Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
File: AyudLeU3ELMVjkLyKIkQnixA9Ds.mft (raw, json)
Hash identifier: m3QMB1KVKGOgwvERvZR/L2AL9jx1H9UONQ26wYzESUY=
Subject key identifier: 0F:E0:18:5C:71:73:E5:63:3D:C9:86:94:BE:9A:A0:67:2C:12:C2:2E
Authority key identifier: 03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
Certificate issuer: /CN=032b9d2de53710b3158e42f22889109e2c40f43b
Certificate serial: 0196A5AF14D00072D5E3EDFAA71C2FDC4A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
Manifest number: 0330
Signing time: Tue 06 May 2025 13:00:36 +0000
Manifest this update: Tue 06 May 2025 13:00:36 +0000
Manifest next update: Wed 07 May 2025 13:00:36 +0000
Files and hashes: 1: 6iLRNmhEkle6ivGQW1sZ5gcKS8Y.roa (hash: +zvQRhGc/V+HMxoGc8X8w2swmCXbOVN2JfxwGb1F+xI=)
2: AyudLeU3ELMVjkLyKIkQnixA9Ds.crl (hash: zoakdbprs2bp60l25946PHIq2S+wplbAySOt3W3qDVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:af:14:d0:00:72:d5:e3:ed:fa:a7:1c:2f:dc:4a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032b9d2de53710b3158e42f22889109e2c40f43b
Validity
Not Before: May 6 13:00:36 2025 GMT
Not After : May 7 13:00:36 2025 GMT
Subject: CN=0fe0185c7173e5633dc98694be9aa0672c12c22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:ab:9f:2d:79:c1:f5:11:ef:42:df:e1:f3:
20:33:b7:ea:96:cf:3d:5f:3b:93:b3:fa:87:01:30:
47:46:d8:bd:67:15:6f:39:09:fd:16:b5:4b:8d:bb:
ec:b2:e5:4d:0a:f7:a8:bd:09:c7:8d:3e:36:e0:45:
64:34:85:31:fd:f1:43:0e:99:6b:e3:3b:65:a0:7f:
3d:a5:c2:83:e1:78:be:42:28:2e:5b:83:95:3e:f7:
a0:d5:fa:07:d4:8c:45:24:46:3d:9f:a2:02:d9:5f:
cc:99:41:b8:a1:1e:e0:66:c4:40:d4:2a:a2:2e:f2:
68:62:39:8d:6e:9a:87:8a:43:25:32:18:4f:be:9e:
84:11:56:55:61:ff:d0:1f:ce:c1:8c:0e:95:57:7a:
80:e7:37:ba:9e:7c:79:27:bf:37:9e:c4:8e:19:d0:
39:b8:70:c5:e1:6b:af:26:89:4c:50:e3:9a:d2:82:
a6:64:cf:f0:57:29:c4:1d:a3:3f:86:24:da:e5:59:
7c:54:97:65:b4:35:b7:39:4c:4c:ff:87:24:62:9c:
fd:52:0d:6d:e3:74:23:c6:7e:4a:32:cb:14:46:bc:
6a:90:76:d8:79:75:f8:6a:fd:8e:1b:9a:44:23:43:
21:24:42:6e:72:25:fd:1b:c7:53:69:b9:66:01:74:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E0:18:5C:71:73:E5:63:3D:C9:86:94:BE:9A:A0:67:2C:12:C2:2E
X509v3 Authority Key Identifier:
keyid:03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6e:03:42:58:b6:b9:af:06:fb:e1:c4:97:a3:28:5d:22:11:
a6:1a:c5:14:4d:64:26:11:10:d8:08:81:d6:d8:00:32:12:1c:
fb:34:43:22:e0:90:d9:24:07:44:70:19:70:43:f0:d7:5d:f6:
32:eb:7c:f6:61:79:d6:c1:79:d1:76:e0:da:8c:60:2e:1d:7e:
86:8b:00:51:ad:74:0d:e9:4d:43:cd:e5:bf:39:2e:79:8c:3a:
c7:05:f2:07:58:43:c8:9a:36:02:f2:e1:d2:c9:80:fd:13:c9:
8f:ed:c7:b9:41:52:2d:f2:9e:cb:4d:79:57:91:6a:94:99:da:
94:cd:ff:27:78:9e:11:d6:0e:fd:06:8c:30:ab:6c:d4:a2:e8:
9b:74:d8:c1:86:11:72:a8:0d:a3:82:0c:52:d7:dd:73:79:f7:
4a:ad:42:37:a6:d3:51:73:d6:91:af:8a:b5:39:ba:f3:94:c2:
ff:1c:c2:5e:dd:65:1e:51:16:05:64:91:0c:eb:ae:d5:67:28:
4f:4d:0f:e4:a0:ed:24:8b:13:32:a5:b5:16:02:cc:22:6e:88:
6f:b4:34:8c:08:49:65:70:cd:6f:f5:16:54:5d:ee:89:68:03:
fb:87:13:80:a9:06:4c:68:69:40:73:2a:2f:d8:e4:2d:9a:a2:
0b:fb:4a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:22:38 2025 by rpki-client