Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
File: r7ALKTlueAM-26yv75hQsbDjUyM.mft (raw, json)
Hash identifier: wX39PdPEMuGjThjwPfQ5aEonHPMcXGx49u2UesjP3Lw=
Subject key identifier: C6:B1:15:04:3E:B7:DF:20:F7:D0:68:2A:33:B1:A9:38:3F:FB:5D:48
Authority key identifier: AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23
Certificate issuer: /CN=afb00b29396e78033edbacafef9850b1b0e35323
Certificate serial: 0196C6F181CE3791EC0884213342950231E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
Manifest number: 0DE6
Signing time: Tue 13 May 2025 00:00:38 +0000
Manifest this update: Tue 13 May 2025 00:00:38 +0000
Manifest next update: Wed 14 May 2025 00:00:38 +0000
Files and hashes: 1: CY3YIBeeXy7d304leRk_84B6aOw.roa (hash: a5cqctkZKmbgtiXrSitwhHqbpFExqVK4hQecaTEUPK8=)
2: r7ALKTlueAM-26yv75hQsbDjUyM.crl (hash: VKRh8AEOp3u704jrBEn5UNCwqNYpHKOVmmf6fiXdGqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:f1:81:ce:37:91:ec:08:84:21:33:42:95:02:31:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb00b29396e78033edbacafef9850b1b0e35323
Validity
Not Before: May 13 00:00:38 2025 GMT
Not After : May 14 00:00:38 2025 GMT
Subject: CN=c6b115043eb7df20f7d0682a33b1a9383ffb5d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:24:17:dd:9d:a7:bb:b4:76:cb:bd:ac:81:
4a:0a:ab:5d:30:4a:cf:27:30:86:d2:44:a3:06:ad:
b8:21:60:0b:7c:17:1a:63:ee:37:a9:4c:e8:4a:98:
5e:c3:a0:9c:4f:a4:57:53:1f:73:43:5d:9c:ce:41:
bc:dc:83:e5:b4:dd:17:4d:65:df:ca:56:70:2a:7e:
b8:7d:5a:25:5b:a0:25:4f:6d:e7:3f:f3:cd:18:14:
40:3e:f0:67:e6:71:fe:2d:b0:9b:1a:30:24:24:fe:
b4:19:90:c0:54:e1:3f:66:f7:48:e2:7a:08:f2:bc:
7b:d0:d4:53:67:1b:8b:b5:c2:da:8e:b5:db:e7:b6:
5f:fd:b7:e1:ef:0a:e6:ea:6f:40:68:b4:a7:f6:0b:
11:5e:a7:67:88:49:1a:c9:e7:97:2c:27:35:77:98:
74:7c:ab:b8:23:31:22:27:63:a3:6d:ff:0b:de:1d:
50:1e:cc:4b:22:00:0f:5d:4e:05:99:f5:24:e8:97:
df:19:6f:bc:f0:4e:0c:e0:97:47:57:73:c1:53:ac:
11:da:3f:d9:b9:a1:9d:b3:b1:9f:75:10:06:02:1f:
8c:2e:d1:96:db:13:1b:1a:e3:bb:6c:f7:0a:a3:1d:
32:d2:3a:74:9c:a5:a0:e2:0e:31:71:12:21:9d:6b:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B1:15:04:3E:B7:DF:20:F7:D0:68:2A:33:B1:A9:38:3F:FB:5D:48
X509v3 Authority Key Identifier:
keyid:AF:B0:0B:29:39:6E:78:03:3E:DB:AC:AF:EF:98:50:B1:B0:E3:53:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7ALKTlueAM-26yv75hQsbDjUyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e4ca56-1386-432c-96cb-65a9a4dfad9e/1/r7ALKTlueAM-26yv75hQsbDjUyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:48:11:d1:ae:46:6e:ca:1a:54:7d:bc:fc:65:a9:df:7b:04:
2c:34:1c:be:36:ec:d1:c2:d4:7d:55:df:f1:a4:20:63:93:df:
20:47:84:a4:f9:b9:9b:36:7a:11:4d:30:cb:55:62:f7:90:19:
83:53:47:3d:ac:60:48:ad:15:02:30:32:bd:00:7c:66:d8:46:
0e:1b:e6:2c:ab:c9:74:74:96:16:ad:59:4a:f5:88:15:0c:69:
32:b0:a7:9b:19:17:0c:d2:f5:5a:5c:4c:8a:93:bc:eb:20:2e:
fb:ec:44:2c:e4:df:66:67:58:da:d9:47:61:e5:32:ca:08:a4:
e2:ca:69:ca:0d:01:8c:8e:21:c2:f2:1c:03:ce:58:cc:d5:a2:
61:47:df:6c:e5:9c:de:a6:a0:f7:f1:c6:ff:cc:48:90:19:66:
be:cc:41:8f:ad:bc:fc:5b:21:ad:21:48:33:dc:17:2d:5d:23:
54:24:6e:5f:48:55:0f:af:5c:38:9d:32:16:59:ae:8b:f0:24:
0f:4d:7b:f2:15:b3:9d:27:a0:96:0d:cb:11:e5:1a:42:73:6a:
72:d2:a0:05:70:05:d8:d7:1e:2a:d9:0a:70:57:a0:3b:6e:bd:
c6:c3:c4:ab:60:6e:47:b6:c5:4f:21:1c:ce:0e:b3:c7:db:14:
2b:4f:e3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:29:39 2025 by rpki-client