Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier: Z/o8q85RJCfxcbXIOQ2JS+jy3VQv4dOrlAGdC9zXlrI=
Subject key identifier: 7A:99:3D:DD:34:2F:DF:3D:B1:35:02:60:7D:4E:1C:23:CE:7B:15:09
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer: /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial: 0196B82397400EF756A24BAF7825D536FAAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 03:01:02 +0000
Manifest this update: Sat 10 May 2025 03:01:02 +0000
Manifest next update: Sun 11 May 2025 03:01:02 +0000
Files and hashes: 1: 0hbCuxhGBbcq1BE_SuUs0Qoi-Vg.roa (hash: MAtioDj4t6UaO211UFLR8yqYOPNcNMxWi5lPTtRkcJ4=)
2: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: 0/jP5alq6rCzSTIqpdFAdhmjBBp/68mi+dt8abB57ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:97:40:0e:f7:56:a2:4b:af:78:25:d5:36:fa:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
Validity
Not Before: May 10 03:01:02 2025 GMT
Not After : May 11 03:01:02 2025 GMT
Subject: CN=7a993ddd342fdf3db13502607d4e1c23ce7b1509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:be:8d:5f:5c:28:ab:51:fe:62:04:97:23:ab:
67:cc:a6:ce:f3:99:d5:7c:c9:ec:f4:ba:85:38:c4:
ad:db:6e:a0:36:a6:51:47:5c:96:08:c9:b0:c8:ef:
b4:d9:1e:1c:ef:2f:da:37:b9:f9:07:7b:58:28:82:
17:ec:b6:7a:9f:98:0d:82:95:ce:70:55:f3:f6:fd:
d4:cf:f3:f6:12:32:63:37:cf:2e:47:43:3b:d8:44:
cf:cf:e1:4d:40:3b:eb:1b:b2:8a:f1:79:41:0e:e9:
4f:8a:90:42:2f:ab:f0:26:66:da:36:24:ab:5a:f7:
fe:b0:ef:23:73:c8:a6:d2:42:1c:e6:41:0c:9e:6f:
f0:c4:65:ef:4f:14:44:f7:9f:9e:23:b4:4f:e2:43:
57:d6:39:bf:06:51:35:b4:cc:cf:0e:33:b5:6a:fa:
17:f5:3f:86:bb:51:f5:fd:84:4a:4d:bc:0f:3a:46:
7c:11:b5:2a:79:17:f4:fe:15:45:38:ee:1c:b7:cf:
56:55:d3:ee:e3:f6:5b:fb:fd:5e:02:42:c2:a6:c4:
3d:61:7d:4c:40:0b:0a:f9:e6:d5:4a:d2:26:c0:0a:
f0:a4:e3:94:5a:da:75:5a:c2:68:3c:37:0c:e2:36:
f2:0c:63:cc:0e:3a:4b:f3:39:6d:19:bc:ee:01:26:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:99:3D:DD:34:2F:DF:3D:B1:35:02:60:7D:4E:1C:23:CE:7B:15:09
X509v3 Authority Key Identifier:
keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d9:81:da:d7:02:8d:5a:21:8b:06:9c:a3:d6:aa:46:2b:eb:
98:ec:3d:95:e9:97:af:50:31:59:ea:3b:42:ef:01:b8:27:ee:
d7:90:06:83:0a:27:58:dc:cc:30:48:c7:ab:65:66:82:dc:a9:
48:23:df:3e:ca:09:50:ca:98:f9:be:e4:f3:4b:a4:e6:92:8f:
31:2b:1f:e3:a5:9e:e3:38:d2:1f:dc:3a:ea:e2:ef:19:99:43:
0f:bc:e8:3e:af:7d:0b:ca:c7:81:97:c1:e6:bf:30:f8:5d:3e:
cd:59:35:58:f0:fe:57:4b:8f:ad:9f:f9:d7:09:8e:7e:76:91:
16:b0:9e:71:90:e8:f3:da:21:a2:47:7a:f5:30:2d:92:13:1a:
da:89:3a:39:32:97:d4:ea:44:4e:2c:a2:4c:4f:7d:8c:f4:4d:
7c:75:67:58:cf:85:ba:28:19:fa:46:c2:2c:ad:bd:55:e6:ac:
3e:0d:63:26:b1:92:d9:c1:45:aa:96:7c:55:74:ca:99:97:e5:
e3:85:b5:d6:c7:52:3e:f7:78:aa:5c:1e:b5:1c:7c:8c:ec:33:
41:f4:d9:a0:be:bb:d0:94:6d:c0:37:53:de:5c:7b:c8:78:06:
66:cb:27:31:a9:48:ca:db:09:97:7a:7e:2a:60:73:ce:43:d6:
40:2d:5f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:21:32 2025 by rpki-client