Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
File: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft (raw, json)
Hash identifier: duO0dF4oi4uWjXCnACqn8SF0NJjuExHF0aHTiO8lDaQ=
Subject key identifier: 66:AF:7D:4E:8E:37:15:7B:6E:7D:2A:22:02:98:15:7A:C0:20:DA:CB
Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
Certificate issuer: /CN=02c4df5b74d99f9796718435c3afd2220cb56751
Certificate serial: 019686C8FF828C0DBD5F2E371B6A62D59928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
Manifest number: 0293
Signing time: Wed 30 Apr 2025 13:00:41 +0000
Manifest this update: Wed 30 Apr 2025 13:00:41 +0000
Manifest next update: Thu 01 May 2025 13:00:41 +0000
Files and hashes: 1: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl (hash: eT6V+VGKyKXf9lZbsRISq61D2ekEgMKz8UUi60rxwt0=)
2: GakqseBs9N17ifC6fb7xtN9jmGk.roa (hash: JKMq9liNBrNVPApT7HHCvfwbA7KUxUp/4G8fH+nrAPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:ff:82:8c:0d:bd:5f:2e:37:1b:6a:62:d5:99:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751
Validity
Not Before: Apr 30 13:00:41 2025 GMT
Not After : May 1 13:00:41 2025 GMT
Subject: CN=66af7d4e8e37157b6e7d2a220298157ac020dacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:bd:fa:36:2e:c2:4c:f7:1b:3a:4f:65:63:
d5:42:4c:1b:df:67:b2:99:82:72:ca:1d:64:cc:b3:
68:52:b5:8e:22:59:90:93:b7:1a:8a:0f:a1:1a:ca:
20:89:c5:e8:74:4f:f9:63:0a:ae:17:17:a7:0e:57:
88:78:20:0c:d6:29:5d:82:81:34:b3:90:5f:f1:1c:
57:56:a2:ad:d5:56:6f:3e:0e:d6:55:25:38:90:6f:
79:16:83:63:b3:9e:e2:f3:d0:a5:bc:fc:9e:19:db:
a1:7b:fc:c7:3c:45:a5:11:6c:4d:e0:e2:2f:1e:4a:
64:7b:e5:8a:1a:ab:67:7a:8d:ab:d3:8d:77:16:88:
99:e2:d9:74:40:3d:94:e5:18:c3:ea:62:a0:c9:27:
07:37:38:ac:84:08:9a:bd:97:28:df:4d:27:f8:38:
e4:c3:c8:41:03:2d:50:e6:47:5f:9d:56:ee:9e:c2:
41:07:7a:78:12:88:c3:b7:cd:4d:f1:76:0a:27:a2:
ef:80:06:ab:25:ec:c0:e3:45:2a:6d:dc:d7:d3:94:
09:4d:5b:74:d8:d0:51:fd:b5:c4:52:29:0f:85:59:
37:ff:21:21:c9:42:0e:33:dd:e1:eb:60:3f:3c:96:
71:3e:17:db:f0:98:53:93:0d:03:d5:8c:59:7e:5e:
5c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AF:7D:4E:8E:37:15:7B:6E:7D:2A:22:02:98:15:7A:C0:20:DA:CB
X509v3 Authority Key Identifier:
keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a6:c4:56:8f:58:19:2a:91:4a:6a:ee:70:af:03:e0:36:ef:
cf:da:36:01:da:cd:00:ab:f6:5f:3e:ea:3d:ca:14:bb:14:84:
3d:32:48:82:d0:8b:e1:6e:fc:ee:ff:23:3f:50:9c:19:16:01:
fc:f1:9d:04:2d:6e:02:43:f3:9f:6f:55:5d:f3:07:a7:96:55:
1e:f3:d6:75:6e:f4:ca:8c:d6:ae:71:57:60:04:fd:dc:42:03:
70:4b:ef:a1:bb:53:0c:bf:c2:e0:0f:aa:07:a2:43:8d:22:d6:
46:cf:13:84:f5:e9:e9:e7:27:a9:61:6c:e4:18:9a:73:b9:bf:
0c:4a:16:ff:25:06:3a:88:8a:5a:85:cb:89:54:ab:f9:65:92:
88:af:53:97:b8:13:23:0c:6e:a4:92:b1:6f:47:ce:d7:5b:8d:
60:67:2f:02:1d:5c:2f:56:aa:15:94:ff:30:2f:3c:fb:ea:10:
52:6c:94:4a:99:b9:c7:7d:25:84:83:06:6d:0a:fb:f5:9c:36:
94:61:db:a4:f9:f1:af:e3:51:cd:f9:26:44:5f:d8:11:93:e7:
f9:38:2d:d7:34:55:20:0e:91:85:85:36:86:36:d6:89:9b:0a:
ef:14:aa:5e:56:7d:f7:30:6a:1a:3c:5a:e4:48:9c:2f:3a:fb:
3d:86:b7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:59:58 2025 by rpki-client