Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
File: a0s-anyHg_yKVxn72fN7MsjHxco.mft (raw, json)
Hash identifier: PyZ/LD8YXFrFAh0PJV385sNtsKFzWMgQCvbo2tUSPiQ=
Subject key identifier: BC:44:9C:B8:15:51:4E:9B:A6:FF:E6:F0:59:5B:5C:AC:7C:E1:1C:7C
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Certificate issuer: /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial: 0196B7473C0660D3574C7485D9B10C0A7897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
Manifest number: 0D9F
Signing time: Fri 09 May 2025 23:00:20 +0000
Manifest this update: Fri 09 May 2025 23:00:20 +0000
Manifest next update: Sat 10 May 2025 23:00:20 +0000
Files and hashes: 1: NFuZfl53-8KYTLVCa1Hv_etfQ9k.roa (hash: mKJy52sXoia7oCRphyiyMklvY+QAOAh6np8WR+mJ8DQ=)
2: a0s-anyHg_yKVxn72fN7MsjHxco.crl (hash: DlQLS6Qy2aoyH3+sb/ZTxu400ddANUzcLJ9qOhl78AQ=)
3: pOxKs9dWhUdQCvSLYTnAr4vpa7U.roa (hash: /5GRlXnM3rNmijk0WyBlasj7lnCycK3nTmymAKQJFjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:3c:06:60:d3:57:4c:74:85:d9:b1:0c:0a:78:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Validity
Not Before: May 9 23:00:20 2025 GMT
Not After : May 10 23:00:20 2025 GMT
Subject: CN=bc449cb815514e9ba6ffe6f0595b5cac7ce11c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:92:c9:76:9a:c3:44:71:28:4e:df:4e:b2:
f7:be:18:a3:5d:67:02:5f:24:8d:12:7d:7e:e3:78:
92:a2:02:07:97:ca:be:fe:76:e2:e8:77:6f:ac:6d:
37:03:c0:64:2c:e1:8e:f6:5f:1a:56:a2:a2:9e:4e:
f0:27:0e:e7:9f:f7:dd:9c:d5:83:87:8d:47:b1:df:
de:62:66:3b:bb:3c:e5:0e:78:59:45:8f:79:7c:c0:
8e:f2:eb:93:b7:5a:94:a2:5c:7a:60:a6:af:3b:81:
59:24:c9:08:79:19:6c:27:53:63:9b:4e:1c:13:52:
3d:ca:3f:77:6a:38:f1:c6:98:e4:52:23:a8:69:52:
7d:4e:fd:db:90:a7:e6:21:04:ff:df:02:3b:4b:de:
f8:e8:bb:3f:fb:5c:95:15:27:8f:2f:9e:2c:df:23:
82:14:9a:d6:c8:98:04:4e:1f:d4:cd:94:3c:2d:7b:
a7:1b:f8:83:0c:83:d4:3c:9b:0e:1e:66:50:58:f3:
a7:3f:67:31:e5:13:5e:3d:96:b1:4e:cc:98:02:4f:
90:00:f0:a4:2c:a4:09:b2:7e:3a:2f:39:e6:91:38:
ef:03:21:33:18:48:9d:b2:0c:3c:6e:76:36:3b:56:
c6:d2:5e:c4:51:30:05:ab:90:5f:cd:ee:7c:e8:13:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:44:9C:B8:15:51:4E:9B:A6:FF:E6:F0:59:5B:5C:AC:7C:E1:1C:7C
X509v3 Authority Key Identifier:
keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:dc:cc:95:ab:35:8c:95:df:a4:5f:8c:c0:80:37:b2:61:75:
1d:9a:9f:fd:56:9e:4e:de:d2:79:2b:ff:60:ed:ac:1c:85:1f:
09:36:38:43:22:58:37:dd:ea:b2:d3:24:64:23:7f:46:93:5c:
7e:84:a0:4e:df:3c:21:eb:77:c1:66:57:a1:9b:94:7b:1b:6b:
79:cb:f5:02:60:46:ff:d3:7e:db:a1:5d:03:54:99:d7:e6:ea:
e0:c0:af:9d:25:8e:b0:52:fd:b2:12:8d:45:68:85:5a:8b:0e:
17:27:c9:b2:46:b3:e2:bd:34:d0:2d:d6:39:38:54:dc:f0:13:
f2:39:fb:04:4f:34:0a:85:c3:a5:d9:f7:fa:85:73:c5:32:e6:
54:11:a5:4d:85:eb:ef:58:82:62:74:01:d2:99:5f:ad:95:1e:
6c:c9:7d:e6:68:ab:6f:80:e3:1a:1d:5c:2b:68:0c:07:92:9b:
ab:12:c0:02:f2:d9:8f:15:88:41:91:51:ff:f6:06:eb:45:7b:
6e:1b:ef:af:ab:39:19:06:eb:78:6c:c7:44:9b:fc:e2:64:70:
29:e8:60:e6:30:a0:7d:c5:01:61:e1:6f:dd:08:d8:80:f9:56:
93:ea:eb:ce:80:fe:dd:79:ad:78:fe:a0:73:a0:ad:9a:32:98:
39:1b:d9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:31:50 2025 by rpki-client