Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: 8DRmqQzXXdMkZSLUhRfJ9noAL8P9V5IKV1HK2ra2AT4=
Subject key identifier: CD:B2:66:4F:28:FD:F1:00:8A:B9:26:20:44:D1:B5:51:22:84:33:54
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 0196C1263D56A7B99EE8587800D45DD7E0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 08F5
Signing time: Sun 11 May 2025 21:00:30 +0000
Manifest this update: Sun 11 May 2025 21:00:30 +0000
Manifest next update: Mon 12 May 2025 21:00:30 +0000
Files and hashes: 1: 1-Oc-5i1yyq11robM4onOto0qtew.roa (hash: k/9TNuFsVCQ/WuYJYH9Qe3QLWgW1naRjiSPb+eOEI+0=)
2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: LIhkZKbk25a/owxpj/VAIS45dzjv4Rk3ZekbVfx+JLw=)
3: C1SZKKCkY7SbLFevNwXtaHd2whI.roa (hash: qLK2DqN3/ycXpzvuQLbdz4SdUDAqvfLR7qE4BXoJD04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:3d:56:a7:b9:9e:e8:58:78:00:d4:5d:d7:e0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: May 11 21:00:30 2025 GMT
Not After : May 12 21:00:30 2025 GMT
Subject: CN=cdb2664f28fdf1008ab9262044d1b55122843354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:5f:dd:04:ae:88:f4:c5:87:ee:fb:3c:c4:
b5:d8:69:97:78:96:9a:5e:ab:e2:13:31:af:4c:e5:
c0:6f:ad:eb:70:3c:75:5c:79:df:23:a8:e2:76:46:
e6:c8:76:84:35:d4:93:f4:38:6c:5d:30:68:6b:eb:
e2:cb:57:72:4f:39:42:6c:73:1b:f6:bc:1f:1b:3a:
05:40:65:eb:e8:4e:79:e4:36:43:cc:9b:a0:09:dc:
d5:02:15:ef:07:e6:49:4a:ba:e8:a7:af:13:82:d1:
40:98:48:da:a3:59:18:0a:a4:05:7a:6b:b3:2f:52:
bb:8a:fd:72:1b:72:ff:d8:11:d8:23:c4:5f:a1:e3:
d4:bc:61:25:c8:9b:b3:64:ce:6a:e8:4a:a8:ae:50:
75:94:e5:a1:61:4d:7a:43:54:e6:54:94:d8:f1:5f:
85:62:b4:71:a7:a4:c9:76:2e:ff:35:bb:ce:b1:d1:
2b:e9:db:b2:46:3e:a4:de:c8:25:a2:c7:7b:3f:b0:
ad:44:d2:56:f8:0b:d6:1a:dd:24:b7:91:91:fb:0f:
94:f5:02:c4:bc:b0:9a:17:6e:9c:ef:20:8d:b3:f6:
37:d1:56:6f:64:ea:d7:c2:20:f0:d1:10:f9:d1:3e:
7c:b7:2d:db:d1:ca:ab:7a:1a:fb:ce:2b:87:75:9b:
ed:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B2:66:4F:28:FD:F1:00:8A:B9:26:20:44:D1:B5:51:22:84:33:54
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f8:80:b2:12:81:06:ff:33:a5:4c:22:d4:7a:38:36:8b:a9:
37:ef:cd:9b:50:ca:32:96:65:e1:40:e3:f4:2a:37:f2:07:bc:
4b:2d:9e:22:b9:61:63:b7:2f:25:62:0f:06:e8:0d:c8:4f:e0:
a2:66:44:f8:26:ba:a4:35:76:1a:ff:86:07:fa:fb:21:07:41:
8e:5c:12:28:20:24:05:1c:db:e7:0e:ad:45:05:ac:61:aa:0d:
3a:3e:a3:e5:76:55:56:c1:83:de:a5:a5:3f:29:f2:f3:08:13:
86:57:d4:5f:da:65:7b:73:72:2d:80:7a:88:e0:98:e7:fa:71:
45:40:ab:40:ed:55:5c:1e:61:c3:2d:b7:9c:bb:9c:cd:e7:ea:
5c:ec:2b:ed:03:f7:25:95:a1:a3:62:2a:98:2a:12:6b:1c:a3:
b7:ea:e3:74:e3:3c:f4:7a:de:a6:18:19:07:67:a2:3a:5c:61:
ed:d3:41:9c:57:e2:43:45:76:34:25:42:d6:33:09:1b:00:f6:
43:d7:c0:45:fb:6c:c5:bc:81:5c:7d:ef:10:c1:54:51:48:aa:
97:2e:0f:b4:b4:c4:e6:c6:16:5d:45:34:4c:77:da:98:75:06:
30:90:46:7f:15:66:a0:b3:b9:fe:c2:28:07:12:28:bf:6a:25:
65:2e:92:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:16:59 2025 by rpki-client