Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier: BWNCxcgLLIjA2yNlOvE2KF1yHdwxTGJ8peQIar2wggQ=
Subject key identifier: 0B:87:1F:25:81:EE:FB:78:9F:A4:1A:2D:C0:91:A4:E4:6A:F6:38:62
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer: /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial: 01967567738F1CFAB35A555205740B95E984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number: 13F0
Signing time: Sun 27 Apr 2025 04:00:36 +0000
Manifest this update: Sun 27 Apr 2025 04:00:36 +0000
Manifest next update: Mon 28 Apr 2025 04:00:36 +0000
Files and hashes: 1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: KrRZScfpJBNG+OzK2nkqBNCsTHY/xkGY0cjGYWKCAGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:73:8f:1c:fa:b3:5a:55:52:05:74:0b:95:e9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Validity
Not Before: Apr 27 04:00:36 2025 GMT
Not After : Apr 28 04:00:36 2025 GMT
Subject: CN=0b871f2581eefb789fa41a2dc091a4e46af63862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:39:0b:18:d9:96:ee:dc:d9:69:97:2a:be:
ed:e6:cb:07:d6:0a:bf:7f:e3:7a:d8:34:77:90:9e:
52:f2:05:ed:0e:c9:ad:14:31:dc:2a:d5:9e:73:a8:
56:41:e2:f8:d4:6d:03:e8:ff:86:12:71:4b:f6:4f:
80:8a:49:2a:73:94:08:1f:a1:78:f0:43:d6:6b:39:
09:94:06:5a:49:62:e1:1b:e0:06:46:08:cc:9a:c8:
87:f3:99:af:e3:67:28:7a:3e:ce:4e:80:b2:be:24:
93:90:50:a9:2e:20:f3:d1:c7:44:5a:a3:ba:a6:bc:
7c:62:5d:14:0a:ca:70:87:0c:62:cf:3e:6a:6f:6d:
16:f7:7e:c7:db:83:5c:54:35:46:5b:81:93:fb:a7:
cf:02:08:5a:c4:fe:8a:58:30:f1:87:b7:a4:e5:a5:
c9:91:27:15:bb:16:fc:46:d0:5b:18:a5:7e:12:92:
69:c6:fa:8a:6c:eb:4a:b9:e0:ed:22:73:98:d0:ce:
01:61:c2:20:0e:72:54:72:b9:e4:0f:b3:6c:c2:1b:
6d:73:c2:7b:0e:19:24:62:92:90:77:3a:e9:86:02:
d7:ea:69:b8:39:70:23:68:0a:b3:41:62:1b:40:82:
d4:f4:af:8f:b3:e4:73:71:0f:b3:0c:8d:02:44:5c:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:87:1F:25:81:EE:FB:78:9F:A4:1A:2D:C0:91:A4:E4:6A:F6:38:62
X509v3 Authority Key Identifier:
keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:19:6d:0c:bf:5d:75:c0:89:ed:8c:fa:9e:47:1e:7c:ee:6c:
10:34:4c:d0:11:3b:77:76:9d:8a:68:18:98:93:35:85:bd:40:
c6:ba:66:9e:c2:cb:d4:9b:80:c6:fc:0b:22:27:42:6e:fb:05:
66:d9:d1:28:dd:8a:49:6f:e1:15:85:2b:a0:1b:d0:8a:6c:a4:
fd:56:65:85:d4:92:6b:9d:f5:41:f5:c0:fe:cb:5a:9c:f2:30:
41:93:e2:c3:0d:43:c9:fd:da:3b:b5:77:c7:3c:fa:69:18:8f:
d5:1a:5b:59:23:f9:68:17:d3:2a:07:5e:b1:3e:3b:f0:b7:7c:
06:d8:47:f1:5b:36:4b:2f:9a:3e:5e:0c:ac:4f:4d:04:07:6f:
6a:05:41:c0:0c:cb:3f:d7:a6:61:b5:15:d1:02:9a:00:e1:a9:
14:0c:d5:4c:11:38:70:53:77:06:e9:d6:56:f9:43:53:da:63:
0e:52:4b:10:63:5f:20:55:1c:93:81:df:8d:b3:fd:9d:f7:ac:
1d:50:d1:b5:56:a2:42:9d:c5:25:0f:51:46:2f:de:ff:13:fa:
e8:ea:e4:05:71:f0:ca:bc:d5:3a:12:8c:ae:76:30:dc:06:38:
43:ce:f8:93:49:83:47:56:a4:49:7b:19:3d:e0:88:ef:f4:64:
dc:c6:60:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:30:49 2025 by rpki-client