Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
File: AoDVqrjuctqjUocfunLspFGnDtw.mft (raw, json)
Hash identifier: n8ouSyWP3Km3sv0vbKS0Xs9WsHky7bqqrLYdmwiUTo8=
Subject key identifier: 20:C3:89:24:35:38:AB:3B:54:BC:5A:F1:9F:D1:15:D5:83:7C:45:39
Authority key identifier: 02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
Certificate issuer: /CN=0280d5aab8ee72daa352871fba72eca451a70edc
Certificate serial: 0196BCDBEA5861518B39F59D3527D121AC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
Manifest number: 07ED
Signing time: Sun 11 May 2025 01:00:51 +0000
Manifest this update: Sun 11 May 2025 01:00:51 +0000
Manifest next update: Mon 12 May 2025 01:00:51 +0000
Files and hashes: 1: AoDVqrjuctqjUocfunLspFGnDtw.crl (hash: duPI/9CsNBgQdMBoGa7ankSpSqkwbgsIVxNLwL5pGDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:ea:58:61:51:8b:39:f5:9d:35:27:d1:21:ac:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0280d5aab8ee72daa352871fba72eca451a70edc
Validity
Not Before: May 11 01:00:51 2025 GMT
Not After : May 12 01:00:51 2025 GMT
Subject: CN=20c389243538ab3b54bc5af19fd115d5837c4539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9c:79:86:90:84:27:5c:fb:c9:24:92:48:0d:
bd:eb:b9:0d:5b:e7:ce:20:d1:04:a9:2c:bc:f6:2e:
61:ef:81:bc:4f:01:ee:87:b6:09:13:50:ca:96:09:
7b:f9:40:ca:3d:47:69:c6:9c:23:24:e7:17:8f:18:
31:91:a6:26:7a:52:0f:38:76:83:00:8d:f0:a6:b9:
2a:26:d6:0a:af:fc:7d:d8:9b:0c:f6:65:93:c4:30:
36:f8:41:ff:06:b0:3e:a1:74:cd:ff:cf:3e:e4:6d:
18:f2:7e:53:b8:c7:ca:4d:51:51:43:ef:ba:ed:66:
f3:14:6c:8c:dc:e3:e7:16:26:54:2e:3e:d7:22:22:
f2:79:cf:1d:e3:e9:73:31:16:8a:56:25:4c:eb:c6:
b2:bc:8c:ee:01:1f:f7:1c:c2:68:9c:22:ab:1e:90:
a0:7e:0c:05:f4:39:ec:9d:16:9b:0d:a9:d8:95:7c:
df:bc:d1:5c:dc:ff:5b:37:0f:51:4e:69:a5:16:a4:
02:72:ec:36:14:7d:7e:7f:54:0c:7e:49:8f:9d:1d:
5a:21:19:b9:eb:fb:3d:c0:bb:64:13:1e:8a:47:1f:
2d:c5:2c:98:f1:b1:3d:d6:07:56:d3:b7:72:17:20:
4b:f1:6e:88:43:93:90:87:8d:78:a1:61:85:52:8a:
c2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C3:89:24:35:38:AB:3B:54:BC:5A:F1:9F:D1:15:D5:83:7C:45:39
X509v3 Authority Key Identifier:
keyid:02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ae:6a:61:e2:d7:0f:c7:cd:9a:f1:b7:8f:77:8e:bb:2b:96:
ba:54:d5:2a:b3:c2:ac:1c:4c:24:b4:6d:02:e4:0e:6c:49:78:
4e:de:f1:d0:f6:b3:f8:2a:90:96:92:77:17:86:91:e7:8d:b1:
ee:a2:eb:39:2c:c2:b0:bf:d7:0a:23:3a:5f:ee:0c:b5:36:a3:
af:92:68:d1:3b:58:9f:da:74:cc:2f:75:96:cb:7d:25:37:4c:
5d:9e:4d:79:f8:74:db:b9:21:d3:2f:fa:26:00:f5:80:bd:c2:
f6:3f:d5:97:f5:57:4e:64:bf:63:9a:1f:3b:b3:a5:27:12:1f:
f3:76:a0:72:c4:2b:20:f5:95:ce:bd:37:ed:ad:07:19:ca:cb:
71:95:ee:4d:e3:0a:40:0b:c0:5a:74:fe:0e:09:ad:e0:f9:35:
df:91:f5:fa:c6:55:94:11:c2:8d:56:08:06:0f:75:97:a7:ea:
27:3a:97:0d:34:b0:5d:55:3e:e4:3d:6a:04:6a:4b:62:d9:8a:
a9:8b:73:d4:2a:06:4c:38:65:6c:54:f3:50:54:2a:d0:3e:4b:
0f:e4:33:ff:fa:9a:44:8a:d5:85:11:4f:e3:d8:7b:92:9b:a7:
a0:c4:97:b1:53:81:8e:1f:65:16:ef:0a:96:da:16:9f:a4:8f:
b3:27:af:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:57:46 2025 by rpki-client