Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File: AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier: F+MT+e7bPlGDoPohSpuARIEh4T0LYKG6dmElQ1qaTHg=
Subject key identifier: 2B:B3:C5:59:2B:9A:5F:F7:81:34:8B:81:07:74:58:8F:BF:46:53:08
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer: /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial: 0196BB926038FF135A57C99BD1CFED2B9D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 19:00:54 +0000
Manifest this update: Sat 10 May 2025 19:00:54 +0000
Manifest next update: Sun 11 May 2025 19:00:54 +0000
Files and hashes: 1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: FETpx2rG0jaxC8XoaA1pveHhnedbBJGKX23jvTRl3hE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:60:38:ff:13:5a:57:c9:9b:d1:cf:ed:2b:9d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
Validity
Not Before: May 10 19:00:54 2025 GMT
Not After : May 11 19:00:54 2025 GMT
Subject: CN=2bb3c5592b9a5ff781348b810774588fbf465308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:90:78:f7:dd:5e:6c:f6:80:66:a8:bd:94:0a:
69:20:29:44:77:17:43:8e:b6:fb:8d:2a:9d:18:0d:
c5:f0:44:e1:23:6a:d2:08:55:ec:5b:be:76:1a:cf:
8d:83:66:5b:29:b0:82:d4:44:bc:1c:3a:6e:e7:6d:
4b:d5:74:31:cd:8c:fa:fc:11:c6:af:1f:b9:0a:12:
30:8f:36:05:1b:9c:75:4f:17:2c:e4:1e:65:5c:37:
3f:b5:f1:35:10:4e:5e:41:22:b0:05:ba:61:e2:03:
09:d2:1d:da:f0:26:c3:02:b0:23:bb:1f:9d:8a:58:
c1:4f:cc:4f:93:e8:ef:02:0d:c3:f5:59:f8:a6:ba:
26:10:d0:85:c4:e3:4a:93:05:92:f8:96:74:59:44:
41:80:72:f2:3f:e2:28:1c:b0:86:97:44:11:5c:7c:
19:02:6f:68:65:97:d4:fc:f2:14:d2:6e:ce:bf:8e:
ba:68:94:b5:d4:0b:57:51:02:72:ea:49:52:c3:7a:
74:b0:87:98:b7:cc:01:95:0e:6a:5b:ff:52:e7:4e:
1d:06:a0:ba:9c:bc:f2:35:15:4c:21:1a:7d:62:9f:
ad:42:03:62:f4:4e:e6:2d:73:1e:6e:15:02:b5:02:
0b:d6:4b:d8:f7:57:05:be:32:d3:eb:08:df:29:55:
a7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B3:C5:59:2B:9A:5F:F7:81:34:8B:81:07:74:58:8F:BF:46:53:08
X509v3 Authority Key Identifier:
keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:af:f4:00:69:71:f9:61:2d:8b:45:77:65:0e:b9:78:61:e0:
55:e1:e5:6b:fd:b9:bf:84:b2:04:71:c6:07:8b:0e:98:92:9f:
93:23:7b:7b:db:29:98:3e:b4:13:30:ba:04:cf:30:55:2a:7c:
a2:33:8f:e5:ac:6c:46:c6:ee:19:cd:b4:58:05:d1:c7:c7:b9:
fe:5a:b9:24:ba:2f:1b:0a:29:64:99:5c:68:85:27:67:95:8a:
00:18:13:44:4e:9e:e4:58:e6:ba:09:d2:00:9c:06:ab:2a:84:
a9:7b:75:cb:64:69:de:77:26:58:51:50:b5:b2:06:9c:19:f0:
20:69:ad:4c:3d:59:5a:f4:6f:18:68:c4:bc:15:51:ae:7d:b5:
05:47:96:6f:dc:97:d3:39:1f:2b:a0:28:2d:62:22:3d:d6:2d:
74:ec:e4:f0:e4:73:e9:76:3b:6b:5c:35:06:12:f0:d7:e0:a0:
1a:01:c5:c3:a1:aa:55:c9:bf:9a:d2:7c:54:8c:9b:ec:39:3f:
d3:93:ee:40:06:51:2b:66:fd:ce:a7:2f:7e:c1:a9:d9:39:fd:
c7:d1:f5:5f:6b:80:30:db:2a:ca:77:49:57:c5:10:c8:67:f4:
37:3c:4a:93:03:69:6b:e8:dd:c3:50:73:e3:7e:f3:95:86:1b:
19:bf:ac:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:21:35 2025 by rpki-client