Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
File: AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json)
Hash identifier: Yak/JIx5aamFwqOqTF2KIMFcXo1eMjaHwuOo30ltk2M=
Subject key identifier: 0D:A5:3B:BF:1F:C5:AE:6E:20:1C:6A:D9:F1:2F:7B:98:DF:AC:1E:AC
Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
Certificate issuer: /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Certificate serial: 0196AA311DF3FA5F1129FAA1E740DC98F82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
Manifest number: 1525
Signing time: Wed 07 May 2025 10:01:07 +0000
Manifest this update: Wed 07 May 2025 10:01:07 +0000
Manifest next update: Thu 08 May 2025 10:01:07 +0000
Files and hashes: 1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: 4qDC6Hm7tDiyjeyqU3/yKMJ+ky+goWb3M9O9jcH6Z5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:31:1d:f3:fa:5f:11:29:fa:a1:e7:40:dc:98:f8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Validity
Not Before: May 7 10:01:07 2025 GMT
Not After : May 8 10:01:07 2025 GMT
Subject: CN=0da53bbf1fc5ae6e201c6ad9f12f7b98dfac1eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0d:29:17:4c:b1:54:a3:75:49:b5:3e:62:42:
ec:b3:fc:29:95:9a:40:39:f8:fc:a9:ef:a4:21:93:
ca:e0:bf:f6:4f:51:fc:e8:f5:af:cd:54:2e:e9:e5:
cc:fa:ef:d5:c4:c1:27:eb:53:3d:bc:de:d0:a4:6e:
1a:de:c6:36:8d:85:aa:72:ec:67:28:e3:7a:c3:50:
38:5f:1f:7e:8d:28:1f:61:b1:62:65:6a:36:d8:65:
2f:10:45:4a:e8:72:bb:ba:83:d5:e6:66:d1:84:79:
9a:ad:21:25:eb:25:24:36:a4:21:a3:b2:ce:38:e0:
41:1d:56:ec:54:5c:26:44:fb:fa:db:a0:d7:ae:80:
d0:9f:8a:44:1b:bd:e1:80:25:bb:97:05:c8:2e:d2:
16:ca:54:16:16:90:a7:33:fb:d4:59:e9:43:ca:5b:
fc:79:ad:2a:71:83:cc:85:64:ab:82:9b:1c:c4:a9:
8e:d2:94:ca:48:35:90:42:a6:51:0f:9a:3a:fa:8b:
75:31:84:c3:23:d8:11:e7:2b:33:e0:61:2b:46:d3:
a1:15:28:63:35:8a:0e:f9:90:05:ea:f9:0a:5c:df:
c9:40:c6:79:7b:83:5b:a0:c5:e1:f1:95:33:13:30:
9b:0d:0d:be:ec:a5:ba:7f:e6:a0:a2:21:c8:13:59:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A5:3B:BF:1F:C5:AE:6E:20:1C:6A:D9:F1:2F:7B:98:DF:AC:1E:AC
X509v3 Authority Key Identifier:
keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:64:e5:82:f3:15:74:4b:04:87:2d:30:cb:85:7f:ea:df:e2:
3b:f0:07:d0:dc:4f:7d:d3:c1:ef:bf:cf:aa:61:3c:75:78:5a:
41:f3:5a:da:b6:45:72:34:c6:d8:7c:0f:35:37:39:69:0b:cf:
5d:57:a2:86:7d:64:2a:2f:5f:05:39:2d:bd:7f:92:ac:d1:da:
96:c9:17:ef:0e:dd:87:5d:71:44:73:75:55:01:26:4c:26:de:
78:de:d7:11:c4:53:c5:ce:c8:7a:65:29:80:59:30:09:28:0a:
34:7a:4a:70:a1:68:22:71:74:3c:26:f2:22:1d:db:03:fc:df:
2e:51:a6:0e:68:28:7a:97:f8:40:c1:43:3f:36:40:ec:b2:a6:
16:b3:ef:32:4c:a6:24:40:22:96:1f:ff:0f:92:06:25:ce:10:
c9:6f:51:89:d1:95:a2:0d:7b:bc:32:c6:74:c9:2d:ec:74:fb:
c5:e2:f6:7e:ae:cd:08:f8:b3:d8:50:58:79:cb:aa:fb:4f:17:
4f:f3:89:cf:3a:fb:81:1c:e6:8a:4e:df:e0:54:2e:95:d9:6d:
0a:e1:a8:cc:06:68:8a:c1:6d:4e:cc:77:7a:ba:54:92:91:66:
b2:31:1b:82:ff:ec:ae:3c:6f:52:24:f0:8d:88:bb:5d:63:86:
cb:99:f2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:12:51 2025 by rpki-client