Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File: AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier: b1JuDE039ijIMWr76i89criv+TFJXvCplcDQdCSPyDg=
Subject key identifier: 54:3E:B0:3F:B6:01:8A:1E:33:D7:B8:5B:5E:AE:90:9A:75:AC:56:18
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer: /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial: 019684A35DE6BF7B2C201AEE5F4938CC9295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number: 0BB7
Signing time: Wed 30 Apr 2025 03:00:20 +0000
Manifest this update: Wed 30 Apr 2025 03:00:20 +0000
Manifest next update: Thu 01 May 2025 03:00:20 +0000
Files and hashes: 1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: BAWhPzRWPB3+lKw8+4do/v5yn+efKNXGi20dmBhOsaU=)
2: ttoTW1mb5ILG0PA-_tc15H39Bu4.roa (hash: NuP48I/0CSAZd0tA3+gwMRRMyGbGny18PxWX5GZCZw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:5d:e6:bf:7b:2c:20:1a:ee:5f:49:38:cc:92:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Validity
Not Before: Apr 30 03:00:20 2025 GMT
Not After : May 1 03:00:20 2025 GMT
Subject: CN=543eb03fb6018a1e33d7b85b5eae909a75ac5618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5e:02:a7:89:db:62:c3:e7:6d:2f:44:63:73:
28:b6:64:3a:5f:e4:7a:ed:42:d5:d2:85:6f:e6:d6:
0f:23:09:36:9e:59:77:0e:b1:68:35:d4:79:cf:5b:
65:af:d8:55:fb:21:35:3f:95:eb:80:68:a9:5c:c4:
a8:4d:33:f6:86:d3:b5:22:73:79:22:38:20:a4:bc:
b1:6e:35:df:8e:9d:aa:08:fd:83:e9:8f:85:1e:91:
cb:53:f9:2f:78:6b:4a:fc:bf:26:f7:19:d4:60:44:
55:dd:65:b3:c0:64:9b:29:a6:c1:11:4f:bf:c2:af:
54:c0:a4:b6:10:0e:91:dc:13:0c:ea:3a:fb:c6:50:
a3:a6:2e:19:a8:84:a4:e4:77:cb:a2:4a:7e:94:a1:
02:50:f4:5e:97:2f:52:ed:2a:a9:fa:fa:dd:47:6d:
ec:06:40:c2:34:40:7f:ab:6d:3e:73:34:5c:6a:9a:
86:e6:89:7d:e4:e6:5d:68:51:56:7d:ab:a6:59:0c:
8c:18:df:51:20:2a:89:27:3d:4d:bc:3c:02:c9:b8:
53:fc:81:15:9c:00:fb:5a:ab:30:e7:4b:13:60:a2:
44:11:7d:87:67:cf:b8:2b:b4:ae:28:54:01:8d:9f:
d4:ba:ce:47:9c:56:20:a4:b8:49:b2:16:8e:f2:e1:
1f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3E:B0:3F:B6:01:8A:1E:33:D7:B8:5B:5E:AE:90:9A:75:AC:56:18
X509v3 Authority Key Identifier:
keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:83:32:e8:fa:91:b8:ea:de:13:3b:e8:c6:b3:f0:6d:e9:c9:
7f:90:38:dc:88:77:f9:77:56:72:44:c8:16:61:47:ae:3b:c0:
62:49:d6:56:5f:b7:cd:f6:19:20:af:31:e4:b4:5d:17:62:9b:
9c:0f:27:bf:b7:68:25:50:aa:42:2a:2e:98:80:c3:73:91:78:
b3:33:ca:bf:18:1c:96:1c:7d:3a:e2:b8:87:e3:65:ed:87:f0:
ee:6d:03:ca:8c:82:70:e3:fa:97:1a:4d:ea:db:43:48:3d:07:
8a:1d:b6:a9:de:f2:b4:ce:ea:81:71:fc:0e:32:ac:76:b8:c2:
b1:ba:30:64:38:ab:75:f1:a8:d5:9a:39:8a:5a:be:09:37:63:
59:10:53:2f:2d:0d:6e:03:af:6f:2f:57:10:ed:21:18:a5:97:
18:2a:eb:ef:13:9d:ac:91:a2:21:9b:21:cb:82:22:ca:b8:8f:
77:c2:2a:5b:ca:93:94:66:45:fa:9d:ad:4a:d9:0d:87:88:65:
81:4e:db:dd:77:13:e1:db:0a:96:0c:24:82:64:80:d6:be:8b:
4c:43:d8:b3:9c:75:ec:c4:e3:2d:81:3c:01:be:96:c5:c6:6c:
d0:0f:0f:28:c2:c2:19:c6:73:00:8f:2c:e8:32:1c:a0:7e:9e:
13:b8:2f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:25:32 2025 by rpki-client