Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: Gr66obMS47AqVgWzo/qzIYQblU3CXx5VKKb2g5WYh9Q=
Subject key identifier: 3B:2E:98:5D:B3:AB:10:25:17:F7:68:7D:CB:60:59:DB:25:AD:E0:56
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 0196C872559321C46A7C662CF9168BD3DE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 10FF
Signing time: Tue 13 May 2025 07:00:58 +0000
Manifest this update: Tue 13 May 2025 07:00:58 +0000
Manifest next update: Wed 14 May 2025 07:00:58 +0000
Files and hashes: 1: CGPoOJknrvd8SI5T8ORU1Iqt9Hc.roa (hash: hep1Wj/UUlgL43jUgR9ytYwV+6+e7lZrxraYcWtC/JE=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: gGUbfKIbz0wyo8rsxGjzQncFQ18I7y1GNQTj89j+5VE=)
3: wfdlsKAAvesnWvTDvia3MLYX62E.roa (hash: /q1g066kiwFYosKzhe1K4+rG1+igVMTmtZs6afix28U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:72:55:93:21:c4:6a:7c:66:2c:f9:16:8b:d3:de:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: May 13 07:00:58 2025 GMT
Not After : May 14 07:00:58 2025 GMT
Subject: CN=3b2e985db3ab102517f7687dcb6059db25ade056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fd:f7:3a:ea:3f:63:db:21:d5:a2:a5:35:2e:
e8:b2:95:d0:de:15:3b:2c:0a:4e:84:78:da:8e:f3:
41:bd:ec:9a:b0:07:76:f8:be:56:ad:42:9b:27:be:
4e:e7:b8:81:7e:48:a7:23:db:2b:5a:31:ee:5c:09:
dc:5f:7e:2d:2a:d5:19:b2:9e:e0:e0:4f:54:ad:a9:
f8:3a:53:58:76:b9:ae:29:9b:fa:87:60:e7:f9:ab:
3a:81:72:f6:c9:dc:e7:f1:09:6b:ef:d1:2c:be:a3:
aa:fc:36:34:5e:89:27:d7:65:45:87:6d:53:61:9d:
ad:0a:33:40:49:97:ca:b5:a3:4b:41:e8:80:05:20:
e0:8f:46:2d:d6:58:32:1c:96:84:b8:96:a5:54:76:
3b:10:d9:a3:4e:cd:6b:93:17:a8:70:e0:d9:fa:c2:
33:4b:07:ea:09:06:c2:91:be:64:c3:0d:92:68:57:
3a:23:c2:e5:32:2c:c0:f2:0a:15:71:e8:07:ff:91:
a8:9c:42:d1:dd:70:3e:a0:bb:50:14:1f:86:23:65:
1b:6f:e3:2c:34:67:78:68:aa:66:68:39:86:f6:2d:
02:9c:31:19:3f:53:78:e3:a4:40:19:20:ab:b7:7f:
f3:f8:a2:c0:08:34:ae:77:01:12:95:98:94:f1:07:
ba:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2E:98:5D:B3:AB:10:25:17:F7:68:7D:CB:60:59:DB:25:AD:E0:56
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f9:cb:e7:e5:c6:ee:55:a9:f4:c6:3e:60:71:14:5b:51:cd:
a7:10:e6:bd:3f:65:38:5d:b2:1d:9c:fe:34:0e:02:5c:d0:43:
84:b8:46:ef:d1:5b:ad:7f:bd:7d:1f:e5:d4:4e:cf:0e:81:b9:
c4:7d:95:62:68:7e:9f:c3:57:85:45:1e:46:6c:c0:e3:80:ea:
81:f3:64:f7:75:19:6e:20:e2:05:01:c0:e3:a0:a2:9e:83:77:
a4:28:06:a1:74:9c:69:19:21:fc:f3:86:d4:45:75:69:03:6d:
4d:35:1e:c4:f6:6a:50:4e:96:21:99:f9:0b:d4:5c:75:9a:0c:
ee:00:03:22:e2:11:c3:cd:58:8a:bc:a3:0e:77:f4:e3:9b:d7:
58:97:c9:91:c4:10:fb:fc:40:e7:12:14:de:17:e0:4b:df:41:
de:f1:74:37:88:8f:df:85:48:11:b9:44:7a:e5:07:ec:21:50:
c7:19:ec:ac:c3:6f:12:25:98:6e:e1:67:a5:1c:57:0f:d3:53:
8b:61:08:0e:e6:c8:ea:4e:3f:12:99:be:a7:ba:c8:a4:35:21:
7e:ef:f2:df:c8:d6:f7:80:d1:54:e9:e5:39:c3:cb:0b:f1:e6:
3f:fa:4a:5a:b6:28:dc:8f:f2:eb:94:9d:01:36:a4:10:91:6b:
1d:b0:9b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:30:06 2025 by rpki-client