Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: Z4gULSXSzmTFufTpuKzLBTMU4/Mdaa95Ad6GLqMStbs=
Subject key identifier: 96:EB:C9:C8:4C:B1:9F:D9:E8:75:CD:50:7D:4E:37:22:3A:48:67:2B
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 0196C081AA576F8AE2D0E475B031C556A4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 18:00:45 +0000
Manifest this update: Sun 11 May 2025 18:00:45 +0000
Manifest next update: Mon 12 May 2025 18:00:45 +0000
Files and hashes: 1: 5dz9Tw4bpiGr43q4HQtTf_7BsP0.roa (hash: 0VcdjRI2LyeRRm3QIQdFN5UYWsj35tdfOvua8dhZWaw=)
2: C-j834veFsj1jsTX7J6_TWAlAyM.roa (hash: 1/vufO4pJcMpVCQ6/N50OfHCZoID4FXv7ykneVDspNU=)
3: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: aQI40kGbaTcrKp2wBTsZQTselQpWIrrFrgntefM+nNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:aa:57:6f:8a:e2:d0:e4:75:b0:31:c5:56:a4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: May 11 18:00:45 2025 GMT
Not After : May 12 18:00:45 2025 GMT
Subject: CN=96ebc9c84cb19fd9e875cd507d4e37223a48672b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:f7:bf:77:85:fd:70:cf:ab:c6:76:b8:de:
0f:42:b1:d8:19:39:7b:00:c4:22:66:b7:47:e9:ff:
f1:5a:92:22:70:38:87:b9:5c:4c:b7:f5:e2:cc:46:
65:dc:d4:5f:ae:69:ca:fc:15:26:21:17:54:75:cc:
43:0d:36:89:fa:14:c8:79:1c:81:72:23:0b:9c:ee:
d8:23:28:6a:ae:d1:c2:6b:e7:2a:9c:d0:91:af:91:
27:99:16:18:e4:28:24:d7:c1:b6:da:89:f0:e9:36:
d0:cc:2c:8b:6c:0b:df:78:dc:d3:e2:ec:39:55:28:
80:2b:96:08:5b:50:18:11:f3:0f:d4:fd:26:02:57:
35:5e:29:9b:85:fc:e2:18:44:2b:72:75:04:6c:d5:
9d:e4:9a:ae:4c:42:d2:cb:ad:da:55:30:7d:a3:19:
bf:89:97:18:b0:ba:91:b5:dc:10:95:7c:c8:33:68:
27:93:3e:1f:c5:be:b3:be:84:82:b9:96:3b:ac:27:
10:65:53:e9:ed:f0:a1:fb:b9:42:6e:ed:da:f9:96:
14:1a:3c:f3:30:07:0e:b4:e1:bd:89:b4:a4:aa:9a:
a4:bf:d2:b8:a9:2b:64:47:9f:eb:89:80:3a:6d:5c:
7f:85:f8:37:22:1b:95:66:7c:7b:2b:aa:4d:28:33:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EB:C9:C8:4C:B1:9F:D9:E8:75:CD:50:7D:4E:37:22:3A:48:67:2B
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7b:90:77:0c:10:fc:f9:db:64:c8:01:cb:33:a4:56:01:14:
7e:80:0b:46:f8:17:bd:8a:f8:89:05:83:d0:ae:25:00:86:50:
91:5d:8f:d1:f9:87:89:f3:eb:f2:12:24:af:5c:63:33:b1:a8:
83:c6:d9:9c:1e:b4:14:40:47:f9:a6:64:bc:50:f1:72:5a:f1:
56:56:dc:6a:6a:74:35:78:b6:60:f7:5b:83:de:8d:dd:ca:93:
db:af:04:e9:8f:fe:8a:03:d5:88:4b:e0:5d:6a:6b:6c:bd:4c:
8a:b8:f9:2c:9d:5d:ee:14:e3:d4:dd:52:4f:2c:a8:82:ad:3a:
69:1a:b2:f9:45:b4:71:4d:1e:65:24:03:23:03:3f:84:cb:6c:
80:7c:ef:ad:30:87:82:ee:36:18:d6:86:40:f3:6a:8c:8c:a6:
82:04:08:86:cd:14:25:2f:b5:be:9c:7b:fc:d0:ce:27:0f:7d:
a8:89:b1:69:97:69:13:ed:1b:3a:90:2d:b0:25:0c:df:10:4c:
85:0c:04:d4:e1:e3:09:6a:77:04:1c:9e:bd:0f:d2:7e:75:78:
cd:5c:79:ed:0c:60:84:7f:75:a8:b4:03:aa:0d:79:98:00:d5:
3e:a0:24:e9:8a:a1:04:cb:95:bf:7f:c8:64:3f:0f:47:68:1f:
2f:02:19:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:23:32 2025 by rpki-client