Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
File: AyhzUYaXwj6cPjemRrrRISNa10Q.mft (raw, json)
Hash identifier: 1NfnpFyrnjh88NAIJilnLnh6j21JtTgMMzrAg1PobgA=
Subject key identifier: 53:89:4A:EC:86:39:61:E1:04:DB:D1:EC:FC:E1:31:49:05:CF:3D:78
Authority key identifier: 03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
Certificate issuer: /CN=032873518697c23e9c3e37a646bad121235ad744
Certificate serial: 01967755E24013896B96AF6B55C29D6FD7E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 13:00:39 +0000
Manifest this update: Sun 27 Apr 2025 13:00:39 +0000
Manifest next update: Mon 28 Apr 2025 13:00:39 +0000
Files and hashes: 1: AyhzUYaXwj6cPjemRrrRISNa10Q.crl (hash: tUOQujtvDA6i1VOFKjVrZaCSM9YQBQnXyhUU7MHJ02k=)
2: V2K-oZleXeUaxCNtSI8GJz8R-T8.roa (hash: BfQ/+c4yu8OqgDpQuVge6IJ1WfNKM140JuABCwOq8WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:e2:40:13:89:6b:96:af:6b:55:c2:9d:6f:d7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032873518697c23e9c3e37a646bad121235ad744
Validity
Not Before: Apr 27 13:00:39 2025 GMT
Not After : Apr 28 13:00:39 2025 GMT
Subject: CN=53894aec863961e104dbd1ecfce1314905cf3d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:58:ef:04:38:54:2c:43:40:da:d0:10:00:
1e:d0:85:53:3d:8b:2a:97:4d:2f:13:50:18:86:1c:
7b:f5:15:13:98:0c:c8:16:c0:d3:e2:5e:be:71:b3:
bf:25:dc:0d:ab:72:fc:50:e5:5c:2a:42:65:14:d6:
a7:0e:0e:8b:73:d6:bc:30:57:6d:5f:2f:45:05:c4:
8d:7c:95:9c:53:3a:72:6f:95:e7:8f:1b:a7:bb:aa:
94:82:c1:d8:95:0e:0c:48:87:e2:49:bb:97:6d:64:
75:3e:27:72:10:15:ca:e3:45:4c:dd:9d:dd:5a:5a:
7c:3c:25:21:49:c8:9a:f1:84:64:56:d0:4e:d6:12:
80:7a:0e:9e:75:79:fe:f3:c9:74:bb:67:b2:b2:fb:
9e:30:40:75:db:3b:b0:55:51:07:39:de:84:62:67:
21:60:71:d3:8d:51:a1:09:90:fd:c5:b1:35:df:5f:
7f:89:11:6d:5f:8f:e1:76:55:a6:1e:96:56:9a:51:
97:4c:73:1d:3a:bd:06:00:02:ac:60:7f:32:e1:b8:
ca:3e:a3:15:57:46:4e:3e:dd:20:0d:c9:9b:4d:0a:
ba:8d:c8:06:2c:0f:da:48:ee:c4:c2:41:61:97:18:
a7:a5:a8:46:3b:b2:07:7d:be:de:15:bf:f6:5a:0e:
ba:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:89:4A:EC:86:39:61:E1:04:DB:D1:EC:FC:E1:31:49:05:CF:3D:78
X509v3 Authority Key Identifier:
keyid:03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:af:ae:f0:e2:a4:23:37:7e:ca:35:8f:bb:c6:43:fe:dd:b0:
b3:94:39:b8:7e:47:54:d8:3a:62:63:93:94:d8:0f:bc:5f:86:
52:48:27:25:5a:d6:f5:dd:43:67:cf:9d:ad:c9:e9:71:3b:8d:
02:e9:a8:29:7e:24:57:45:f4:ab:f3:14:23:95:48:5a:4a:d6:
61:d3:c1:44:b5:8b:2d:f7:9a:dd:6f:98:47:bb:7a:c8:21:a1:
9a:64:ad:8d:9b:21:52:d5:b9:7d:f5:f9:7e:79:d8:f0:8d:f9:
45:82:e2:c1:b4:b5:e2:d2:7a:e2:05:e6:13:fe:a4:2d:e9:30:
f4:37:ac:e0:ad:92:49:a1:02:74:01:e0:e3:36:ab:a5:4d:6d:
72:e2:ec:d8:8a:da:a1:75:5b:2d:79:40:fe:4e:d3:d4:1b:7e:
5e:a4:9d:10:ce:1a:09:42:a9:3a:c5:40:2c:30:01:39:87:78:
ec:28:ee:a6:7d:cc:f9:84:b6:fd:54:34:d0:65:94:19:a3:d1:
17:06:97:21:7b:69:5c:80:cf:6f:38:70:a1:84:e4:60:7d:a9:
4e:fc:b6:26:7d:3c:db:ae:66:03:a3:b4:7d:da:ae:e3:36:b4:
02:35:76:ce:17:eb:dc:5f:f4:26:62:26:df:b9:a5:3e:d9:d6:
ad:d7:f7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:30:22 2025 by rpki-client