Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
File: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft (raw, json)
Hash identifier: 5AxG/LTVAqabbAQRK0l9e1fZjZ8tiwHuyhj/xxWwAjc=
Subject key identifier: 94:17:8B:CF:6E:D0:D0:F8:A2:BB:D2:E6:BB:71:EE:62:40:55:76:0A
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 0196A0F66C330A5698B16EB85481187EDA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
Manifest number: 0889
Signing time: Mon 05 May 2025 15:00:26 +0000
Manifest this update: Mon 05 May 2025 15:00:26 +0000
Manifest next update: Tue 06 May 2025 15:00:26 +0000
Files and hashes: 1: 3Ti0VRFQXYG5OETL6H3xqGURx7g.roa (hash: wOZdgFUImj0qeOyuyvxGEJ5Ru8WQDiyIL/ijF462qBo=)
2: 7XozsJg8cESPgPLOlnZdDHuIIkA.roa (hash: NkHcRJjWveOKr/3lsnLotWjQFQWLhxVwR81b0kSFErE=)
3: 9K541zTwKzkXQVxivY6RtgnMtfc.roa (hash: 2IzU5yJObIbCyE/+ehHr5lv63aMpYtOrcZkh+bZRUaU=)
4: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl (hash: AmVSAGJVpY8Mxquk7sRWA2wLSOoba+rHtKtH+vp4RWo=)
5: BMAXZlHZxI-uH9olLUnOb_RwOVw.roa (hash: bh3WIRfGGamusnp7dM5Kd33nh5F3n2SdBED6ZCn/+AE=)
6: GqF55OK8p88k_RA7XjSbJsgeScE.roa (hash: UqarmNk43/6OgpiiKkH7WYGaCUS8csQFBD1FbaFpkx8=)
7: K00tT5cZnNVXDF_Or6n_nc_0xRo.roa (hash: s/PaO+NasRBZLSycpt6mJjPENaMQFjfT/5hMIEO7t08=)
8: p0H-UvlbJAxkRpZM50LM0HMaTh4.roa (hash: eqbVXmLmRGS+69kMEz9SPkK3Rw5wmLRM/rZ2KSdZI3s=)
9: zOfa10bmz5mA01whN-vRAcpYyD0.roa (hash: ZjeDW/sMSDaC9yWADq68Sh8uF/rcU0PJexnNWW9mYAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:6c:33:0a:56:98:b1:6e:b8:54:81:18:7e:da:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: May 5 15:00:26 2025 GMT
Not After : May 6 15:00:26 2025 GMT
Subject: CN=94178bcf6ed0d0f8a2bbd2e6bb71ee624055760a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4c:42:d6:2c:98:86:63:b0:95:af:e9:ba:09:
cc:1b:3a:e5:82:21:ac:d7:e8:e3:4f:6f:15:c9:8d:
43:25:87:0f:1d:22:ae:17:1e:11:95:a9:e7:0c:c6:
f8:2e:28:0d:7d:25:fd:96:6e:70:62:fa:95:de:3a:
c4:df:e4:e1:e3:ae:df:5b:28:58:94:87:c6:cb:47:
fe:6d:ee:18:f7:d0:6e:b6:7c:b6:14:66:c1:e1:0b:
28:d5:b5:8b:63:85:97:33:f8:2b:9b:b1:ea:30:36:
dc:a5:ea:84:a0:c3:d4:9f:b5:d1:da:a3:d7:cc:5f:
5e:df:76:13:80:26:83:b1:6a:91:15:bb:32:af:b7:
f5:6b:f5:3d:40:5c:ff:bb:7b:e3:4f:23:31:2d:3c:
ce:ac:44:89:ce:1e:1a:9e:ff:32:9d:69:92:a4:26:
23:3f:f3:6d:36:91:0b:34:77:09:f8:a2:7e:01:50:
5b:b4:6a:ae:13:53:53:0c:77:5f:78:c2:01:47:e0:
c9:78:8a:2b:3c:e8:71:f9:14:8b:4d:09:51:90:ae:
cf:1c:34:73:f7:29:d5:e1:c7:19:8f:1b:01:d0:98:
22:1e:40:60:81:34:01:28:69:ff:06:df:69:5c:3a:
91:e2:eb:a5:0d:9d:cd:d9:5d:eb:bf:2e:85:0e:80:
9b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:17:8B:CF:6E:D0:D0:F8:A2:BB:D2:E6:BB:71:EE:62:40:55:76:0A
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:93:bf:a6:49:41:df:7f:af:89:f5:cf:2f:23:bc:97:91:0f:
1e:8f:eb:13:d0:3c:0a:66:74:b3:35:82:02:d5:b8:89:7c:8f:
f9:43:51:33:3b:67:45:b1:8c:86:5c:dc:e8:94:fa:a4:2e:b5:
7d:a7:e0:ca:47:c1:3e:75:fe:cf:f1:5f:b0:0f:0b:73:ae:4a:
44:e7:bf:17:22:66:ed:c5:7b:c1:18:18:d2:67:52:a6:57:2f:
82:cc:78:bc:c5:18:7b:e3:8c:67:b0:c7:33:d0:d9:a2:4b:d9:
1d:3a:c9:c8:3a:28:a2:6d:bf:e6:16:7f:ab:d6:bc:7f:f1:bc:
13:f0:a8:10:9f:42:88:0b:5a:76:83:1a:05:a7:80:83:c3:e1:
77:89:d8:11:c1:87:e9:56:e2:56:62:f2:05:51:08:5f:07:09:
51:34:7a:7e:ad:37:0d:00:3b:ec:fa:73:ec:81:3d:69:d9:c8:
f1:2e:e3:12:fb:d1:f7:99:05:a6:85:0b:98:c8:94:18:f1:87:
68:51:c0:33:c7:b1:61:99:ac:d4:d9:43:b4:82:a4:3d:e2:b3:
95:f4:d0:00:9e:6f:e0:08:7b:e2:d4:93:0c:2a:ec:34:7c:22:
9d:bc:fb:4c:8e:82:13:5e:d6:63:03:c6:23:1d:ad:0a:75:f0:
9a:77:14:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:01:46 2025 by rpki-client