Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
File: A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json)
Hash identifier: xfr0KcrYEbXg9AFMozur7qz1dAveWuXIHp0rVGXW5iI=
Subject key identifier: 3C:0F:73:86:2D:29:15:02:99:42:CB:8B:15:9E:40:DB:21:72:88:4B
Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Certificate issuer: /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Certificate serial: 01967AC4ECDB6798BA7932208CEB61A2368D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
Manifest number: 011F
Signing time: Mon 28 Apr 2025 05:00:48 +0000
Manifest this update: Mon 28 Apr 2025 05:00:48 +0000
Manifest next update: Tue 29 Apr 2025 05:00:48 +0000
Files and hashes: 1: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: CvMQAsJizVqW2HNHoLfZ4wJAdy2+KFCJJwIuj2wOSpY=)
2: jMIN8b0BVc9eEY8W0xUyZYn9gu0.roa (hash: T+38e+ztuuV+6KtpVMPU6c7/hBQtyKbXl9bJ797XzNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:ec:db:67:98:ba:79:32:20:8c:eb:61:a2:36:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Validity
Not Before: Apr 28 05:00:48 2025 GMT
Not After : Apr 29 05:00:48 2025 GMT
Subject: CN=3c0f73862d2915029942cb8b159e40db2172884b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:52:f7:fd:ed:46:4f:42:4f:01:60:29:fc:
45:b7:82:72:1a:5e:fa:df:ad:2e:18:09:87:06:6f:
b3:4e:f0:50:e8:4f:ea:5b:6a:ac:bf:79:04:a5:6a:
02:c8:a0:8f:29:ff:41:45:e7:9a:21:57:6a:19:69:
ae:f6:3f:d9:fc:fc:89:c2:e1:87:b7:e0:ea:d0:5e:
f4:fa:b9:3d:f3:3c:55:f3:01:03:c4:02:ba:1d:49:
ca:a4:36:90:e0:62:7e:e4:13:ed:8b:16:52:70:49:
17:7e:6e:f5:95:3a:c7:0f:dd:43:5a:40:29:57:09:
df:aa:84:9f:be:0d:ca:88:e0:f2:79:b0:85:28:02:
88:50:49:92:a8:c8:c9:f2:48:6b:84:07:e7:89:51:
b1:3a:87:13:33:c3:f0:e2:37:b3:55:b7:bb:98:1a:
58:4f:d0:09:c7:17:7a:c5:dc:ec:0c:7b:1e:94:a4:
2b:12:ac:e2:df:a5:3e:9b:f6:1c:a7:32:ea:10:3a:
3b:43:81:75:49:b6:33:c4:97:64:ad:98:6e:88:5c:
c5:ee:33:5a:ee:8f:10:b1:4d:15:9c:95:c1:17:7c:
28:45:6a:56:d8:b0:27:4f:04:22:a8:57:40:6d:69:
53:ba:7e:c8:5e:ff:6a:a3:30:73:fe:c2:98:29:a2:
1d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0F:73:86:2D:29:15:02:99:42:CB:8B:15:9E:40:DB:21:72:88:4B
X509v3 Authority Key Identifier:
keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4e:63:21:a6:33:bd:f5:68:02:60:3c:92:d5:a7:94:15:e0:
ea:78:34:bc:01:23:94:69:cd:cb:cb:80:d8:88:14:08:62:49:
b7:12:69:7b:e7:14:b5:9b:fe:b9:ca:9a:e5:3c:82:a3:0b:ca:
b1:9e:7e:06:fe:cf:00:09:fc:ea:c5:03:9d:ab:ed:8b:9e:6f:
28:4e:af:8f:e9:2d:85:24:3a:0a:22:44:49:50:d8:ae:02:f1:
2a:8b:6f:ec:b2:5a:ce:56:73:8c:2c:61:56:17:de:3c:3d:65:
59:65:26:aa:49:d7:74:6e:32:f4:71:52:dd:f5:e0:53:3b:43:
af:a2:eb:b3:ae:16:e7:4e:28:56:20:55:0b:f5:8e:db:36:d9:
22:14:d0:73:ac:6e:76:23:96:bb:83:66:2a:78:a0:8c:b8:cf:
c5:f5:77:89:21:b2:34:c3:54:33:99:78:4b:93:e3:44:bc:ab:
aa:78:8d:9f:1c:7d:ef:7e:81:52:44:71:b1:ca:03:0e:a9:e4:
55:46:07:0c:dc:89:76:42:c2:de:9c:1c:5e:f5:ec:b6:db:2b:
cd:4b:5d:19:14:e7:45:5b:6a:4e:8e:92:22:fa:d0:93:db:c7:
b4:f0:5a:aa:a7:42:9d:c0:46:63:bc:cc:75:03:cd:9a:80:fc:
25:f9:38:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:17:35 2025 by rpki-client