Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
File: AwSWBHN8eL0k27Jeszb0pBbmRfY.mft (raw, json)
Hash identifier: oDyUnYo7h1PzRld+nNTRpYIQcLJNpd31TXpsKpVNyJw=
Subject key identifier: 88:39:5A:99:16:F2:3D:1E:71:80:AE:50:EF:0E:80:23:11:CD:89:0A
Authority key identifier: 03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
Certificate issuer: /CN=03049604737c78bd24dbb25eb336f4a416e645f6
Certificate serial: 0196D709D52A875F8BCD6918175BA9A219CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
Manifest number: 02F9
Signing time: Fri 16 May 2025 03:01:07 +0000
Manifest this update: Fri 16 May 2025 03:01:07 +0000
Manifest next update: Sat 17 May 2025 03:01:07 +0000
Files and hashes: 1: AwSWBHN8eL0k27Jeszb0pBbmRfY.crl (hash: HgXxKyzLnw+YiNvrVxM0CuUJU2apLYhPlPuz7nFDqj4=)
2: vKytNfbEF9joRT3eNK0fcMnnPsw.roa (hash: QRCmo7hQ15OJ3mq9udqpHVMqzKuvB7Gd74/Bu3ia9vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:09:d5:2a:87:5f:8b:cd:69:18:17:5b:a9:a2:19:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03049604737c78bd24dbb25eb336f4a416e645f6
Validity
Not Before: May 16 03:01:07 2025 GMT
Not After : May 17 03:01:07 2025 GMT
Subject: CN=88395a9916f23d1e7180ae50ef0e802311cd890a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:86:cb:40:e1:56:5e:56:bd:90:19:3b:e4:
a1:4c:54:8a:a8:97:fd:38:b3:57:f0:13:d2:71:97:
4a:80:cd:76:fa:9a:1e:c7:4f:7a:55:d5:59:06:cd:
a7:4e:3f:8a:8c:c1:1b:1a:20:6a:51:9c:21:68:76:
17:99:d1:73:95:35:9a:9d:24:d3:6b:04:30:fe:eb:
7c:cd:4e:70:db:a9:45:39:71:2a:24:3e:09:3e:7a:
5b:b6:45:30:7f:13:4c:f1:db:dc:a8:bf:83:85:de:
4f:b4:85:72:79:3c:52:1b:50:a6:77:7e:bf:4b:45:
a8:d1:a7:e7:fe:25:b4:6e:24:b9:5b:8c:9f:f6:37:
97:d2:52:8d:f2:65:d8:7a:0e:9a:d7:0a:15:cb:cf:
67:51:cc:a1:04:1f:3d:0e:44:88:56:bb:ce:22:59:
7d:e5:ee:c9:8f:31:03:2e:1b:8b:ef:39:3f:03:f4:
fa:4d:19:bb:a4:44:2b:63:35:75:89:31:1b:94:3c:
10:6f:df:60:9a:85:0c:bb:db:e3:0f:5b:f5:6b:8a:
e9:a3:c4:0b:ef:7b:46:fb:37:f3:02:a8:b1:3e:b5:
fa:aa:bf:93:eb:98:11:6e:72:e5:db:55:90:66:82:
21:62:a8:76:20:fa:da:d6:08:a6:8e:41:5c:a3:48:
84:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:39:5A:99:16:F2:3D:1E:71:80:AE:50:EF:0E:80:23:11:CD:89:0A
X509v3 Authority Key Identifier:
keyid:03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:dd:64:c8:08:6e:b8:c4:b2:76:35:c0:79:91:83:57:27:d6:
b5:ad:e0:55:a3:fe:50:e9:df:9b:89:39:9e:88:74:d1:76:1a:
97:7b:d9:ed:68:03:7f:27:9b:d2:b7:88:08:72:17:ca:1a:f9:
91:0a:01:ac:23:06:32:67:30:76:80:72:bb:8f:2f:b8:11:05:
f3:66:70:d6:3e:b6:18:3d:2b:a1:c0:70:ce:81:90:93:d8:60:
7b:91:84:99:cd:e8:fa:9c:78:6d:cf:34:54:ec:bb:9e:5f:c8:
32:d3:0a:c0:cb:e0:29:48:99:ea:e4:ae:80:c3:9e:87:b8:7a:
b6:5d:8a:94:c5:47:84:e8:5a:2b:31:47:4a:de:83:b4:bf:e1:
34:22:04:25:c8:ce:65:1e:74:cf:cc:97:9c:79:fe:ed:ef:76:
7a:b0:60:db:0d:71:ee:69:9b:b2:d6:b5:23:23:14:1c:1f:54:
eb:a3:ca:11:e4:85:e1:27:64:4a:ce:06:a5:7f:f8:95:58:da:
07:4f:cc:74:82:fd:da:c5:91:62:ca:53:0d:08:11:f8:6f:57:
4a:e2:b2:1b:64:09:3b:5c:8b:6d:7a:bc:e8:72:9a:c2:e7:52:
6e:8c:27:ed:01:84:94:00:47:b8:37:d3:48:54:a0:06:81:b7:
00:53:5a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:12:44 2025 by rpki-client