Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: YTboHSlI5gcW7veVaJD/wrqPnuAlqNLOtEfTLGmJ7Y0=
Subject key identifier: 50:2D:44:6A:FA:40:27:A3:A7:BE:BF:00:34:47:EF:B7:7C:D2:E7:53
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 0196C75F2E5218FCA51046ECCD052351920C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 0974
Signing time: Tue 13 May 2025 02:00:25 +0000
Manifest this update: Tue 13 May 2025 02:00:25 +0000
Manifest next update: Wed 14 May 2025 02:00:25 +0000
Files and hashes: 1: A0vsL2z_xaeExEMFhErE3dgWYuI.roa (hash: GFluxTgPqxFYWQe8ASr2AzVuLwmCDibJdLSINZzoxsw=)
2: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: DWcGrDcnD5AdRrQ/HBtJYXo1MKkHYLCHiASq8z2y0G4=)
3: uDu_9P9n8eoGu8X-iDdUh-TfwAY.roa (hash: SstG8OSmlbUZo2JnDI9jEdpMEQNgUKMYMBzo75QnAgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:5f:2e:52:18:fc:a5:10:46:ec:cd:05:23:51:92:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: May 13 02:00:25 2025 GMT
Not After : May 14 02:00:25 2025 GMT
Subject: CN=502d446afa4027a3a7bebf003447efb77cd2e753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:83:b5:6c:17:73:e0:94:db:0e:a1:e8:d7:
3a:09:26:92:f9:6c:85:f1:c9:93:09:c7:86:c5:c0:
cf:69:2a:07:33:52:8c:d7:1d:7d:b1:7e:60:b0:98:
24:88:b3:5e:20:22:8a:c4:de:1b:d3:f2:90:b6:84:
a8:71:8d:45:42:5e:84:8f:8d:ff:fe:dd:b3:76:36:
e9:c7:ad:da:23:79:1d:42:88:f2:52:80:c1:4d:53:
41:0a:db:60:da:1e:bd:e6:76:a5:47:1f:1f:0e:e3:
03:c5:ea:5d:19:81:94:8f:6e:f8:74:d3:b2:2b:07:
bd:56:66:06:5d:6e:f3:a3:06:8b:f3:bc:6e:2e:40:
de:0b:88:1b:20:1a:98:1a:fc:ac:d8:d0:f0:c4:7e:
a5:6f:2a:d3:d5:fd:2d:ce:e5:f3:f4:a6:3d:a2:26:
bf:52:6a:2e:99:84:6a:8f:1f:53:c6:a5:bd:52:1c:
10:c4:d5:b6:b3:44:2a:61:1c:b2:2c:17:bc:ca:82:
89:5d:3e:47:96:f8:3f:b0:03:38:58:d6:2e:34:8b:
dd:9b:0f:d1:cc:56:58:51:bb:14:46:b1:e4:8e:59:
d3:24:78:9a:3b:0e:8b:06:1c:8f:76:9c:81:ed:3a:
5e:60:47:7c:47:80:02:69:81:6e:11:b1:8a:2a:9a:
29:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2D:44:6A:FA:40:27:A3:A7:BE:BF:00:34:47:EF:B7:7C:D2:E7:53
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cc:d7:89:ce:fd:83:d4:dc:3d:71:64:99:1a:3d:e5:12:c0:
74:d4:ba:10:e6:4f:66:51:db:66:3f:50:5b:22:0a:10:57:ab:
ee:3d:65:52:b7:95:07:b6:c9:68:16:8a:d7:98:0c:7e:87:e1:
0e:cb:f5:d6:97:2b:b0:c8:c2:91:43:5d:8b:9b:c0:b6:cb:63:
fe:a8:dd:ae:17:c8:44:0d:e6:25:b5:ea:14:e2:a9:ae:84:54:
42:1a:44:4c:27:1f:5b:55:a9:30:a8:fe:eb:bb:77:75:90:25:
42:51:92:1e:00:1d:39:d7:29:41:05:19:7b:ad:ee:cf:46:ef:
c8:8b:3e:77:c6:10:4b:ee:1a:7e:ee:36:5a:a8:21:b9:ce:1d:
e7:ad:d9:c2:5b:e3:e3:44:35:83:99:6b:3f:b4:ab:26:0e:bb:
56:e8:3b:e7:a4:1f:a8:c8:5a:36:ca:a3:ea:a0:e6:cc:dd:46:
1f:1f:c1:51:79:9d:f2:61:27:f2:18:f1:23:13:d9:0a:0b:4f:
2a:3a:af:f3:88:65:3f:a3:93:2d:69:90:49:28:92:15:1c:f3:
06:a5:90:b6:85:ab:88:39:9a:9b:fb:6f:32:c6:e9:7e:84:eb:
9a:53:10:6a:fa:fa:9a:a8:19:d3:6c:0b:c7:b9:84:3a:d1:c3:
29:5e:a4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:24:13 2025 by rpki-client