Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
File: aVHUVR0mpRwPkrd8LTePs0dYuHc.mft (raw, json)
Hash identifier: HHFXZG7nA+REUwZRQfhympZRShlisvsr9V3JmzZ1uDI=
Subject key identifier: 7C:D0:90:2A:22:CC:8F:44:87:05:66:DB:16:06:E9:6A:ED:11:7B:AC
Authority key identifier: 69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77
Certificate issuer: /CN=6951d4551d26a51c0f92b77c2d378fb34758b877
Certificate serial: 0196B7479412E33425D161CE6C31E7E4A239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
Manifest number: 0641
Signing time: Fri 09 May 2025 23:00:43 +0000
Manifest this update: Fri 09 May 2025 23:00:43 +0000
Manifest next update: Sat 10 May 2025 23:00:43 +0000
Files and hashes: 1: PxyIfomodD9RHY4nPMUQ_8FG_F0.roa (hash: GQBwkJMiYlMRNPb5m5PsI1lq6MhgUy7JaZpjCwR+Ch8=)
2: aVHUVR0mpRwPkrd8LTePs0dYuHc.crl (hash: MeMtmSa3jk1YKmp+OFG+STbiF4bOluAHYd5RUGfyqN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:94:12:e3:34:25:d1:61:ce:6c:31:e7:e4:a2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6951d4551d26a51c0f92b77c2d378fb34758b877
Validity
Not Before: May 9 23:00:43 2025 GMT
Not After : May 10 23:00:43 2025 GMT
Subject: CN=7cd0902a22cc8f44870566db1606e96aed117bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0e:4e:28:b5:da:20:26:8a:3c:cb:90:3b:ca:
b4:4b:37:a7:02:51:f7:9a:18:51:d4:40:8f:14:54:
29:75:7f:ba:75:2c:8e:b0:52:43:85:32:55:f4:fc:
2c:fb:c7:99:5d:39:73:d9:22:50:11:1b:5a:1c:3a:
6b:6b:79:58:40:ed:60:52:38:0b:d7:85:6f:1e:54:
d6:7c:41:f1:f5:29:fd:9f:bc:6a:95:ba:7a:f1:5a:
91:e8:e8:15:a6:06:aa:bc:36:6e:5a:6c:13:93:bb:
ae:ee:39:c5:3c:a5:6a:d3:da:86:9d:ac:38:c6:d5:
58:66:9f:00:0a:97:c4:85:9d:cd:b2:8b:2a:e4:97:
47:25:1d:9d:7f:06:c7:ac:8c:be:a1:9d:3b:52:dd:
e8:3e:fc:c1:57:4f:ac:3f:fa:2b:f3:14:da:e2:df:
26:61:2d:b8:dc:c5:87:f4:ca:2a:d4:a0:75:1f:25:
07:2f:fa:4f:b7:6a:e0:90:2b:4e:e7:d2:2f:a9:24:
ec:b8:e5:8f:c4:cf:09:e5:b0:ba:95:89:79:d4:ca:
b9:59:f4:0b:d7:ca:41:e4:ac:8f:63:e5:cd:1a:ad:
79:31:98:11:b0:64:81:b8:78:c8:00:8e:1d:fa:78:
23:57:92:dc:73:be:23:c3:e5:f6:96:49:bd:e0:f5:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D0:90:2A:22:CC:8F:44:87:05:66:DB:16:06:E9:6A:ED:11:7B:AC
X509v3 Authority Key Identifier:
keyid:69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:64:bd:38:c9:3f:80:df:67:b0:b4:13:83:02:f8:ba:9a:a1:
1c:89:36:62:4d:f5:9e:6c:28:fa:04:3f:62:a6:d7:9f:3d:46:
86:78:09:4f:49:e3:23:ce:95:10:97:57:8f:31:39:63:5c:d9:
32:12:24:6f:62:48:0b:32:3a:ef:2a:ef:dd:d5:f2:1a:36:b3:
46:e0:78:b4:0e:4b:31:a5:06:a4:4a:4d:dd:ef:00:ac:21:01:
f5:33:85:8c:eb:27:89:3a:96:b3:e0:24:33:7c:19:ad:10:b5:
56:96:8d:64:1e:93:f0:0f:7c:61:1f:ed:24:9f:cd:9e:1d:b9:
48:88:e4:7e:73:78:ed:b0:13:48:d6:58:3f:73:fa:5b:87:5f:
8e:c9:8a:8f:a0:c3:ef:4b:29:87:4b:e9:2d:ba:6b:d8:c4:bd:
4e:a3:07:e5:18:5e:92:49:a9:e1:9c:08:4f:04:41:f7:17:8a:
fe:b4:68:54:4c:b6:2d:0b:b9:82:01:8a:ca:1b:da:ad:81:7a:
09:71:da:b8:b9:ad:b7:df:31:58:dc:79:2a:13:67:ef:ce:6e:
b0:1c:d9:5c:c0:81:7e:7c:d3:6d:fc:c2:a7:3f:17:d1:19:fe:
7c:7a:9c:be:c9:47:a1:3b:bd:fd:8a:7b:73:19:97:7a:2e:78:
6b:f0:95:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:53:35 2025 by rpki-client