Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
File: aspx8tn-K0nGdi89mg6L8zLf3tE.mft (raw, json)
Hash identifier: kGpR3bC0zVO1DF0FAeJe4B0nkh6ptasVhwNlxv9J6DM=
Subject key identifier: 73:23:20:1F:CB:E7:7A:59:BA:71:51:DF:5B:92:A6:53:2A:91:1F:D1
Authority key identifier: 6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
Certificate issuer: /CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Certificate serial: 0196CA60B861713D6C1CDFDA1B3591D3FB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
Manifest number: 0F2C
Signing time: Tue 13 May 2025 16:00:58 +0000
Manifest this update: Tue 13 May 2025 16:00:58 +0000
Manifest next update: Wed 14 May 2025 16:00:58 +0000
Files and hashes: 1: aspx8tn-K0nGdi89mg6L8zLf3tE.crl (hash: aD9ElHVjKzOQYCTpTCK+9xEPDVP3W2GD2b/vMtNecDU=)
2: njKb2eruHX8H9g3wi8a7hMHrArw.roa (hash: 6gW6VZJ5Gbs98ZjAseT0lvfg+/2Cg+ztPZG7diySUiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:b8:61:71:3d:6c:1c:df:da:1b:35:91:d3:fb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Validity
Not Before: May 13 16:00:58 2025 GMT
Not After : May 14 16:00:58 2025 GMT
Subject: CN=7323201fcbe77a59ba7151df5b92a6532a911fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4b:9c:c8:0a:1c:5a:38:a2:8d:72:17:4b:ee:
0a:52:e0:9c:2f:a2:69:37:34:0d:91:66:a2:7a:cb:
c8:1a:f9:be:36:ea:b5:ce:72:ac:6e:86:86:0a:fa:
f0:1c:35:2b:5f:f0:43:bf:4a:21:5e:b7:9b:1c:fc:
a1:50:e5:1c:e6:20:44:54:35:6a:9f:01:ba:33:f5:
8f:ac:97:65:f9:b8:7d:25:96:0a:75:15:6c:97:f3:
46:23:fb:8b:3f:e8:e1:59:94:f0:ed:c4:2e:ca:21:
73:17:65:41:b2:21:8f:aa:04:bf:a5:96:09:85:a2:
12:ea:28:35:2e:a1:ef:96:37:cf:d2:02:ee:ac:2c:
8e:08:40:c2:ed:35:15:06:62:8b:5f:e4:e2:e0:2c:
f6:fd:b6:85:c8:1c:60:66:eb:b0:bf:13:c1:69:83:
d1:df:5c:02:4c:af:bc:52:f7:bf:1a:da:39:91:cb:
64:9e:77:5c:7c:82:8e:c5:ca:c5:82:2c:b7:2e:c7:
c0:c6:cb:5f:9e:5b:5f:70:4f:cd:42:f0:e1:fa:a2:
d6:b3:0a:8d:13:49:a8:b3:77:ee:68:33:1a:f8:c0:
d9:9e:af:c4:cc:6f:9e:8d:a4:89:ad:7d:c4:a0:33:
43:31:96:9d:4c:3d:db:57:37:61:06:71:15:e9:33:
f1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:23:20:1F:CB:E7:7A:59:BA:71:51:DF:5B:92:A6:53:2A:91:1F:D1
X509v3 Authority Key Identifier:
keyid:6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4d:7f:4d:7c:ae:91:8b:6d:81:ff:55:bf:15:1d:0a:13:09:
fa:26:72:a2:4c:a5:be:0e:dc:c9:5e:4b:7f:35:db:bf:73:ba:
da:3e:9f:c9:06:d2:e2:b2:bf:7c:b6:c8:36:68:a6:51:dd:bb:
54:c0:39:39:06:86:ca:2c:98:d7:92:19:cf:98:12:ea:f6:73:
88:c8:05:45:57:60:c2:14:20:89:f8:54:08:cc:6e:ff:79:0f:
33:fa:ed:b8:d5:4e:74:14:f0:da:71:94:4f:e7:b7:ef:d3:f3:
37:1d:43:db:ea:54:31:44:fd:b3:6c:c2:50:d3:a4:63:f4:d8:
46:87:38:57:e0:f8:e8:93:5b:4b:5c:21:e8:cc:53:c8:30:c2:
15:d5:78:26:6f:aa:3a:e5:9c:d5:01:2c:de:01:0f:a0:5c:ad:
b5:eb:7e:21:75:2f:8c:23:ec:62:92:95:86:f3:1e:db:e1:87:
16:94:db:c3:ab:f0:d9:bc:67:9a:88:92:b5:16:f6:47:8b:eb:
21:aa:2f:a2:b0:5f:9c:64:6d:84:4c:d2:0d:46:ab:0a:da:dd:
d1:a5:6c:dc:55:8f:b0:87:cd:8e:01:02:a5:c4:53:61:f2:5b:
13:06:84:b5:f6:06:f4:31:56:ca:27:a2:1f:b9:6c:34:d5:22:
a5:9f:84:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:01:42 2025 by rpki-client