:d1:84:0d:e6:e1:0d:9c:30:7b:d3:91:df:6d:
87:fc:47:a2:68:b5:39:b8:b8:e9:c7:1b:bb:08:2e:
9b:2e:34:72:ed:dd:bd:2c:93:d4:5a:c4:3e:f5:7f:
14:e2:10:e2:bd:18:f0:9d:d9:12:05:71:40:33:70:
3e:d0:83:04:53:a8:3b:d3:bc:b9:e4:03:50:cb:08:
89:e1:ca:77:7d:63:99:43:30:9b:2f:d7:aa:b8:97:
82:45:3b:96:99:f1:1e:01:5f:e8:aa:a1:f9:8d:42:
c1:40:51:85:e8:6c:e7:bc:e6:d1:74:25:cc:c6:44:
c0:f5:ad:24:dc:1e:2b:24:f2:03:98:ec:7d:48:3c:
45:13:25:ac:7c:c4:de:76:63:37:50:1f:12:6b:7a:
ac:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:40:6A:44:35:BA:B4:00:C8:FB:52:08:2D:0F:FF:41:11:5A:75:4E
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:85:0b:26:39:84:bb:0d:e4:25:9f:dd:22:43:2f:2e:03:d3:
da:7f:19:dc:5c:df:e8:45:0d:63:ef:2f:cc:36:13:ff:21:be:
85:ff:ca:e8:bb:48:25:50:fc:e9:5a:51:50:b0:8e:d3:04:9c:
bc:a4:b2:9f:c7:43:48:69:14:fa:f8:54:08:44:d0:92:f4:0b:
85:bb:f3:73:4c:14:6d:91:3c:27:73:e0:82:79:cb:1e:e2:35:
c5:2e:62:90:ac:47:d4:19:1d:48:6f:f1:39:4d:a9:1b:01:5c:
a3:eb:89:0e:20:74:82:e1:37:25:bd:e4:67:16:0e:76:45:f3:
cd:e7:f8:a0:fe:c2:53:22:5e:e0:89:71:8b:4d:b0:0c:7c:27:
ac:4f:05:aa:6f:82:a7:f6:9a:b4:2e:9d:62:08:c6:90:65:32:
f0:01:30:b6:4f:33:45:e9:ca:3e:b7:d4:46:61:d0:ce:09:c8:
40:dc:07:07:82:44:82:6f:83:01:0d:f0:98:2c:75:80:7a:76:
ab:ca:d7:6c:ea:75:8d:82:9f:57:2f:a7:5b:a4:99:be:6d:3b:
53:a7:83:5a:be:1d:f3:9b:f9:7f:1c:95:b4:28:a3:a3:d0:8e:
a8:89:e0:43:3a:03:1b:d9:7b:62:af:df:00:bd:2c:b3:0f:c9:
2f:21:b8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:10:37 2025 by rpki-client