Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: 8MyG9O3rrseVRje4RPr96Rb0O/Pwc+6QKYLjCSRdgmk=
Subject key identifier: 5E:B7:98:A8:16:00:2C:81:BD:D6:C5:90:34:78:B8:6F:EB:98:75:4A
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 019673E70776F7D20A11BB9DB6DE381E4E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0A39
Signing time: Sat 26 Apr 2025 21:00:42 +0000
Manifest this update: Sat 26 Apr 2025 21:00:42 +0000
Manifest next update: Sun 27 Apr 2025 21:00:42 +0000
Files and hashes: 1: 5uljjHiNNOaac26tRfDYMvtnMkY.roa (hash: Q7M6Bp79D6O8dYm6M5ML2nLIMBbVb2sxR0r3nfKEu6U=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: 6nccME3UZIVH8YwDimQpVI1EvKC0TwKVaY3LucU9L4U=)
3: v48Lr2EX71CfbBZZKT-B2CDMZWI.roa (hash: FbcS7Loz8XtWLz+emLVfELqvfvzTkNt/9jQwmw4FZhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e7:07:76:f7:d2:0a:11:bb:9d:b6:de:38:1e:4e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: Apr 26 21:00:42 2025 GMT
Not After : Apr 27 21:00:42 2025 GMT
Subject: CN=5eb798a816002c81bdd6c5903478b86feb98754a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:c5:98:36:93:ba:f6:89:d0:67:ce:50:c5:
c3:60:01:c3:07:65:79:75:9d:a8:51:e9:6e:f6:5e:
cb:44:ea:56:a9:dc:94:b5:63:e7:98:38:4e:d2:fa:
f1:99:8c:93:49:86:99:00:a6:2f:d3:06:4c:22:50:
60:ee:b2:9f:47:98:00:4d:5a:e4:0c:b8:66:ff:1a:
d8:09:65:f2:15:af:45:d3:35:c4:4b:62:72:60:de:
a5:f8:aa:a5:b2:14:80:3f:a3:ff:f6:85:70:a8:5e:
31:cc:21:36:37:4b:36:17:d2:63:0a:1f:0a:11:47:
c8:ad:7a:a1:f0:a1:f7:ea:84:61:02:fa:ff:0b:61:
dc:c0:b6:af:df:be:38:93:d3:91:14:e1:15:26:27:
c1:7c:98:48:ae:66:3c:40:42:cd:50:03:b1:60:e0:
24:67:a4:c7:e1:9f:d1:e3:39:1a:bd:23:61:2d:77:
79:d0:63:8e:d4:78:6a:73:da:c6:e9:9f:2f:db:05:
29:c1:cb:ac:20:ca:16:7b:e8:a8:c2:f6:ed:61:35:
35:56:70:10:69:0f:6f:a5:26:58:0e:1d:a5:3a:c1:
80:ed:99:6f:35:bc:82:41:58:a3:7d:b6:12:fd:07:
5e:b0:09:73:7e:9b:43:a1:86:c4:76:70:a9:e1:b1:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B7:98:A8:16:00:2C:81:BD:D6:C5:90:34:78:B8:6F:EB:98:75:4A
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a0:59:74:29:60:c2:78:bd:90:97:12:1b:aa:64:ca:96:b6:
d7:d1:6a:72:9e:1a:43:ad:4f:94:8d:56:50:58:c7:ea:28:d6:
7a:f9:5b:1b:6c:d6:6e:1c:dc:03:47:cf:8f:01:06:f7:24:bd:
b8:41:18:b5:c9:3f:f0:5e:a2:cd:7f:d3:bd:0f:83:19:ea:1f:
4b:de:19:9c:4a:1d:2e:54:c3:ee:e6:bd:a6:45:fd:23:e0:08:
73:76:21:7b:36:4b:a3:66:8a:42:a0:81:0e:f4:5e:29:de:57:
0c:96:cd:e3:c9:8f:ea:16:64:8d:98:a2:07:7a:ad:a3:9f:eb:
67:d2:d5:44:eb:90:0a:84:36:ce:3b:1f:6c:82:7a:41:73:5a:
33:d3:6f:e8:ec:b8:d1:56:3e:20:f9:bc:e3:0b:91:61:ba:cb:
db:c0:6c:d0:dc:d1:c4:db:49:d6:d3:fe:76:12:dd:e9:3d:2c:
0b:b1:7c:b5:31:25:cf:95:08:07:ab:16:53:37:01:ac:5e:5c:
ea:01:e3:a7:83:5e:1c:6d:1a:68:ba:3e:af:67:90:f7:3f:04:
4a:c7:ce:c0:38:d3:c3:ef:a0:b5:a5:aa:d0:54:ab:bc:ee:9d:
86:1d:f0:7e:9d:0d:2f:af:ba:a4:a8:96:76:27:85:de:48:88:
e1:45:0e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:19:31 2025 by rpki-client