Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
File: aZhQBALIIVz1cQc6SVzcgMdC8sw.mft (raw, json)
Hash identifier: SajPFYeCKVFKANxtW4kOfRnrDsIssisg/3FfzTO/g+M=
Subject key identifier: 9B:27:19:49:09:1D:15:DD:E6:3C:25:E9:85:DE:80:76:7A:81:18:F4
Authority key identifier: 69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
Certificate issuer: /CN=6998500402c8215cf571073a495cdc80c742f2cc
Certificate serial: 0196C0EF29F07E4A7CB054A12E0535F27A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 20:00:21 +0000
Manifest this update: Sun 11 May 2025 20:00:21 +0000
Manifest next update: Mon 12 May 2025 20:00:21 +0000
Files and hashes: 1: Ph3sC6aqh0tNsltd6hAZJC7Ft9U.roa (hash: qAtjPwqhqmQ2dOk999UdwCjCLH8v0wMpJPym5FDXFCs=)
2: aZhQBALIIVz1cQc6SVzcgMdC8sw.crl (hash: mOezkiBPJcV2reWStZ1yU00pgMLTr59BZyLHC00JD6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:29:f0:7e:4a:7c:b0:54:a1:2e:05:35:f2:7a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6998500402c8215cf571073a495cdc80c742f2cc
Validity
Not Before: May 11 20:00:21 2025 GMT
Not After : May 12 20:00:21 2025 GMT
Subject: CN=9b271949091d15dde63c25e985de80767a8118f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:e0:fc:73:bf:02:d0:2d:de:e4:4e:06:5e:
1f:38:2f:9c:55:91:08:0a:b3:65:d5:08:39:50:36:
16:4c:8c:89:00:fc:94:7c:f7:dc:78:08:5e:e6:7e:
c4:63:43:5b:63:1e:35:2b:bc:67:36:f6:20:ae:90:
09:4f:72:de:63:14:3b:82:58:70:6c:de:4f:ad:b2:
f8:9c:e1:5f:bd:76:42:38:3c:ac:3f:bf:62:e3:25:
55:aa:9f:83:90:1b:5d:bf:37:af:fe:46:a5:b0:cf:
2c:ed:ba:55:42:2f:f7:01:5a:a1:25:24:cf:66:bb:
6a:a8:c4:66:f3:c6:88:b8:ac:46:7b:7f:e6:ff:55:
af:b1:9a:73:c8:a7:75:9c:2c:f0:8f:a9:39:27:d6:
18:91:fa:4b:b0:66:a6:5c:a9:4c:d4:65:d9:f4:dd:
84:d3:d8:89:1f:9e:82:e5:91:b0:7d:35:03:2e:7c:
f8:72:5a:2e:f4:2b:16:0d:70:ed:9f:2c:b6:2e:e5:
21:97:3f:e6:01:f5:7a:62:79:9e:a0:6e:8c:94:cc:
27:f1:1d:21:f9:f4:35:0d:d8:e8:65:00:91:ea:90:
35:89:12:81:91:2b:2d:37:58:67:1c:ca:f6:73:92:
44:3a:7d:a0:72:76:0c:1d:5a:b2:5d:74:75:f7:4b:
ef:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:27:19:49:09:1D:15:DD:E6:3C:25:E9:85:DE:80:76:7A:81:18:F4
X509v3 Authority Key Identifier:
keyid:69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7c:c1:d3:93:ce:26:30:27:db:dd:9d:70:b7:d4:3e:e1:1f:
67:b8:92:1b:bd:fc:ab:9b:34:38:c9:3c:2d:71:12:e0:a1:a6:
81:fe:7f:a2:06:c1:80:a4:8c:b2:33:bb:8b:47:22:73:0b:3e:
fb:df:d7:db:c4:f8:7e:b5:a8:8e:9c:ef:b8:59:15:77:fe:e4:
27:9e:00:34:53:1a:eb:3d:d2:29:f8:90:65:07:d8:ab:10:20:
5f:80:c9:35:e2:07:83:33:f0:66:4d:4b:64:e2:e7:a3:e7:c1:
3b:98:c6:1e:fb:7b:77:4b:6d:e2:a8:73:54:41:f8:1a:50:ec:
f7:a0:72:50:a9:95:0b:54:47:79:06:8d:4b:ec:34:10:dd:50:
a7:8b:1c:44:e2:21:f7:f2:70:a4:4b:e5:28:ac:bc:b1:4b:7d:
0d:c5:a1:e4:21:f1:ff:79:ae:cf:47:bd:6b:f9:3f:2c:67:dc:
37:c8:38:2a:fa:09:78:52:41:f5:55:c4:46:3d:1b:f1:43:28:
a7:77:ce:42:4c:6e:3c:30:a0:e2:22:f6:93:d6:06:5c:f2:b2:
c2:59:97:02:34:af:ee:d8:65:1f:79:bd:12:1c:95:50:1f:78:
e6:cb:20:a5:32:df:16:63:ec:35:f4:bb:08:9e:e7:8d:d0:d0:
97:57:00:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:20:13 2025 by rpki-client