Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.mft
File: AydVBXxpvXun2iJSAQnkm1sEzAM.mft (raw, json)
Hash identifier: zyjwqMO/T4fIKwBqvUCjDbR8FXWIeELw+p/VRWqFgNc=
Subject key identifier: E7:93:25:74:2E:8C:A0:33:2A:6C:FD:9F:F8:9B:04:5F:25:51:3E:58
Authority key identifier: 03:27:55:05:7C:69:BD:7B:A7:DA:22:52:01:09:E4:9B:5B:04:CC:03
Certificate issuer: /CN=032755057c69bd7ba7da22520109e49b5b04cc03
Certificate serial: 0196A2E515D95D5C51F6059A8480A721F266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.mft
Manifest number: 1529
Signing time: Tue 06 May 2025 00:00:44 +0000
Manifest this update: Tue 06 May 2025 00:00:44 +0000
Manifest next update: Wed 07 May 2025 00:00:44 +0000
Files and hashes: 1: AydVBXxpvXun2iJSAQnkm1sEzAM.crl (hash: dKUY1qRuPmBVvNt1M0K6WhiWppyESuJXTfey1qo2Gp0=)
2: EJzvV6VT4JO2fNcaeaZDcT8DKYo.roa (hash: bG9n2ritOo8P4pLXuKhyV+b01tNOeWKOB0xqyu4uUe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:15:d9:5d:5c:51:f6:05:9a:84:80:a7:21:f2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032755057c69bd7ba7da22520109e49b5b04cc03
Validity
Not Before: May 6 00:00:44 2025 GMT
Not After : May 7 00:00:44 2025 GMT
Subject: CN=e79325742e8ca0332a6cfd9ff89b045f25513e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:5b:1a:4d:44:99:17:e9:3e:85:85:75:cb:
9e:67:6c:96:91:e7:1f:1c:24:2d:d7:58:de:17:38:
e4:86:9a:56:41:71:24:fa:db:76:5c:cc:da:33:33:
d7:5a:e2:11:39:d5:a2:e6:c1:82:9d:67:ba:ab:fe:
f4:53:df:21:8e:98:97:2d:db:92:83:80:55:2a:9b:
95:9f:76:60:4e:7d:be:6c:dc:a1:78:b9:e8:09:2a:
92:b3:73:18:1f:c2:de:29:4a:41:0c:cf:f5:1f:89:
7d:84:2e:84:3a:1c:39:5e:40:08:08:bc:62:37:91:
66:95:d5:51:94:bd:14:e9:86:41:5b:c9:78:cb:fb:
ad:a2:5f:12:28:a7:2f:33:fa:4a:9a:d9:e6:1c:c0:
a3:10:3b:9a:3b:a6:0e:e3:fc:8b:8e:a7:ba:6e:58:
85:5a:9d:18:87:35:e6:66:77:ab:57:da:80:34:37:
9e:b8:d1:df:8f:a5:58:82:30:38:c3:99:27:4c:4a:
02:97:17:7c:8c:5b:e8:f5:77:a8:dc:05:bd:06:c8:
03:b8:3e:20:19:b2:56:97:45:36:1e:2b:1b:af:be:
c7:29:00:7d:10:4f:b1:b3:d5:f3:ac:51:f6:cd:8f:
db:a0:02:ae:d6:42:9c:f6:e3:ea:6a:66:b5:67:67:
65:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:93:25:74:2E:8C:A0:33:2A:6C:FD:9F:F8:9B:04:5F:25:51:3E:58
X509v3 Authority Key Identifier:
keyid:03:27:55:05:7C:69:BD:7B:A7:DA:22:52:01:09:E4:9B:5B:04:CC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:5c:50:67:f1:18:83:ca:10:ae:49:db:52:2c:dc:c5:b8:28:
ff:79:9b:e2:74:91:63:03:89:80:3a:22:e7:31:e0:fa:e5:25:
06:2d:58:f4:27:ab:66:fb:23:b1:65:c2:57:13:7f:59:a8:b3:
7f:4e:2f:be:bf:ac:9b:e9:5b:6e:c9:74:31:b7:b3:93:6e:8f:
76:1e:41:ac:57:04:2a:8e:35:75:c4:a2:a2:eb:08:1c:e8:af:
21:15:47:28:14:c7:24:ca:e2:0d:4e:56:e8:31:8e:24:fe:18:
a9:fe:e7:53:55:ea:ec:8a:b6:50:f9:fd:ac:82:80:85:56:50:
91:68:6b:95:76:ce:40:81:c0:8d:34:5e:35:51:d7:59:4a:32:
8f:15:b6:44:60:f0:19:66:7a:fc:10:75:cc:18:0e:91:e6:cc:
82:4b:dc:ef:ce:43:95:03:91:bd:e1:65:2a:98:a6:10:f9:ef:
49:1e:8d:8f:a4:ba:5e:79:2a:be:43:fa:91:a5:39:73:6a:16:
dc:f8:40:2a:a7:4d:ea:49:e0:f5:49:2a:50:25:2e:f4:cb:e8:
ce:0c:63:b5:21:35:c9:24:6c:ce:93:94:08:8a:dd:b4:43:4b:
c5:ea:57:77:46:34:94:98:d6:8c:50:01:bc:db:43:e6:40:df:
88:d5:1c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:08:29 2025 by rpki-client