Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
File: aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft (raw, json)
Hash identifier: gqFlnu/92x/3vb6jyo7I8zkEKQZyt6Ea4BAh3KzC0ds=
Subject key identifier: A3:67:F1:CA:B5:01:06:A2:01:39:BC:DC:CB:04:98:50:C6:B0:9B:8D
Authority key identifier: 68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
Certificate issuer: /CN=68b0ba75fce55721c30637589be3d34fa259c2b5
Certificate serial: 01968359C1555D67C64FBCD8AE497155CA12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
Manifest number: 03FF
Signing time: Tue 29 Apr 2025 21:00:19 +0000
Manifest this update: Tue 29 Apr 2025 21:00:19 +0000
Manifest next update: Wed 30 Apr 2025 21:00:19 +0000
Files and hashes: 1: A2QEf71RdaTv7-Rw5IFhLuGQC4U.roa (hash: Z1OLFVFoQ+NSvR47C8hJwPMxNvIVBkBVq/jOlyMfUUc=)
2: aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl (hash: nzCeo3zy3Q0/rtjmYeJ+4OaqeY3h0EUuHqOwbE1Yz7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:c1:55:5d:67:c6:4f:bc:d8:ae:49:71:55:ca:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b0ba75fce55721c30637589be3d34fa259c2b5
Validity
Not Before: Apr 29 21:00:19 2025 GMT
Not After : Apr 30 21:00:19 2025 GMT
Subject: CN=a367f1cab50106a20139bcdccb049850c6b09b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:32:39:d3:c3:fb:97:f5:5f:cc:18:96:39:
fc:90:20:1f:03:a7:fd:ab:48:b3:59:c9:54:d9:a7:
08:63:7c:72:26:ca:4c:e8:ad:b6:96:fa:ee:59:f5:
be:22:1f:ee:85:8a:a9:5f:a0:02:5f:15:a9:5e:af:
73:f1:e9:8a:0f:99:fc:a7:28:e0:7c:28:10:b4:07:
67:7d:6a:fe:fc:60:5a:80:7d:29:0b:91:cc:d7:26:
87:df:6a:08:9f:56:87:c2:61:8a:6a:65:70:46:5c:
a2:7b:d8:1b:26:2d:5e:c2:a3:29:46:51:80:d5:4c:
7a:83:30:99:a1:8e:00:e2:d7:7c:2e:17:ed:e6:59:
f5:84:62:a4:79:62:bd:eb:3b:ff:18:06:ce:1e:3f:
7f:73:7e:20:b1:a5:77:fc:95:b2:28:36:8a:e7:22:
94:48:d3:9e:fe:3f:b2:61:b4:6f:5b:84:7a:9d:7e:
bf:3b:04:b3:a1:19:fc:63:0f:f9:1e:6d:ee:fb:7b:
67:ad:aa:5f:0e:fc:95:8e:59:1a:bf:45:12:93:52:
48:94:03:75:cb:e8:dc:0c:47:b2:8b:c2:dd:f1:e2:
c3:4c:df:87:3b:1f:2c:a0:16:2d:9c:3c:af:aa:bd:
70:bf:61:41:5f:d3:da:25:1b:db:52:d8:f8:37:75:
66:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:67:F1:CA:B5:01:06:A2:01:39:BC:DC:CB:04:98:50:C6:B0:9B:8D
X509v3 Authority Key Identifier:
keyid:68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:39:63:8b:fa:63:ff:3c:1a:9d:ca:ea:eb:ff:e7:ad:8c:5c:
f2:23:41:92:9b:b4:0a:2b:8f:7f:71:6c:df:8a:a2:36:52:33:
fd:21:54:19:40:14:45:18:c5:9f:29:0a:a4:cf:0a:fc:72:6f:
5a:cb:6a:79:ca:6d:18:f9:0c:d5:1e:ef:b8:10:5a:78:37:95:
ec:f3:1c:aa:b4:1b:0f:40:e3:72:73:13:2b:7e:12:13:af:f0:
d1:88:21:f8:f1:15:c4:98:f9:5e:e1:b2:40:13:7c:7b:ed:7c:
79:b9:79:2c:82:12:54:9d:ef:42:ad:4a:c8:26:8f:33:86:91:
c5:8a:4a:14:38:6c:ae:6b:26:2a:2f:4c:67:8c:9b:8e:30:18:
ac:43:a3:27:44:09:44:55:b1:2d:e5:ed:53:5e:7d:c8:65:28:
8d:41:68:94:81:c9:4d:a1:a1:03:b2:3b:a8:a5:e6:ec:57:9d:
5a:aa:d5:21:7e:78:01:8a:dc:0c:5a:0a:00:0c:a0:ec:e7:36:
fd:1e:83:22:61:04:2d:bb:f0:20:9f:dc:17:68:e9:98:2d:a9:
23:93:28:91:9d:eb:3e:8d:6e:76:f7:c1:98:67:0e:b8:28:ac:
c5:a9:7c:1d:0b:67:49:f5:56:28:84:b9:37:88:76:ed:43:ab:
e0:75:43:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:49:01 2025 by rpki-client