Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
File: aO_MqEmPXSbBIK802EbAKB_2Ka8.mft (raw, json)
Hash identifier: sERH+8ISJcQE8rOZhhqsiO/si0Mnku0fSS3T7IRCVVw=
Subject key identifier: F3:6F:92:DC:36:CF:79:E2:80:E9:6B:1B:FB:E4:3A:14:96:AB:9B:09
Authority key identifier: 68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
Certificate issuer: /CN=68efcca8498f5d26c120af34d846c0281ff629af
Certificate serial: 0196C7CD30B975BF4AA8989E805D6CD1316C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
Manifest number: 0FA8
Signing time: Tue 13 May 2025 04:00:35 +0000
Manifest this update: Tue 13 May 2025 04:00:35 +0000
Manifest next update: Wed 14 May 2025 04:00:35 +0000
Files and hashes: 1: aO_MqEmPXSbBIK802EbAKB_2Ka8.crl (hash: Arq/86Pn3GM254Ya9N49lbvJ72JseFijCzqyCln5Krs=)
2: bz3fbBHm2ElR6vxL1-cqQoSLlk8.roa (hash: iWv2k5/cNl7lJrUkdCeVYiFcY+HPf8sJg4JbV1Gwcrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cd:30:b9:75:bf:4a:a8:98:9e:80:5d:6c:d1:31:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68efcca8498f5d26c120af34d846c0281ff629af
Validity
Not Before: May 13 04:00:35 2025 GMT
Not After : May 14 04:00:35 2025 GMT
Subject: CN=f36f92dc36cf79e280e96b1bfbe43a1496ab9b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e5:15:2e:a1:ed:99:7f:d9:e5:09:f0:fb:04:
11:1e:02:15:9a:33:62:70:df:27:51:5b:2a:47:8e:
ce:8d:10:67:59:ac:ed:3a:48:41:16:bc:77:d3:ef:
e1:bd:f9:68:a7:1c:45:96:85:b8:a2:70:6d:06:21:
96:54:75:47:c6:6b:8e:8b:94:79:1d:7a:da:71:37:
c2:dd:c9:a2:b3:7c:3c:85:b6:02:1f:49:3f:4f:bb:
2f:d3:e0:a5:31:37:99:39:80:1d:fc:b1:33:36:2b:
f6:3e:b1:25:76:fb:e9:ff:4b:20:bc:ac:d3:d6:f5:
dc:c7:fb:18:41:d7:e2:f5:c4:29:49:e2:b1:4c:82:
5b:02:46:ab:96:10:0f:16:f9:01:44:c1:4d:cc:5c:
24:67:66:ee:c8:f9:0f:fb:9c:4b:24:67:80:82:fe:
e0:bf:8f:51:0f:5e:0f:72:b5:3a:79:f2:3d:fe:49:
de:bb:b3:4a:41:80:3a:e8:e8:ff:2d:ff:18:c4:7a:
c4:9b:c2:f6:21:4d:75:cc:41:0c:7e:b7:9d:48:64:
a4:76:e4:0e:29:eb:fd:90:27:ad:56:93:80:fe:9f:
75:ce:b8:6d:e9:f3:81:64:58:b4:96:20:2e:14:5a:
7a:01:24:3a:43:ed:5b:56:03:7b:a1:21:de:c1:be:
64:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6F:92:DC:36:CF:79:E2:80:E9:6B:1B:FB:E4:3A:14:96:AB:9B:09
X509v3 Authority Key Identifier:
keyid:68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7b:79:4e:5f:80:30:90:6c:9e:8c:88:ff:2c:5c:57:a6:15:
32:db:1b:b1:d9:ca:95:1e:3a:e5:51:94:d5:5f:f5:cc:99:33:
26:8b:b7:88:56:21:6c:54:df:e5:8b:b4:2d:42:99:2a:03:41:
08:71:e2:6b:32:6b:f6:db:a2:f0:1f:d5:fc:56:c3:19:1b:3b:
2d:38:97:36:73:cc:a1:a8:8d:8c:b5:21:60:0e:9f:36:ad:2d:
0c:fa:e1:fd:3d:d0:12:50:9c:c6:b1:11:ad:90:ba:37:d8:b4:
5f:86:35:16:15:21:98:0b:27:1f:23:d7:4c:25:b2:1c:fd:fc:
07:82:45:f6:70:ed:6a:bf:c3:06:a0:b4:69:81:6a:d9:aa:fc:
61:a6:e2:32:c8:da:09:f4:83:a5:ba:01:31:2d:37:87:41:61:
ab:a6:49:76:35:1e:29:90:07:6f:bd:9e:ff:21:14:e5:4e:5c:
77:49:2f:4c:d1:10:88:6d:3b:54:b4:04:6e:a3:b6:83:74:dc:
6d:3b:4a:2a:48:87:a2:ae:1e:43:96:18:81:3c:1c:6c:ea:11:
24:2e:41:53:a1:5c:99:13:99:07:69:d6:55:40:15:42:f4:06:
06:4c:84:06:be:66:7f:ae:b4:a7:60:7b:af:ae:bb:2e:44:2b:
1e:73:d3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:41:43 2025 by rpki-client