Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
File: AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json)
Hash identifier: O348DB2c/M0InAQXhAYd2OIYEYlfoSaAynIsnQ9orAA=
Subject key identifier: 8B:75:F7:ED:C6:16:73:A6:BE:4E:71:26:3D:8A:51:7D:5F:F5:B1:2E
Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Certificate issuer: /CN=004cf07c7d059302b56066aaf6cbeec135186a44
Certificate serial: 0196DE55B4E9C72F9E6B490EBE23BE4487E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
Manifest number: 1543
Signing time: Sat 17 May 2025 13:01:20 +0000
Manifest this update: Sat 17 May 2025 13:01:20 +0000
Manifest next update: Sun 18 May 2025 13:01:20 +0000
Files and hashes: 1: 0JN2vyzDQDc8hqznZuHYx59iVgw.roa (hash: f3XiZFi6nbVWq/4L3lB2rfwMDECeZB1pzVtF3apTcoA=)
2: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: 7hMZwdZybOSOMpjjQGHMsbt/YhFtRzC47elytuq4QlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:de:55:b4:e9:c7:2f:9e:6b:49:0e:be:23:be:44:87:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44
Validity
Not Before: May 17 13:01:20 2025 GMT
Not After : May 18 13:01:20 2025 GMT
Subject: CN=8b75f7edc61673a6be4e71263d8a517d5ff5b12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:db:bf:e5:08:bd:27:56:d8:78:dc:25:07:
6c:62:da:5f:35:fe:26:68:d2:4d:51:57:34:09:b1:
14:da:78:3a:70:25:77:4e:da:46:e1:0d:9e:05:f8:
a9:02:77:d9:f7:e0:04:6b:02:8e:7a:03:50:c1:f3:
8f:ed:21:af:7e:34:ff:56:38:4f:d6:de:e7:9c:ef:
ee:e9:32:a3:97:37:bb:93:38:d9:da:39:1a:c5:61:
d3:bb:83:3c:bd:f7:d5:2f:6e:1a:da:79:43:5b:8e:
dd:38:9a:ef:c1:1b:dd:e5:8b:1b:33:d8:38:99:fb:
b5:4d:01:87:00:a1:60:e6:b1:26:54:35:bc:f8:f0:
e9:0b:d9:49:68:9b:13:36:07:f6:42:9a:f2:0c:61:
d3:30:c7:23:b1:ec:75:bd:bf:3c:b6:a5:4f:ef:a5:
86:39:a1:5a:3e:c0:58:c9:6b:49:ef:bd:e1:cc:ca:
ef:da:fd:d5:04:30:1f:d3:9c:aa:f8:c4:52:e1:be:
09:23:9e:d1:85:f8:13:7a:b7:f9:c2:e2:1b:44:92:
b8:12:2f:38:ee:79:09:71:de:9f:b3:88:d4:c5:dc:
d1:94:35:c7:61:f3:06:9e:86:cc:a7:e7:e1:45:d0:
e4:51:af:d6:25:3d:c3:b8:37:32:75:a3:e6:2e:b5:
96:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:75:F7:ED:C6:16:73:A6:BE:4E:71:26:3D:8A:51:7D:5F:F5:B1:2E
X509v3 Authority Key Identifier:
keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5f:fe:ab:23:54:4e:0c:9a:f0:85:b8:28:99:51:b9:16:15:
6a:6d:9c:51:9b:06:c5:bf:aa:bc:20:1d:6b:58:7b:e9:14:09:
75:5a:d0:1f:78:6e:0b:0a:a8:b7:c4:0b:27:b6:f1:1f:ef:7c:
20:d2:8e:d3:90:d9:06:07:a8:9a:82:d5:8c:a7:0f:06:33:ea:
e4:d1:07:1f:f0:29:ef:8b:8d:06:0e:3d:09:78:c5:3e:40:24:
4f:39:88:6f:7f:66:e0:37:e5:b3:15:cf:a1:18:93:1a:ba:4d:
3f:5f:00:65:65:be:8a:ab:6a:23:67:d1:ed:e4:45:30:73:80:
e3:cc:2c:64:b7:33:fc:17:37:66:37:a3:ea:d4:db:3c:9d:20:
54:73:bd:ef:af:7b:b0:90:54:06:a5:8b:f8:57:e6:3d:23:0e:
04:db:cd:72:88:34:d0:1f:c7:ef:5d:db:17:dc:86:a3:99:5c:
7b:72:a1:4c:13:9b:40:bd:64:44:cf:b5:0d:ec:a0:5e:06:e6:
77:f0:01:4f:3b:88:81:7c:70:70:2c:b3:1b:a2:fb:4a:87:c6:
b7:3e:c4:ef:88:c3:2c:a4:69:ec:06:0e:cb:36:6d:fb:d9:e6:
b7:d5:b9:89:c1:e8:ff:b7:9c:36:93:b9:b3:66:ad:fc:d1:d4:
33:00:6b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:42:52 2025 by rpki-client