Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
File: aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft (raw, json)
Hash identifier: e782ef2TIPJPUuzoZmTftZloWy38lbohphfIvfqajTg=
Subject key identifier: 7F:3D:01:F4:9C:3C:36:C1:CD:30:E7:E9:8E:5B:6A:BB:C5:FA:25:BC
Authority key identifier: 69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
Certificate issuer: /CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Certificate serial: 0196767A798C39412AF52BCA73D96778532A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
Manifest number: 02D2
Signing time: Sun 27 Apr 2025 09:00:59 +0000
Manifest this update: Sun 27 Apr 2025 09:00:59 +0000
Manifest next update: Mon 28 Apr 2025 09:00:59 +0000
Files and hashes: 1: aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl (hash: gaygYLq8DGY3/LNtApoPe9HaF79OJ2r57AfWHwVxGWE=)
2: ddFSz5BHQOYnaU-gHg3YrxEkhJw.roa (hash: adygbfjd+yjXvUTx2yOuoRyVaLmd0xsTX9kZsgRNyYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:79:8c:39:41:2a:f5:2b:ca:73:d9:67:78:53:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Validity
Not Before: Apr 27 09:00:59 2025 GMT
Not After : Apr 28 09:00:59 2025 GMT
Subject: CN=7f3d01f49c3c36c1cd30e7e98e5b6abbc5fa25bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:9a:12:2d:06:9c:6c:05:68:5f:13:4b:19:
27:97:83:30:c1:d8:6d:96:e4:7f:30:bf:91:42:5a:
84:e8:93:8c:79:c8:95:90:39:15:a5:70:a2:f6:ed:
46:d4:50:34:b4:a1:1d:b4:49:f4:46:67:c8:1a:31:
46:49:09:2b:93:c9:1e:52:7a:42:82:34:63:c1:40:
6c:38:a9:21:57:b6:42:39:b2:98:6e:b4:b9:e8:3f:
93:64:53:95:d7:dd:22:1c:56:60:b9:cd:42:b6:9e:
29:ff:6e:f9:a4:40:1b:e8:2a:5a:1e:98:14:0d:e4:
14:07:36:32:8e:80:5f:f5:5e:33:1d:71:37:b0:d1:
3f:97:f8:56:95:de:11:d6:8c:e1:e0:3b:7b:d9:f0:
c3:ea:24:96:9e:a7:40:13:d1:b2:2f:bc:3b:41:5d:
f7:c9:cc:b3:8e:ef:31:cd:fc:7f:bd:ad:bd:e8:55:
b6:e9:12:06:90:32:8a:38:e8:63:7b:e2:4a:de:aa:
f9:2d:74:40:22:07:07:56:72:13:4b:8f:e4:2c:8e:
df:80:d9:8d:7e:c1:37:47:83:96:bf:31:3d:00:fb:
5a:ad:9e:22:e0:99:71:c0:e4:34:93:56:f3:ef:33:
6a:9b:aa:69:29:e6:a1:43:38:9d:f0:82:33:2b:3a:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3D:01:F4:9C:3C:36:C1:CD:30:E7:E9:8E:5B:6A:BB:C5:FA:25:BC
X509v3 Authority Key Identifier:
keyid:69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2e:22:a1:60:a1:2b:5f:d9:bb:2a:af:c0:18:59:c4:c6:54:
49:79:d4:c2:de:a9:a3:27:8e:49:c2:b0:63:46:42:3a:80:6a:
19:a6:ab:bc:0e:50:99:23:f1:91:de:4c:a3:a0:f5:f8:c0:a9:
ed:da:87:b6:75:b8:c3:c7:57:38:11:5c:17:b5:7d:ca:da:b0:
08:c3:c1:65:f0:56:9c:db:41:af:7a:64:ac:3b:a0:97:cf:45:
ad:9c:3d:92:36:b4:7e:66:19:9a:16:ad:35:d0:26:d8:e1:9f:
47:21:60:2a:d7:5d:af:13:a9:71:06:fa:01:cc:2e:6a:12:38:
a9:ed:2e:4d:67:bb:3e:68:6d:de:cc:6b:cb:a0:14:c6:54:78:
86:56:75:25:cd:10:3f:b4:c2:4f:0c:a5:4c:27:4e:99:e9:49:
a4:a8:75:03:50:a9:26:f0:66:b9:da:f8:19:d5:77:ca:60:94:
af:99:cd:ae:94:f7:c9:30:e5:4b:58:01:ed:7e:99:20:0f:c3:
0d:f9:80:fc:84:34:2b:20:fe:3f:42:e0:90:c8:ae:1e:e8:03:
12:6c:48:46:44:3b:8f:1f:fb:44:b8:fc:36:81:fd:33:fd:8f:
bd:03:21:28:b7:2e:29:db:0b:28:c0:6c:c4:56:ad:b9:df:de:
f7:8e:28:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:11:33 2025 by rpki-client