Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
File: a0s-anyHg_yKVxn72fN7MsjHxco.mft (raw, json)
Hash identifier: 2/KZ77nOLWu3CHIotXBORAV9fVQTbvlNSejaTnnvMvg=
Subject key identifier: FD:1E:8A:ED:76:E9:D9:BE:7F:14:BE:B5:AD:CA:52:40:1F:55:60:EF
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Certificate issuer: /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial: 019673B05BABA96DBD2192307ED75355F73F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
Manifest number: 0D7C
Signing time: Sat 26 Apr 2025 20:00:59 +0000
Manifest this update: Sat 26 Apr 2025 20:00:59 +0000
Manifest next update: Sun 27 Apr 2025 20:00:59 +0000
Files and hashes: 1: NFuZfl53-8KYTLVCa1Hv_etfQ9k.roa (hash: mKJy52sXoia7oCRphyiyMklvY+QAOAh6np8WR+mJ8DQ=)
2: a0s-anyHg_yKVxn72fN7MsjHxco.crl (hash: PRCX5uVzDDEuuX4KyhHIUlcc8iI4S9RDdB1HGGh/4Bw=)
3: pOxKs9dWhUdQCvSLYTnAr4vpa7U.roa (hash: /5GRlXnM3rNmijk0WyBlasj7lnCycK3nTmymAKQJFjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:5b:ab:a9:6d:bd:21:92:30:7e:d7:53:55:f7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Validity
Not Before: Apr 26 20:00:59 2025 GMT
Not After : Apr 27 20:00:59 2025 GMT
Subject: CN=fd1e8aed76e9d9be7f14beb5adca52401f5560ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b2:da:25:e2:2f:68:4f:02:23:7f:84:8b:a6:
ac:18:1d:6b:41:4b:68:da:34:b1:2e:7b:67:c6:4d:
07:c4:d2:61:cd:0f:52:9f:55:c3:f8:ee:90:57:4f:
77:b8:64:84:dc:69:6e:42:fa:d0:61:8a:25:ab:29:
6c:38:e0:39:e3:2a:d5:44:9f:c0:76:3d:8f:e8:96:
f4:54:6a:84:da:5b:14:f5:c0:6a:c2:0f:6d:b9:02:
da:16:91:b1:49:b0:6a:b5:12:48:d4:e3:b8:05:6e:
12:c2:9f:26:14:0d:c5:ac:16:7e:c5:69:7a:eb:97:
1c:09:7a:8c:59:12:f3:fd:49:59:28:cc:1c:33:6b:
ec:c3:ac:66:35:ee:7d:2a:19:d7:5f:02:74:b1:c3:
ec:53:dd:82:ce:09:91:a7:f9:0f:2d:40:3e:41:52:
a0:33:df:73:10:2a:82:47:a7:17:e8:a4:0e:dd:24:
64:96:64:15:8d:f0:a7:6c:18:8c:ba:0e:68:17:39:
55:8d:33:ea:29:e2:41:20:fd:35:c0:f6:85:4d:1f:
0b:4f:1b:63:1e:cb:6c:42:94:7f:39:22:27:2d:ec:
cb:71:ed:e7:63:72:58:51:c7:a7:5b:df:ee:96:1f:
0d:c9:1e:60:5f:73:05:dd:d4:73:65:fe:a2:bb:2b:
d0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1E:8A:ED:76:E9:D9:BE:7F:14:BE:B5:AD:CA:52:40:1F:55:60:EF
X509v3 Authority Key Identifier:
keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:13:b6:d4:2e:2c:02:d4:78:2c:a6:be:6a:19:d4:58:6e:8a:
65:7a:03:ec:18:d9:e1:c5:b8:08:d3:21:09:80:ee:b1:e5:db:
b7:75:02:0b:82:bd:6b:18:84:4e:ee:0a:34:89:11:df:94:c4:
a8:70:a2:ac:3d:a3:b2:95:29:19:b1:df:04:fd:30:35:24:8c:
64:22:bd:8e:cb:ac:ac:9c:97:95:60:52:fd:a1:d8:5c:75:41:
6d:34:9d:6b:14:1b:d8:b9:76:8d:b4:bd:9f:e1:7e:1e:01:16:
6b:7e:e2:3c:c7:d0:b5:0b:5d:fd:78:b3:a2:a6:05:5b:b4:6f:
da:f5:e1:71:17:f7:2a:a9:0a:5d:8b:4e:07:61:74:aa:3b:a1:
ef:93:80:e7:cf:ee:98:09:7e:4b:8c:63:53:da:29:1c:46:63:
34:a8:bc:fa:b0:2f:df:bd:26:e9:cf:12:d6:80:52:2b:41:b3:
ce:ab:70:84:8b:1f:5e:13:fb:cb:f3:ea:8d:b4:43:82:0d:ee:
59:ac:bf:9a:05:e0:d9:59:0e:8e:e7:44:68:7d:bf:97:0d:86:
4b:ca:53:11:40:1a:be:71:83:26:da:2b:18:a5:92:cb:73:a3:
bb:d5:02:2b:2c:48:8f:fc:00:71:91:5e:7d:49:ca:72:e2:bf:
73:07:da:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:47:55 2025 by rpki-client