Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
File: aZuxClVyF1sDo8fL--k4t7FEGsA.mft (raw, json)
Hash identifier: bYC9ERGDQw5gDyEUp3XCvss6pbusELEl8ThtOQijQ0U=
Subject key identifier: 19:4E:4B:37:22:17:E0:11:A2:7C:F0:34:DA:F2:A2:82:9D:6F:CF:ED
Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Certificate serial: 0196AA9F08A5CF8C09E718ADC5E32F6353DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
Manifest number: 0684
Signing time: Wed 07 May 2025 12:01:11 +0000
Manifest this update: Wed 07 May 2025 12:01:11 +0000
Manifest next update: Thu 08 May 2025 12:01:11 +0000
Files and hashes: 1: N5yHtSmIzjdux70VxbibkigJnPs.roa (hash: 9gzwKXozjeocMD7/cGK25SjjWM/umahL9QM8Kbeipak=)
2: aZuxClVyF1sDo8fL--k4t7FEGsA.crl (hash: E1+usmy7x/sbb9Ljf1dP0B1nhaWFVj5qE2920sruQ5U=)
3: ha1GFGgyrmpD4R8KeDnEZpxuKqs.roa (hash: nTt2LcLEhACSb9mIP1F5UH8NEmx1EFCAvtQLB71m5zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9f:08:a5:cf:8c:09:e7:18:ad:c5:e3:2f:63:53:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Validity
Not Before: May 7 12:01:11 2025 GMT
Not After : May 8 12:01:11 2025 GMT
Subject: CN=194e4b372217e011a27cf034daf2a2829d6fcfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:22:f4:4a:fe:7e:54:cd:d1:9f:53:9d:71:
8b:d2:49:d2:f7:8a:71:fe:42:80:54:c2:b5:50:e6:
c0:f6:78:72:fd:68:1a:0e:4d:62:70:d1:3e:41:46:
9d:d0:aa:37:d6:79:77:97:f7:11:c4:5c:e7:15:2d:
1d:ae:4d:a9:e6:fe:cf:33:56:30:9c:de:da:fe:b5:
d5:3a:7a:23:be:e5:ec:df:4b:ec:ce:dd:4d:99:00:
88:c2:71:0b:e5:9e:bb:94:24:e1:09:41:2f:0b:a5:
3f:ff:b8:5a:11:66:4c:45:5d:17:80:b2:ee:e3:f8:
a3:d6:03:bc:1d:48:f1:67:69:b9:6b:98:7c:1d:5c:
f9:37:d0:f3:e4:82:9e:ac:a4:2d:29:d3:1a:b8:5c:
86:02:cd:d8:27:78:a4:ef:be:b0:67:68:90:dc:42:
d2:4e:7c:9e:ee:a8:38:f0:2f:20:7e:36:b2:9b:56:
71:d2:b5:00:1a:56:a6:41:82:c0:b1:7f:15:d3:86:
1d:af:59:e0:b5:e1:b6:87:b4:1c:f9:fb:26:2a:a4:
22:8f:de:80:77:52:b5:c0:1d:e8:4b:8f:cd:5b:5a:
58:25:4b:bb:25:3c:9f:97:27:3c:95:62:e2:34:94:
8f:c9:e2:c6:88:03:19:92:62:f5:34:82:48:a5:a4:
19:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4E:4B:37:22:17:E0:11:A2:7C:F0:34:DA:F2:A2:82:9D:6F:CF:ED
X509v3 Authority Key Identifier:
keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a5:40:75:e0:99:fe:69:52:e8:20:2a:c2:07:f9:23:1b:18:
13:f8:32:cc:13:4f:e2:70:c3:c8:55:4c:c0:15:c5:27:13:37:
3b:79:95:76:6a:10:ac:a4:f9:95:17:e7:ae:e3:28:64:a7:fd:
7e:b9:01:17:57:39:0c:91:1c:f7:a3:d2:cc:cc:85:35:a5:d5:
a2:8f:a4:ce:42:e4:3e:4b:d8:f9:5b:f6:b8:b9:05:8a:0a:1c:
65:48:8e:11:5c:fa:dd:5f:f9:85:6b:22:5e:a4:1f:03:32:b3:
55:7b:b1:70:77:ff:2a:08:d4:ff:cf:67:d1:d9:4a:da:5e:39:
e9:05:68:c9:03:d2:50:4f:43:13:75:28:13:7f:93:2b:b9:c6:
35:b7:0e:f3:b0:25:3d:8c:c7:d5:ae:cb:86:c8:6c:04:3d:9a:
b1:84:f7:8b:9d:c9:14:2a:56:2f:15:2d:52:4b:41:5b:9a:88:
cc:79:bb:05:4c:79:2a:66:73:80:68:79:b2:2c:a8:8f:8f:55:
31:b2:20:e1:90:59:8b:22:52:7c:f7:f3:c0:98:7e:f2:14:3f:
02:eb:f3:57:df:44:c2:86:5c:5a:91:03:d9:c3:3d:11:66:1c:
3f:4c:38:8d:43:00:39:9f:dd:13:06:62:67:4a:1e:2b:19:75:
18:47:7e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:40:18 2025 by rpki-client