Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
File: a8GtFnaioypFoM85L3-cXqaOLeo.mft (raw, json)
Hash identifier: RNJRGAe3fxfobCzTjyuIhfWxGtqeYVPJbiNAqRGZddk=
Subject key identifier: E3:41:B9:AB:86:F0:2B:AD:A9:0F:57:82:45:69:6A:98:B4:17:DE:5D
Authority key identifier: 6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA
Certificate issuer: /CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
Certificate serial: 0196C314B239728520572175AAF3AB7EC93D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 06:00:35 +0000
Manifest this update: Mon 12 May 2025 06:00:35 +0000
Manifest next update: Tue 13 May 2025 06:00:35 +0000
Files and hashes: 1: CkA5P7l5ePDJ8YtVI5RwljhHN3I.roa (hash: Rv4CNPYpNEer366FC8TAHEAISsXVQ6rJf8w+ppgPPgs=)
2: a8GtFnaioypFoM85L3-cXqaOLeo.crl (hash: 6hwrThg/8pcz6Qkbsrm/RSbfCrhulI3tC+niDRurIS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:b2:39:72:85:20:57:21:75:aa:f3:ab:7e:c9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
Validity
Not Before: May 12 06:00:35 2025 GMT
Not After : May 13 06:00:35 2025 GMT
Subject: CN=e341b9ab86f02bada90f578245696a98b417de5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:e0:d2:3f:8b:f8:80:a6:9f:f6:c4:4f:e9:
73:69:0b:1b:b6:a3:7c:0e:5d:34:c6:51:7b:14:61:
81:5b:b7:88:5c:6f:f3:26:e6:50:ef:bc:14:ac:85:
02:6d:0b:23:4d:b3:27:55:59:2b:49:28:03:93:ab:
49:47:19:ff:56:9d:25:03:f6:fb:9b:11:03:15:e5:
81:ce:e9:1a:d4:83:05:82:28:55:c1:a7:9f:47:52:
9e:f0:65:3e:f4:5e:12:19:62:6e:7c:34:96:e1:2a:
4e:6f:e4:f4:d4:3c:5c:11:c4:77:87:49:af:41:b6:
e1:24:d2:9e:d6:8c:43:c5:0a:75:8a:e1:00:c0:06:
7e:4e:1a:bc:90:02:82:0a:e1:15:2d:05:43:f0:5e:
7c:03:84:8c:da:55:18:5f:db:aa:95:78:49:77:ff:
56:dc:62:d2:b9:19:75:e2:0e:e6:ef:65:e2:93:67:
a6:79:bf:df:59:1f:78:92:34:fd:de:96:4e:8c:4d:
10:36:1b:56:55:0c:26:ab:87:02:f0:f7:05:98:6b:
45:65:a5:ba:a3:15:83:af:17:e8:ef:0a:b0:58:11:
35:a6:88:90:c6:9c:42:c2:7b:c5:a2:9c:42:f9:dc:
d4:1f:a0:f0:a8:da:b2:70:a8:0c:e7:8b:8b:60:99:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:41:B9:AB:86:F0:2B:AD:A9:0F:57:82:45:69:6A:98:B4:17:DE:5D
X509v3 Authority Key Identifier:
keyid:6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c5:2e:fd:71:fd:fb:9e:47:15:fc:6b:43:e2:bc:6a:ce:1c:
a9:79:ac:2d:60:19:ce:17:3b:98:98:aa:97:67:9d:ad:94:9d:
d1:42:bf:9e:ce:f9:69:5c:bd:71:cd:2b:c0:ad:f8:01:d2:1b:
ce:ed:a2:5f:9b:2a:93:b9:bc:07:00:f8:e2:8a:44:12:68:6e:
3f:24:31:bf:de:99:7f:c3:4d:cc:50:eb:44:40:0c:02:37:7a:
88:e0:46:22:fe:b5:29:7d:0c:11:38:5e:a8:43:da:aa:77:cf:
88:0c:d6:e4:de:d1:8b:f2:2d:5e:38:8b:8b:54:7f:3c:48:70:
2c:6d:33:50:4e:ae:47:6f:d6:c9:d4:a8:f7:62:8d:cb:fa:1d:
1f:12:4b:e2:61:e2:ba:21:61:6c:10:f1:21:97:e5:97:b9:ea:
e0:56:ce:26:f8:c7:95:0b:12:49:c5:08:08:2b:ae:f2:af:79:
29:c1:2a:1d:fb:12:55:8f:24:83:cd:81:ae:de:1d:ba:63:27:
e8:25:f0:69:26:49:6c:34:ec:0c:26:93:6b:a9:90:57:9b:6a:
89:83:0c:7f:28:e1:c8:15:cf:d8:55:b7:c8:92:22:7e:70:79:
0e:29:90:90:67:78:0c:5b:2d:37:23:ed:98:cb:37:79:00:0f:
d4:c7:f1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:17:48 2025 by rpki-client