Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
File: ahfeGIf8-pJEuTHZbagmeMAUdmM.mft (raw, json)
Hash identifier: Eaj6ArjM+r0XlUOCEYcchUeu1pzn+qBepWdq2W4M5kA=
Subject key identifier: D3:3B:D1:48:90:35:2F:35:BC:EE:F4:8E:40:BF:A0:26:8A:DD:13:F0
Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
Certificate issuer: /CN=6a17de1887fcfa9244b931d96da82678c0147663
Certificate serial: 019677FBC09B193317F9BF5B382A8CB8BB5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 16:01:49 +0000
Manifest this update: Sun 27 Apr 2025 16:01:49 +0000
Manifest next update: Mon 28 Apr 2025 16:01:49 +0000
Files and hashes: 1: BX5R5amdcio3WuT_y5iUpVj2ums.roa (hash: pwGrkwLGbzotd2slolQ5A3oax/Mg/fo6nb/3FvvTnt0=)
2: KfO5I4Cw1MaFsOF7zxOfQ4tIIJA.roa (hash: 4CuGd2v/2n5Lf/n++Esai12zLsblsU9sM0Lw5FSyTzA=)
3: SaXO2k_RD79NU2l7XYSpiLJj45Y.roa (hash: dDxX4ZRGdILDnfmTeHjmX1mfXPW3FoR3IByWvO/xwLc=)
4: ahfeGIf8-pJEuTHZbagmeMAUdmM.crl (hash: 7X+D+yJ26Y+Ey36Nw73CgckbjjQgjp7J12PM2WHX9w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:c0:9b:19:33:17:f9:bf:5b:38:2a:8c:b8:bb:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663
Validity
Not Before: Apr 27 16:01:49 2025 GMT
Not After : Apr 28 16:01:49 2025 GMT
Subject: CN=d33bd14890352f35bceef48e40bfa0268add13f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:48:47:4f:d2:7c:75:54:5b:c8:6f:e4:ca:
47:18:1a:b9:9d:09:e6:89:22:97:d2:bf:ae:10:3c:
f7:82:56:e4:d0:1e:73:e4:a1:0c:e7:83:4b:78:95:
c2:13:e2:9b:a0:c7:aa:be:32:e0:21:6f:19:d4:e5:
7d:bb:85:08:56:29:d7:d6:04:de:ce:30:42:34:79:
de:76:38:91:a0:a5:e7:27:f0:25:ba:6c:3c:02:89:
1c:03:e9:26:f7:2c:eb:84:e7:a2:ea:0e:56:5e:44:
fe:15:f0:0a:26:ce:af:94:6b:00:09:42:21:01:c4:
6b:93:67:b0:92:8c:e8:0f:1f:74:f3:a1:39:e1:59:
6c:d4:96:1c:e3:c2:5a:39:34:55:01:79:e3:9c:d7:
f9:19:4c:f1:07:a8:ef:c6:12:d7:de:41:3b:fc:6b:
0c:8f:85:65:0d:e7:ed:5c:a3:f5:98:1f:00:2f:9f:
73:3b:f4:0c:bd:26:0c:1a:d7:f2:85:7f:34:f3:58:
01:6a:8c:e7:c8:47:09:22:84:38:c5:b4:bc:02:9e:
92:1e:c6:fd:19:ec:c7:ee:a3:40:d7:bd:67:10:06:
0f:c8:34:fe:1a:60:ca:70:87:66:c0:e1:64:d4:d7:
1a:b3:d0:92:27:64:bf:bd:39:f7:57:00:7a:8f:6e:
bb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3B:D1:48:90:35:2F:35:BC:EE:F4:8E:40:BF:A0:26:8A:DD:13:F0
X509v3 Authority Key Identifier:
keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6e:6b:cf:b2:fe:db:c2:46:21:9d:2e:09:ba:8d:99:5e:3a:
eb:87:f4:52:c2:7a:9d:81:3c:8a:33:ee:f9:b2:f6:f0:f6:fa:
fd:b7:eb:eb:a2:6a:be:ac:1f:bf:96:a7:c2:de:b7:25:8e:ca:
cd:c5:8f:af:ee:54:93:a1:6a:72:a3:91:4b:fc:ee:2c:bd:82:
8b:23:93:31:14:fb:d3:0b:6b:b6:76:14:62:20:01:42:31:d2:
e2:74:66:99:b3:02:ab:d3:95:02:b8:67:f8:e1:48:f5:f1:a4:
47:b8:2c:34:3a:94:1e:62:c9:9c:0c:e4:27:88:d4:df:c2:fb:
59:65:28:e0:bf:28:a4:a8:d0:d6:82:a3:24:83:90:c2:7c:7d:
75:e7:85:5f:ce:68:20:89:a9:ec:97:d3:60:03:90:a6:61:80:
c0:01:d2:f6:b5:7d:ee:39:0e:02:e4:5d:23:07:dc:5b:07:9f:
41:31:86:89:8b:89:2e:e1:d0:9b:a2:32:a7:5b:d2:20:fd:fc:
e1:42:d4:ff:57:0c:83:14:39:e1:56:79:fb:84:f1:43:e1:93:
21:d3:e2:c8:3c:25:ce:16:a5:72:8e:a9:f9:eb:f5:94:ce:b8:
23:81:9d:6e:ff:86:f9:b8:91:a1:45:80:b5:7d:46:37:9f:e3:
21:b4:ed:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:03:24 2025 by rpki-client