Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
File: aG1vVpUAwlBwthJPG4b2CVJnepM.mft (raw, json)
Hash identifier: JaJ91kzUmCFBD/9qtBGICACHEdyVRGaNN7hJYTj95AE=
Subject key identifier: 9A:14:D2:52:38:55:E1:26:AC:C6:E2:67:8A:C9:3A:67:8D:7D:04:FD
Authority key identifier: 68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
Certificate issuer: /CN=686d6f569500c25070b6124f1b86f60952677a93
Certificate serial: 0196B3D8CC33A6750D34B27C485C365E59BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
Manifest number: 08D0
Signing time: Fri 09 May 2025 07:00:51 +0000
Manifest this update: Fri 09 May 2025 07:00:51 +0000
Manifest next update: Sat 10 May 2025 07:00:51 +0000
Files and hashes: 1: aG1vVpUAwlBwthJPG4b2CVJnepM.crl (hash: rDlrZHylBoF7buu1ZyGtAyWbLOUEDDgc/6kqWUfUgxw=)
2: fUaeEEckRfBNE0XG7eTK1gjPW_w.roa (hash: sw5+wxsLZVOQhkR/KheuEdoMzOUAkFrmAKd0BU+FbcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:cc:33:a6:75:0d:34:b2:7c:48:5c:36:5e:59:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686d6f569500c25070b6124f1b86f60952677a93
Validity
Not Before: May 9 07:00:51 2025 GMT
Not After : May 10 07:00:51 2025 GMT
Subject: CN=9a14d2523855e126acc6e2678ac93a678d7d04fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:10:61:4b:e9:d5:68:80:82:81:d1:d5:4c:
18:5a:59:62:e5:ad:a5:8a:54:a7:de:46:dc:9a:3a:
39:94:fc:bf:85:b8:49:b7:31:ba:95:c8:ea:2b:d1:
15:33:8c:bf:cb:58:3a:d6:45:8c:b0:75:c9:6a:aa:
f5:7c:c4:69:ba:7e:d0:75:96:ee:57:15:6c:6e:08:
19:f2:86:30:23:c9:e8:15:4c:e0:0a:b0:ce:ca:93:
f0:c8:6b:2a:a8:9f:d6:02:c5:d6:f8:ab:44:35:1c:
84:97:76:8a:ee:68:7c:0c:96:40:aa:4a:d7:a4:bd:
fe:56:d1:59:c5:a7:7f:a1:cc:c4:9f:fa:02:d1:e7:
6c:04:39:c0:69:a7:1c:89:57:01:fb:38:2b:de:bb:
f9:cb:88:b0:62:f7:d0:b7:d0:b1:ef:1c:d1:70:f8:
97:61:b0:31:01:49:3f:87:4b:0a:32:d2:b5:22:53:
42:aa:50:9d:87:ab:be:47:1f:d9:59:f1:06:76:df:
18:b1:36:ee:fc:46:74:78:d8:b0:86:da:df:fe:37:
77:4d:cb:1f:17:93:e1:e5:db:18:26:aa:ff:ba:6b:
2b:11:26:1d:85:4c:c4:b7:6d:0c:dc:7d:80:13:49:
27:72:d9:32:e1:8c:f5:f0:61:d2:ce:79:a0:17:bb:
66:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:14:D2:52:38:55:E1:26:AC:C6:E2:67:8A:C9:3A:67:8D:7D:04:FD
X509v3 Authority Key Identifier:
keyid:68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5e:ab:19:52:f2:65:ce:91:03:5e:11:22:80:f5:68:f5:1c:
9f:a7:12:65:5d:8e:c3:b3:36:48:01:4b:35:b6:7d:fd:b5:53:
b4:19:05:68:35:b7:8b:07:40:4a:22:44:35:16:e3:d0:83:8b:
f4:c7:76:f3:7c:8a:45:a4:c9:48:0e:99:6b:e1:4b:0c:7b:5c:
b1:59:57:d5:d8:ff:12:dc:ee:01:c0:02:a4:42:68:6a:df:ff:
e6:0d:0b:f9:4c:ae:2c:b7:51:02:dc:b9:fb:f7:cc:ef:c3:d0:
a9:20:3f:54:fa:a1:d7:9b:90:dd:06:4f:eb:72:4e:f8:d2:bd:
cd:86:1e:01:8e:d9:44:65:9c:27:70:fc:34:03:04:4e:02:ac:
5f:aa:9c:73:d9:01:b5:68:7f:d5:47:8a:85:d5:d3:a8:06:97:
de:e6:c8:09:7d:5e:1e:40:d0:44:03:e5:19:6c:6c:d8:e1:01:
9c:e7:f6:ea:ac:1c:d7:68:ce:cb:94:f9:d9:67:1f:c4:a1:35:
1d:25:4b:af:64:37:fb:22:d0:f9:0a:5d:1b:42:a4:75:2e:48:
1c:5f:5a:d2:74:0c:2d:72:8b:ab:0f:90:b9:51:e3:36:98:b0:
01:a5:cc:25:ea:72:49:be:74:47:53:07:77:dd:84:d2:ac:75:
a9:3a:8f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:31:17 2025 by rpki-client