Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
File: Auol41aTKHXAlqAxdVmAQVX2yZ0.mft (raw, json)
Hash identifier: 58dB+TZQQ9B+8QQsDD57j4XR47J/FnCM68a10LRK9pM=
Subject key identifier: C9:B5:B5:12:AD:3B:D8:B6:3B:C3:62:B9:D8:53:0F:87:C7:7C:DA:2C
Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
Certificate issuer: /CN=02ea25e356932875c096a0317559804155f6c99d
Certificate serial: 0196C83B07597B31A6A147A7E8C4E9C68B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
Manifest number: 1538
Signing time: Tue 13 May 2025 06:00:33 +0000
Manifest this update: Tue 13 May 2025 06:00:33 +0000
Manifest next update: Wed 14 May 2025 06:00:33 +0000
Files and hashes: 1: Auol41aTKHXAlqAxdVmAQVX2yZ0.crl (hash: NstEEFo9T8nn4Lo0dwpN5eNiBylW/HpyUenIt1QoiPA=)
2: LN7aifIzYDnimx72-UKqFTWRmAM.roa (hash: ssQWu4dDicm87ZI1Oes6JMFyXJqqDjzCfBrrBA8gp00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3b:07:59:7b:31:a6:a1:47:a7:e8:c4:e9:c6:8b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ea25e356932875c096a0317559804155f6c99d
Validity
Not Before: May 13 06:00:33 2025 GMT
Not After : May 14 06:00:33 2025 GMT
Subject: CN=c9b5b512ad3bd8b63bc362b9d8530f87c77cda2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:43:71:e3:da:b3:e2:5e:54:2d:d2:54:31:
00:e9:1d:55:ff:fe:cb:63:47:b5:f9:97:f5:9d:19:
28:31:f1:8c:77:75:98:ce:24:ad:50:9c:42:17:32:
f5:c8:b4:4b:5d:cb:4c:74:65:47:fc:07:2e:8b:11:
22:f7:84:b6:c0:f2:b9:09:a4:d8:51:71:e7:d9:8e:
b4:7c:6d:d0:34:b9:76:3c:ff:fe:22:95:5e:09:32:
f7:88:52:82:1b:ef:f3:e4:da:6d:f3:fc:7a:6f:52:
b8:ac:83:e8:2f:26:20:2f:5e:3a:ac:43:7e:2d:2b:
a1:06:1d:92:ad:bb:c7:44:a7:b8:e1:5a:18:d7:7c:
36:48:a4:d9:1c:c2:bd:42:7a:ad:5e:69:87:b7:2d:
3f:f7:56:7c:ee:0b:44:90:5b:eb:9e:d1:f9:0c:88:
3f:64:ae:a7:79:49:c2:45:e9:39:7f:63:2e:09:51:
22:16:a4:66:99:b4:f4:1b:7a:3e:fc:15:79:ed:38:
51:62:c1:b0:a2:c7:2d:ba:1b:40:7f:df:48:04:6f:
10:d4:2a:fb:c5:55:ea:07:c5:1b:ac:3a:ef:df:25:
e1:66:76:5d:40:4c:1d:a2:9f:47:91:63:45:f4:b4:
9f:f5:b3:62:5c:34:c2:c6:c6:00:7d:1e:13:46:42:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B5:B5:12:AD:3B:D8:B6:3B:C3:62:B9:D8:53:0F:87:C7:7C:DA:2C
X509v3 Authority Key Identifier:
keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:53:01:c9:ea:72:fd:5b:01:ba:63:bf:74:0c:d3:fc:ed:46:
e8:10:53:fe:96:80:68:9c:9e:24:4c:88:ae:33:e2:25:6f:d7:
ca:f4:1d:f8:c5:1a:7f:f1:f9:02:39:28:bf:ce:54:e5:d8:4c:
22:fc:f6:3a:5d:9b:9b:4f:56:a4:6d:42:9a:88:a2:4d:6f:53:
d9:b3:0d:2c:af:d5:de:8e:91:22:eb:8e:44:02:8e:41:bd:82:
a4:8a:b4:86:8d:a6:cb:cf:35:5d:b2:3e:2a:48:6d:85:d1:68:
87:a5:81:5b:8f:26:b6:fb:2f:5e:99:14:81:2f:ae:e0:4a:02:
90:3d:51:6d:e5:7f:b3:fa:6f:46:14:8f:0d:dd:79:3d:8a:9b:
d0:26:3a:c9:4c:92:1d:e7:61:b2:8c:37:84:c1:a6:de:23:16:
c9:73:35:8b:84:e7:8f:e4:e9:ff:af:a9:46:a3:69:8e:24:f9:
14:2d:64:27:23:c9:8b:2d:cc:05:61:95:b6:fe:47:58:7e:0c:
71:1c:23:83:54:ce:50:25:ee:5a:0d:ff:6c:da:97:f5:2d:2f:
96:6c:bf:b8:96:48:81:85:2b:41:e9:2e:69:c2:2f:d8:45:df:
e6:ba:7d:cb:a1:7a:12:98:b8:ab:5b:9c:87:f3:20:67:82:55:
ee:b2:f6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:30:16 2025 by rpki-client