Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: NujuKoVNhXW0LsDsWneGpwQalFxbet/5Gy4pocmyiPw=
Subject key identifier: E5:3E:FC:C2:E1:CA:51:C4:4A:FD:1A:5C:3C:E7:29:91:97:E4:97:E0
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 019682B5002C3D7B355318402490A4E88FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 062D
Signing time: Tue 29 Apr 2025 18:00:22 +0000
Manifest this update: Tue 29 Apr 2025 18:00:22 +0000
Manifest next update: Wed 30 Apr 2025 18:00:22 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: 8/2bY/FzieyIFf9LglVLMPgqjVqfPqdXdwE1uCcy200=)
2: h2bGxUxbqOMwKZqb7G6CRO2lZho.roa (hash: mynhqYVK2VXcY1dJrTVkYeBGm7TzlIqS2eWaSHlhFbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:00:2c:3d:7b:35:53:18:40:24:90:a4:e8:8f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Apr 29 18:00:22 2025 GMT
Not After : Apr 30 18:00:22 2025 GMT
Subject: CN=e53efcc2e1ca51c44afd1a5c3ce7299197e497e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:d8:81:9b:bc:a8:5d:c0:e4:d4:c3:a0:44:
33:23:73:d4:33:38:c7:56:f1:20:dd:bd:ef:6d:6e:
73:57:78:f3:a5:fb:6d:5d:f8:ed:e3:ac:e9:dc:5b:
59:e1:78:44:62:fc:55:b3:83:8a:8d:e9:c4:91:a0:
c0:ec:7e:00:55:5a:fa:c0:61:62:02:4c:cc:6f:05:
a4:44:b8:3e:7f:99:5a:ad:4b:46:47:38:a7:fc:fa:
18:4d:51:b1:14:f7:29:15:9d:cc:34:41:70:bf:f9:
da:f9:f7:bd:7e:fb:02:d7:84:7b:3b:8f:c1:e4:b6:
84:16:65:0a:1f:4f:0f:e4:53:15:29:a7:7d:6e:10:
f6:d3:f0:9c:33:e7:47:11:50:4a:a8:43:a4:0f:73:
69:03:95:56:11:ba:ee:bb:d6:f7:13:29:a5:c4:ec:
59:71:42:87:87:9b:a9:36:7d:cf:80:e7:4f:79:3f:
2d:b6:90:38:52:58:ae:e5:f9:f4:d5:d4:88:05:f1:
ee:ed:15:df:e0:5d:c3:d5:5f:6d:99:65:1e:3b:4f:
3a:8e:c7:ea:cd:94:7e:df:0a:bd:f3:e7:e3:51:dd:
d5:1c:37:0e:24:4f:c2:f8:f1:76:8c:34:e3:fe:90:
fe:42:d7:74:df:54:32:15:44:b8:63:4d:31:48:ca:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3E:FC:C2:E1:CA:51:C4:4A:FD:1A:5C:3C:E7:29:91:97:E4:97:E0
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a7:12:da:5e:13:d4:b6:98:aa:fb:70:29:c1:c1:bb:2c:da:
4f:d7:1e:46:db:4b:26:36:38:7b:cf:a6:a2:6b:52:e1:2f:c0:
c5:00:9e:00:b6:2b:b1:2b:27:65:d6:d4:77:f4:ac:b3:bf:c9:
e9:7c:71:d4:db:6e:46:24:3b:6f:34:63:45:4d:bc:85:f0:98:
b1:8e:fe:5f:ed:4a:a4:2c:02:ee:66:e1:ba:ab:10:a4:d4:b0:
6d:c1:c4:64:f8:6c:5c:0c:39:9e:b2:ca:e3:13:2a:66:b9:64:
ac:7d:f1:49:06:c0:f4:e2:62:4e:75:43:84:55:d9:a9:8e:80:
01:d8:48:df:26:8c:db:9c:d6:e8:71:ad:5c:d6:55:f9:d6:ac:
7f:be:0a:a8:93:96:9f:cc:f6:e3:04:66:fc:85:aa:d0:a7:bb:
81:25:52:2f:53:87:37:8d:dc:12:75:f2:ba:84:50:ec:ed:8f:
f0:02:e3:c7:58:fe:83:62:ec:3a:c5:d0:fc:25:18:b8:43:f8:
e2:ae:ab:2d:a3:0b:f0:19:5f:2c:0a:a3:0a:d0:da:ea:6c:c8:
a5:fb:f9:8e:c4:e9:25:e6:ba:c7:46:c6:bb:68:e8:b7:99:3e:
45:56:9a:88:50:d7:c4:4e:63:74:cf:5a:ad:d7:f3:0e:3b:6e:
de:5c:be:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:21:37 2025 by rpki-client