Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: 7lbsUlZ6tr0M3SYwL4C7hoAJBkWVIkZG/2ltkKwZDAI=
Subject key identifier: 1A:79:14:CD:F4:B5:8A:63:AD:E3:F8:0F:31:ED:0F:2E:27:DF:FC:B8
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 0196857F5E200DF15522B68C6CE3BBF06408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 14A8
Signing time: Wed 30 Apr 2025 07:00:38 +0000
Manifest this update: Wed 30 Apr 2025 07:00:38 +0000
Manifest next update: Thu 01 May 2025 07:00:38 +0000
Files and hashes: 1: DWowDQGQ5yNgx6ayhodRq1LUBHY.roa (hash: NLpjx7jhodNZVl2qQ5spSLVWb6VaFpApzVnCjvFyH/A=)
2: _4Ze51PkjeQX75n6sYes67AAloo.roa (hash: TazMQ9hYRcPMHpN2jE1CGgfAASu92VcJx8NusDceESI=)
3: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: irOzMjsN1B4k2RcSnnxUoYDpU+df5zCgvynVdkYzD8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:5e:20:0d:f1:55:22:b6:8c:6c:e3:bb:f0:64:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Apr 30 07:00:38 2025 GMT
Not After : May 1 07:00:38 2025 GMT
Subject: CN=1a7914cdf4b58a63ade3f80f31ed0f2e27dffcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:77:39:2c:f7:6d:82:87:8d:43:d8:dc:61:9c:
35:6e:b0:50:8d:1c:07:99:a4:4d:35:20:94:1f:23:
42:80:99:6e:b4:3d:d7:73:97:d7:28:b3:76:d3:80:
99:fe:4e:8f:e5:bc:a2:af:7d:dd:7e:7a:fb:a7:39:
ac:b5:37:7c:68:f5:ee:53:c1:c8:c1:75:52:a2:cc:
e8:e4:e5:68:2c:54:6c:4b:67:2b:7e:07:2f:42:d8:
54:19:0a:dd:38:31:53:55:87:39:9c:31:31:92:7d:
d8:89:8c:e7:f7:96:d3:b3:d4:64:7e:a2:03:51:d5:
12:38:fe:31:c9:84:dc:2f:62:f3:2e:66:df:21:14:
d2:81:a4:50:cd:c7:cc:4b:71:32:88:28:bb:cf:89:
a0:9e:ca:73:df:dc:1e:bb:f9:1f:12:8a:ae:e0:32:
9e:2b:57:5d:8b:19:6a:69:43:3c:1a:43:6f:38:99:
b3:14:63:5a:fd:e7:b0:fe:08:08:4d:09:67:a0:34:
1a:66:86:f8:1b:1a:77:89:51:60:0d:1b:62:25:b0:
34:4f:ee:03:ca:ac:6a:96:b4:bc:50:3e:dd:fb:bc:
b0:a8:c7:57:a1:e0:64:bd:82:1d:1a:ea:64:b2:ea:
5e:bc:7b:07:f0:7c:79:53:f1:c7:84:b1:9b:53:a3:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:79:14:CD:F4:B5:8A:63:AD:E3:F8:0F:31:ED:0F:2E:27:DF:FC:B8
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3b:91:6e:09:0c:95:30:d7:37:63:49:4d:20:91:e1:3d:a9:
bf:75:b4:1b:17:e9:57:2a:cd:f5:d6:96:63:31:8a:07:20:52:
0d:b7:7b:36:09:8d:6c:87:46:b5:58:f7:98:9b:dc:62:c9:02:
fa:a3:e6:56:11:96:c2:ed:ce:7d:7e:59:61:e0:e1:b4:28:2f:
98:34:26:d9:65:1b:08:54:25:5c:da:74:4a:be:0e:4b:0f:9b:
85:87:bb:cf:22:85:88:e0:42:a1:24:00:c0:60:b5:ab:7f:fe:
96:af:8f:47:70:41:07:5b:38:5a:b3:7f:3c:f4:76:86:b9:ef:
09:15:e9:e4:fe:e9:59:1d:09:8d:1d:97:39:d8:0b:c4:df:db:
1b:22:ff:59:55:5f:88:b6:30:01:9e:78:4c:89:63:b9:e3:22:
23:2f:b6:9f:19:94:d4:71:5c:0d:cf:f2:bd:00:38:b6:04:dc:
c6:c5:17:0d:83:bd:84:b9:42:bf:c8:b0:18:12:c2:3d:e4:b6:
e1:35:23:05:ac:99:aa:54:8d:b4:be:82:de:4c:3c:ba:18:51:
f5:65:c2:b2:d7:cd:8c:a5:ec:5d:01:25:4f:b1:12:c1:d1:2f:
36:c1:06:1c:06:ec:ad:1a:d6:89:2d:59:f6:82:86:cc:eb:b4:
49:1e:21:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:39:59 2025 by rpki-client