Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.mft
File: AxGHu2TIff3S-gLy2F1HnsJoPlc.mft (raw, json)
Hash identifier: Vm+vpCdH03vtSW1Y3c/9Rn6rhMBscLAErvDcej9WMV4=
Subject key identifier: AA:BC:38:08:80:84:EF:3F:9A:6C:30:83:16:93:40:3F:0C:4C:48:C3
Authority key identifier: 03:11:87:BB:64:C8:7D:FD:D2:FA:02:F2:D8:5D:47:9E:C2:68:3E:57
Certificate issuer: /CN=031187bb64c87dfdd2fa02f2d85d479ec2683e57
Certificate serial: 019676E7BCA3BE151BA6308F05941C7D3B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxGHu2TIff3S-gLy2F1HnsJoPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.mft
Manifest number: 0E8B
Signing time: Sun 27 Apr 2025 11:00:20 +0000
Manifest this update: Sun 27 Apr 2025 11:00:20 +0000
Manifest next update: Mon 28 Apr 2025 11:00:20 +0000
Files and hashes: 1: 7Pk-IrjKbSkMaIFV6WzwQN1I03M.roa (hash: Hp4qd3j7wtXHjgK8l1L7RXVKrLRDd0CHGKAoHn9hvnU=)
2: AxGHu2TIff3S-gLy2F1HnsJoPlc.crl (hash: KhP3+qX4dj7DGiLBxLAEf3UTI82QR1g81FOtSEwLC2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxGHu2TIff3S-gLy2F1HnsJoPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:bc:a3:be:15:1b:a6:30:8f:05:94:1c:7d:3b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031187bb64c87dfdd2fa02f2d85d479ec2683e57
Validity
Not Before: Apr 27 11:00:20 2025 GMT
Not After : Apr 28 11:00:20 2025 GMT
Subject: CN=aabc38088084ef3f9a6c30831693403f0c4c48c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:4f:d2:25:4a:63:83:b5:a7:37:3e:5d:52:
fd:01:7f:cd:16:3f:54:90:21:0a:88:77:6a:6a:eb:
0b:d0:0f:07:9b:fc:38:86:b2:c0:ff:a5:e2:4b:1b:
b8:05:a8:ea:7a:75:c1:b7:5d:82:cf:f6:22:71:a6:
f8:ee:02:31:c5:e6:fb:ff:a0:f0:63:32:44:03:3b:
c4:70:fa:9b:eb:42:94:4e:74:ba:36:a4:5d:b4:49:
79:59:a9:43:57:0b:95:bd:31:8f:e7:07:d4:b9:b3:
a3:dc:a0:c9:5b:a6:ae:1f:71:fe:09:cc:cc:8c:22:
7d:d4:6a:4a:da:8f:51:65:8f:31:39:e4:6a:4e:fc:
d4:49:c3:28:7a:68:42:e5:d6:a0:dc:34:3e:a7:ca:
2c:50:e2:a3:80:b6:82:ce:e4:8e:06:df:a9:9a:03:
45:97:31:90:fa:42:dd:51:37:8b:e1:24:2a:e2:03:
5e:ad:8a:de:dd:d7:f9:27:6c:12:f2:02:5b:6a:15:
6c:7b:6a:53:db:98:4f:34:83:f3:79:19:47:1e:45:
d1:fe:07:0b:b7:71:93:64:2e:51:8d:24:2e:bd:22:
d9:35:9d:c8:da:e4:2c:4a:ad:ae:e4:78:6a:1e:bc:
6c:0f:6a:c9:ce:b8:fb:7e:6b:c3:9f:95:d0:2e:db:
20:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BC:38:08:80:84:EF:3F:9A:6C:30:83:16:93:40:3F:0C:4C:48:C3
X509v3 Authority Key Identifier:
keyid:03:11:87:BB:64:C8:7D:FD:D2:FA:02:F2:D8:5D:47:9E:C2:68:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxGHu2TIff3S-gLy2F1HnsJoPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c1ed2c-b41e-4ebd-aafb-f214f0cc262b/1/AxGHu2TIff3S-gLy2F1HnsJoPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:59:2b:3e:09:f8:26:f9:f4:be:a2:4f:e1:8b:37:e2:a1:aa:
e1:e0:83:6e:31:58:62:69:39:0b:f5:e8:23:d9:72:3d:e3:31:
3d:48:b5:44:6e:bd:cc:3a:fe:e6:45:19:fd:b8:52:a8:2c:74:
a6:0a:5d:c4:7c:7f:44:29:68:73:bc:01:02:df:ec:79:c2:ee:
7f:20:22:f6:6d:c0:e2:96:f2:50:8e:22:4d:63:a8:34:e5:46:
99:a5:3b:85:c1:00:3d:45:97:22:d2:2e:a0:e0:16:29:f6:d0:
8d:7e:3f:78:ad:d6:29:2e:e8:1a:40:f0:da:16:0e:34:53:6e:
9d:c3:41:ef:28:10:cf:e1:e9:2e:bb:e1:38:6b:a5:0f:af:f2:
28:68:02:f4:de:d4:08:9b:b2:e9:10:ed:20:d1:4f:29:1f:74:
2e:19:ca:6c:3f:9b:a0:e1:8f:97:13:e4:38:b4:50:25:81:18:
4e:a5:12:f0:e7:66:0b:c4:2b:74:f9:65:b2:23:f8:3f:e7:56:
69:70:5e:e6:c7:a7:c6:ea:c0:e1:ef:6a:5e:67:f4:d3:b0:c9:
ef:7b:0b:9a:2a:92:3e:d0:ef:64:67:de:75:17:75:4c:d2:48:
19:91:21:78:c8:5a:db:0b:bd:23:67:f4:87:c7:84:1e:ea:94:
8e:27:17:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:58:23 2025 by rpki-client