Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
File: AyUDQljydbfIfl9PcHBsDPWI78M.mft (raw, json)
Hash identifier: oc1f/1GodPZeq1CWHk921mmev48UpM4gZea1KgRll4c=
Subject key identifier: E2:D0:E6:42:C8:FF:E7:24:3F:FC:AA:4B:22:EA:90:60:63:56:8B:BB
Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
Certificate issuer: /CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Certificate serial: 01969F7672F6DF36BE561314EF7F110CDD01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
Manifest number: 14DF
Signing time: Mon 05 May 2025 08:01:02 +0000
Manifest this update: Mon 05 May 2025 08:01:02 +0000
Manifest next update: Tue 06 May 2025 08:01:02 +0000
Files and hashes: 1: AyUDQljydbfIfl9PcHBsDPWI78M.crl (hash: jfR2pUZwurZTmz7EF2Q76u97JAnjDn1LYKEXddaTf+g=)
2: MOCwLZlblZQoo_YoYCbZ92anb2M.roa (hash: jgAeaLjB49XZgaBhwkQWDfGLFnhl3KHjjoTO22L98Wk=)
3: XMzMrB_8MPuaKVcXQLSpfY45uHg.roa (hash: Kg28zSoDTugIChfPSBvRhPy84bB18/D8eH/rgKbNXTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:72:f6:df:36:be:56:13:14:ef:7f:11:0c:dd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Validity
Not Before: May 5 08:01:02 2025 GMT
Not After : May 6 08:01:02 2025 GMT
Subject: CN=e2d0e642c8ffe7243ffcaa4b22ea906063568bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:39:24:d7:20:65:29:1e:ed:bd:7b:94:9c:
0d:1c:a6:a6:74:b5:6c:8b:42:d6:35:5d:6d:4b:55:
80:e1:01:68:c6:22:64:87:2b:f7:e2:f9:d4:a0:54:
6a:f7:3a:e4:f7:8f:68:7d:f0:1f:b2:09:e4:4b:1c:
0f:2a:68:0f:b8:f2:3a:fe:bc:52:63:27:e0:36:62:
51:f9:7c:37:b9:f6:68:3f:09:b6:6b:2d:cd:09:59:
e4:58:04:7b:4d:c2:07:df:d1:6c:f5:03:6b:30:f5:
1a:c4:c3:00:1e:cf:be:c5:14:4e:8b:17:74:09:31:
8a:9b:d5:fe:bd:8b:6a:bf:3e:63:02:ca:ee:5c:6b:
55:a5:b7:7d:6e:c7:19:6e:7e:ba:a1:78:85:8f:c2:
6a:d9:8f:d1:e9:c1:64:62:e5:bc:b6:db:16:dc:76:
aa:23:79:a6:1a:62:4f:72:62:dd:1f:ac:c5:e5:6f:
fa:9c:48:d3:58:be:96:7b:1f:b6:a9:da:b4:fd:04:
f6:c2:56:5a:c6:35:c7:07:e3:ab:0c:5a:2a:bc:91:
d6:e7:ae:25:fc:e6:08:b4:68:fd:37:1f:02:0a:42:
98:93:2d:7f:a8:50:9a:ab:8a:5e:ff:f8:5e:25:31:
bc:15:a6:c9:aa:79:08:a9:b3:28:35:c0:c3:3d:7b:
87:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D0:E6:42:C8:FF:E7:24:3F:FC:AA:4B:22:EA:90:60:63:56:8B:BB
X509v3 Authority Key Identifier:
keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4b:9e:aa:44:4d:63:5f:cb:f4:5b:1c:01:51:f5:61:76:3b:
24:60:7d:cd:b7:b5:53:af:65:5e:47:2d:76:f2:10:8f:e6:cd:
cd:72:96:40:9b:b7:53:6a:a4:87:d4:bc:40:f2:9c:c0:e2:3d:
ca:85:06:09:db:68:fe:6b:37:bf:1b:8f:2f:95:45:6e:9b:6d:
55:71:2c:d1:eb:15:71:9e:c7:33:f7:9d:07:7c:ca:63:78:62:
aa:08:1a:eb:d4:d3:0e:e0:a7:81:d4:a5:34:2d:38:36:b0:c7:
91:69:20:7b:02:85:0e:50:cf:3e:11:26:cb:4b:f5:14:93:02:
6c:71:e1:a4:29:ad:19:3b:cc:90:87:66:21:54:da:d4:8a:b2:
40:f9:6a:1f:d1:92:02:97:30:81:55:54:af:e2:5b:63:c1:9d:
85:09:7c:55:3b:63:0b:bc:93:aa:52:c0:98:b0:75:9e:ab:84:
bc:59:cf:ce:fc:1c:a4:b8:f6:73:d9:1d:ab:36:85:45:f3:f2:
11:da:2d:8c:bd:80:b4:37:a1:7a:54:9f:49:b6:59:38:f8:a3:
90:4f:cd:8b:4a:63:a8:b2:e7:f8:2b:f6:64:fe:78:25:51:08:
73:bd:20:55:16:cc:0a:76:b7:ba:3c:d7:12:e9:5e:59:bf:aa:
23:73:41:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:17:16 2025 by rpki-client