Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
File: aA4gzPstWJjCFikA0UaAcKcCSVY.mft (raw, json)
Hash identifier: rKFfLSqDGS+qJYb933CpyLvkLvPwjTSAHcM4E5YLoOM=
Subject key identifier: 40:4A:00:E1:FD:FB:81:A3:9D:88:42:98:AA:77:D4:93:1E:5C:88:4D
Authority key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
Certificate issuer: /CN=680e20ccfb2d5898c2162900d1468070a7024956
Certificate serial: 0196B3D85F05077185711E138D473E8A49B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
Manifest number: 0927
Signing time: Fri 09 May 2025 07:00:23 +0000
Manifest this update: Fri 09 May 2025 07:00:23 +0000
Manifest next update: Sat 10 May 2025 07:00:23 +0000
Files and hashes: 1: aA4gzPstWJjCFikA0UaAcKcCSVY.crl (hash: 18kplJThdOllR+5M9bIk/m9lwb8wYFg1pd77siUzkYo=)
2: eBTbPsjV8Iac9Fj-9vOQH-ERQ2w.roa (hash: iez1H7XNs3tkU5sUoydCWQiAyCLsYR+kgbtLIrffu48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:5f:05:07:71:85:71:1e:13:8d:47:3e:8a:49:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680e20ccfb2d5898c2162900d1468070a7024956
Validity
Not Before: May 9 07:00:23 2025 GMT
Not After : May 10 07:00:23 2025 GMT
Subject: CN=404a00e1fdfb81a39d884298aa77d4931e5c884d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:94:ef:7f:57:d3:93:0a:03:9a:78:94:79:58:
e9:0d:bb:a0:03:e8:8c:ed:38:7d:d6:d4:71:94:5e:
1e:dc:c1:ae:ce:63:b9:0a:da:3a:d4:68:b5:f3:6b:
cc:38:3e:02:5c:63:3b:19:00:e2:5b:9d:1c:68:2b:
4f:15:19:e3:0d:71:ee:4d:d9:87:30:8e:a0:b1:9d:
e6:7b:b6:26:f9:47:67:64:22:30:8c:e5:03:15:12:
f4:e2:28:ee:7d:62:1b:a9:cc:5b:a5:25:a6:a4:96:
d2:d2:9c:26:85:c4:0e:7d:8a:f3:54:4d:ae:dc:e0:
52:d1:52:7a:4d:32:dc:61:28:89:59:ad:e8:83:19:
79:98:54:cd:dc:4e:3c:15:d0:37:e8:ef:90:f8:d0:
74:35:22:7a:c1:49:de:54:4d:e1:23:9e:4a:94:d4:
41:0d:65:73:6d:37:e9:de:e2:c9:b7:f0:b5:14:85:
6e:fc:5f:0c:a1:dd:ac:24:d8:91:67:4c:34:69:86:
96:f9:97:85:39:ed:80:7d:39:af:08:61:4c:b7:3d:
9b:4b:84:6c:45:25:fe:fa:d7:5e:a5:ca:f2:96:9b:
9e:35:8b:c3:d7:7b:3c:0c:9f:24:97:e9:f7:b4:00:
33:9f:2d:ab:b7:e0:3b:b6:8b:f0:53:1b:7a:9b:96:
f6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4A:00:E1:FD:FB:81:A3:9D:88:42:98:AA:77:D4:93:1E:5C:88:4D
X509v3 Authority Key Identifier:
keyid:68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fe:15:97:e0:bf:dd:8c:86:6d:3e:d9:e7:62:79:d5:2b:4c:
67:9a:57:07:6e:b9:b3:ec:91:9b:2d:b9:66:f8:c8:3b:bb:e7:
f9:70:2f:61:75:c6:bf:c9:c3:8b:f9:c4:45:fe:32:af:9e:fe:
8e:4c:94:ff:ec:f5:be:1b:bc:95:35:6a:a4:9a:e2:89:06:eb:
d7:cb:3c:3b:52:9d:16:44:cf:c3:8d:97:5d:01:c0:e5:21:95:
28:1f:51:4e:25:1b:9b:b1:18:65:72:6f:21:2d:4f:b9:a6:b9:
b3:e4:76:83:e8:89:0c:6e:11:ff:0c:d0:45:5f:a2:cf:cc:a4:
d3:ef:ee:19:dd:8f:21:6b:f0:a5:e7:7b:48:9f:cc:ac:24:c6:
f9:af:e5:f4:98:80:35:34:52:ca:b2:70:92:22:c6:29:ae:08:
ba:42:96:5e:6c:b0:24:1b:b8:66:e6:a7:07:03:cc:ad:cf:d1:
85:2d:f4:ef:6d:a0:3a:1e:6f:9b:c6:9b:c4:79:6a:f9:ed:2b:
32:d1:b8:89:2a:fd:ac:c4:4a:d4:6c:87:94:2a:c5:17:45:da:
af:f5:92:1f:0f:b3:ed:97:a1:6d:27:2e:03:a3:80:f5:95:9f:
f2:b4:bc:de:80:e4:ea:42:d6:4f:75:cd:47:96:00:70:2b:78:
31:11:5f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:23:49 2025 by rpki-client