Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
File: _AY2gjog5gJjQv6MiOpyqPj3p0k.mft (raw, json)
Hash identifier: KfW1Yq/4Cwott6tTiSoe6VcjxBKXacr2aco+24Nj8tU=
Subject key identifier: 7F:EE:44:06:07:67:6D:CD:D0:88:93:69:C1:26:B0:DD:DD:A8:00:11
Authority key identifier: FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
Certificate issuer: /CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Certificate serial: 0196C3827B4CCE7F3DF785DAE256CCEA7612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
Manifest number: 115A
Signing time: Mon 12 May 2025 08:00:30 +0000
Manifest this update: Mon 12 May 2025 08:00:30 +0000
Manifest next update: Tue 13 May 2025 08:00:30 +0000
Files and hashes: 1: _AY2gjog5gJjQv6MiOpyqPj3p0k.crl (hash: 2I+OuscglWUDlMA7F1qOOAmnYMkGWH0WT1wiNucj69g=)
2: hIlU1ledlK0WoRmp-tL_K_qi2N0.roa (hash: ZI6M6O4nwpCFukoO/yVoA24rabSe9nnOSdxH4aDpFEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:7b:4c:ce:7f:3d:f7:85:da:e2:56:cc:ea:76:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Validity
Not Before: May 12 08:00:30 2025 GMT
Not After : May 13 08:00:30 2025 GMT
Subject: CN=7fee440607676dcdd0889369c126b0dddda80011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:0f:52:0e:74:81:8d:94:62:46:60:b3:18:
f7:bb:fe:c4:7f:da:d2:d0:ef:14:d8:a6:59:09:f7:
81:34:4d:a1:0f:6a:da:09:7a:5c:94:52:6d:4a:bb:
df:b1:fd:01:14:89:94:5a:99:bb:6c:bd:c5:b3:58:
da:73:1d:fc:10:3d:6d:83:7b:8f:4f:f6:cf:4d:38:
18:8a:75:c3:7b:43:0f:c8:92:85:4d:58:ea:ba:4b:
20:d5:73:15:cb:5b:67:75:4d:21:3c:2a:57:9c:5f:
55:d9:66:85:d5:fc:e4:fa:a5:60:df:98:ae:03:d3:
52:24:3e:09:a8:46:c1:59:59:de:31:fc:3a:a1:a4:
d1:3a:83:e7:4e:02:f9:d2:ad:a8:12:2e:75:a1:da:
0a:e2:83:be:a0:2c:8e:12:3f:1b:1a:8f:73:bb:88:
3c:e7:26:f4:f7:71:76:3b:8f:73:53:e8:66:00:6f:
b5:f1:a1:55:df:33:10:ac:4e:ba:45:89:27:62:1b:
97:28:81:c5:a9:03:62:dd:45:00:3d:5d:e9:cf:5e:
86:13:f7:ac:51:74:66:37:71:9e:ff:2e:99:3f:6a:
a9:52:18:20:d3:2b:f3:96:b7:68:ff:9c:56:c3:0e:
a1:53:43:fa:24:3a:64:f6:3f:27:fb:bb:d8:ce:1a:
5a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EE:44:06:07:67:6D:CD:D0:88:93:69:C1:26:B0:DD:DD:A8:00:11
X509v3 Authority Key Identifier:
keyid:FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:49:ab:d1:8d:c2:d4:56:d7:f8:8c:8b:e3:27:13:ef:4c:da:
91:b4:68:6c:41:84:73:6f:22:50:c6:81:dc:e6:44:92:28:76:
40:35:11:83:f0:72:00:94:54:29:c8:24:fe:c3:54:6d:6b:ea:
a3:4f:81:c9:4c:ec:a4:a1:be:16:ff:54:b3:d7:19:77:f4:31:
5f:1f:14:78:0f:ba:52:32:00:0d:55:bb:ec:5c:ae:54:a2:57:
ce:9a:ae:96:88:3f:dd:81:88:06:56:9a:82:92:8a:50:31:57:
b4:90:38:4b:75:8f:d8:c2:9a:eb:6e:af:ca:72:f7:ba:e6:a6:
f8:0a:39:55:48:51:40:94:df:10:10:9f:61:d4:92:e1:ba:26:
41:f0:43:f4:db:42:74:78:33:68:3f:45:43:8b:35:ed:b6:0a:
9e:a9:7e:a1:d5:41:de:93:2b:01:f8:88:4a:77:06:8a:c4:a7:
8a:b7:d1:67:5d:ba:09:50:d6:b1:8c:bb:9d:1a:88:4f:80:b2:
c9:a8:5c:0a:0d:09:dd:e4:50:5d:ac:21:94:55:8a:7f:14:9a:
54:38:a0:d7:ff:2f:d0:71:60:15:5a:05:1d:10:93:1d:77:92:
17:bb:aa:f0:f6:4d:a1:be:0e:b0:0c:9b:c1:db:1c:f8:b8:a1:
11:d2:fe:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:46:53 2025 by rpki-client