
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
File: aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft (raw, json)
Hash identifier: yeeJS2E50hNqiHt3l+2YBHvecrdL6+XsyuArrjU5P4Y=
Subject key identifier: F2:CE:6D:38:A8:8A:B3:F7:CD:82:7E:B6:90:6D:12:07:52:1D:CC:CA
Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
Certificate issuer: /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Certificate serial: 0196A0BF51A990FA51D6466BD9AF72134DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 14:00:14 +0000
Manifest this update: Mon 05 May 2025 14:00:14 +0000
Manifest next update: Tue 06 May 2025 14:00:14 +0000
Files and hashes: 1: aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl (hash: XdFhSsrKZrFOqu/gyeueVfcpEvv38Kny2uRbbZ2PRWg=)
2: dUqyD5dBwTvJ_qoTBxGI93eGedY.roa (hash: u/v6Ya7ReNYFR+FOK7OzZoy9GOIB91+hBxT7UAGsW1U=)
3: xf5euvYwoNkCugSTZpIpZIs6gdQ.roa (hash: TROZHBrJUwOEntOqJDRdHWhVUC4xDktW9XYJSjQLr0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:51:a9:90:fa:51:d6:46:6b:d9:af:72:13:4d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Validity
Not Before: May 5 14:00:14 2025 GMT
Not After : May 6 14:00:14 2025 GMT
Subject: CN=f2ce6d38a88ab3f7cd827eb6906d1207521dccca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e5:39:a9:04:3e:8f:70:5e:92:7c:5f:0a:ec:
20:c1:c2:20:0e:4f:ab:05:0c:43:2b:c6:1d:2f:93:
31:cf:31:74:3a:d3:19:c9:44:4b:3c:4b:d5:c4:0c:
54:b7:b8:13:9a:b6:39:ec:61:34:14:c7:3d:a6:0a:
e0:62:c4:8e:73:eb:85:eb:9b:6c:2b:5d:0e:69:37:
7e:7f:af:de:88:aa:4f:e0:0d:c9:c4:11:d6:56:64:
d8:20:18:bc:36:7f:49:1e:cf:97:46:6e:b0:4e:59:
89:b8:5e:e9:86:92:50:44:d6:16:88:84:57:ff:1a:
ee:7a:39:10:6d:1b:c2:6d:47:d2:79:de:83:3d:49:
59:26:73:2a:dc:e0:d2:bf:3f:41:18:a7:9e:cb:cc:
92:55:30:72:23:ad:c1:46:c3:f0:cd:1e:7b:ef:80:
0a:ab:09:e7:89:c3:e5:be:ea:59:10:df:dc:44:fa:
f1:7c:b8:6b:8b:e3:f2:bd:90:70:41:51:f9:67:c4:
4d:cc:02:06:25:3c:b8:c4:3d:a6:2f:59:95:e5:bd:
bf:3d:53:cc:6d:c2:12:53:40:68:ee:a6:a4:44:2f:
58:a3:3b:44:c9:6c:c7:8d:74:1b:ac:fe:d1:7b:b2:
67:78:10:71:7f:4c:a4:4c:ee:00:89:7b:82:bd:1c:
36:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CE:6D:38:A8:8A:B3:F7:CD:82:7E:B6:90:6D:12:07:52:1D:CC:CA
X509v3 Authority Key Identifier:
keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:98:8a:3a:34:8c:31:fe:46:1d:85:99:4b:6b:26:27:5b:e8:
37:21:1c:7a:0d:8a:1d:73:24:8e:15:7f:23:b7:ad:0e:e5:ef:
e3:3c:6d:46:54:82:4c:78:2b:60:b3:3c:f5:a6:f2:fb:c7:99:
e1:47:98:87:cc:38:70:67:83:e1:68:88:1a:ec:c9:94:86:bc:
df:6b:ca:4d:50:3e:14:d5:2b:8b:a5:e3:46:90:8b:b5:80:be:
7f:d4:cb:e4:c7:65:28:b9:dc:43:99:20:ae:37:f0:99:02:c6:
f6:af:f0:a4:47:df:e5:ee:f6:de:f6:9e:1f:67:69:b6:43:df:
c9:03:47:b3:e2:89:b1:c4:59:d2:b2:29:7f:cf:4c:da:dc:b1:
7e:b7:00:2f:92:b0:4e:41:00:c2:55:1e:57:e2:df:bd:e5:c3:
c8:30:72:53:43:b1:b1:67:93:d7:06:8e:c2:5b:42:fd:50:90:
a8:3f:21:55:89:ec:85:21:c9:de:7c:fc:76:4e:a7:8e:e0:36:
30:28:4a:25:06:bb:c9:c4:45:90:5c:46:69:e1:ab:48:de:04:
bb:a8:f8:c4:65:0f:df:3c:28:d1:21:25:d1:29:dd:6d:22:ba:
c4:bd:98:6a:27:17:93:d4:e6:57:dc:fe:10:39:59:c6:f5:6c:
3e:84:03:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:52:48 2025 by rpki-client