Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
File: AZlprHWrzVlo8Yng1F272rKYK9o.mft (raw, json)
Hash identifier: D7MFPjuOBWJtU4HlHcmK3x60ehtvfpsdFrb5QUYgf4k=
Subject key identifier: 0E:4C:30:06:15:CF:DA:D0:FE:0D:0B:83:C6:0D:93:6C:E4:F2:68:AD
Authority key identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
Certificate issuer: /CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Certificate serial: 019690A794D334BA6F9ABD905BFF715679B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
Manifest number: 1520
Signing time: Fri 02 May 2025 11:00:23 +0000
Manifest this update: Fri 02 May 2025 11:00:23 +0000
Manifest next update: Sat 03 May 2025 11:00:23 +0000
Files and hashes: 1: AZlprHWrzVlo8Yng1F272rKYK9o.crl (hash: 5Wla+/bicU/nk40qmhAEHJU9RwimufV7+iPq0k/CxyA=)
2: z3WUNqxKMDWur0KI4t-qxJ9N11o.roa (hash: 939Mn6aF9U81uAcv2w44QyTqf1evPpPjx2mvgDn5N/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:a7:94:d3:34:ba:6f:9a:bd:90:5b:ff:71:56:79:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Validity
Not Before: May 2 11:00:23 2025 GMT
Not After : May 3 11:00:23 2025 GMT
Subject: CN=0e4c300615cfdad0fe0d0b83c60d936ce4f268ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ef:4e:9f:33:35:03:38:87:37:70:c8:97:f0:
e5:19:ff:5f:94:f7:10:a8:03:42:dc:de:9d:b9:42:
8f:41:c9:8a:cc:99:f9:1b:78:9a:bb:d4:8c:70:d5:
35:63:a9:58:7f:75:af:33:f5:1b:57:10:26:99:c9:
1d:aa:52:20:9c:43:fb:d9:15:86:4e:cc:76:d6:20:
23:2a:81:5d:d9:b2:ea:c3:4d:8b:36:b8:7d:6a:21:
f4:43:6c:85:e7:9f:66:9b:4c:90:01:c9:1e:83:f3:
3b:3e:0a:05:4c:ff:ef:b6:e2:ed:81:0b:82:e8:20:
fb:5e:37:61:91:3d:5c:6b:46:71:1c:ed:e2:38:52:
06:b2:85:5c:ea:2c:97:b5:5b:db:2f:4d:8a:75:41:
1c:3a:a8:91:f0:59:6b:d6:de:05:33:85:91:52:15:
cd:2e:cc:76:cc:6f:aa:f6:21:9c:72:6b:b7:17:55:
f8:77:7f:0d:e4:68:2d:d3:b8:1d:3c:ba:8d:4d:c6:
8c:05:ea:e8:7c:c2:46:1c:ae:76:a0:f4:3c:5c:24:
d1:8e:d0:a2:3d:a2:f1:fe:d8:87:3a:33:87:61:b7:
e9:bc:e1:fd:e5:66:9b:d8:bf:fe:7d:ac:af:f7:dc:
76:16:a5:9c:7c:0f:04:4b:ce:dd:59:aa:25:de:34:
0e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4C:30:06:15:CF:DA:D0:FE:0D:0B:83:C6:0D:93:6C:E4:F2:68:AD
X509v3 Authority Key Identifier:
keyid:01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:81:15:30:b0:15:8b:9d:c1:94:63:27:b3:46:e1:db:60:ce:
82:24:71:48:67:de:6f:5d:30:7a:1b:eb:1e:d9:ee:50:07:5a:
e4:b2:91:75:61:ea:5e:c2:ea:eb:08:8e:97:cb:c3:a4:fe:6c:
25:2d:bf:9c:65:e2:26:a9:e1:bd:6f:8b:01:3a:98:9d:39:47:
62:46:2c:e4:88:19:96:17:7f:09:c2:15:6f:12:07:fe:c7:2b:
7f:f5:f2:bd:60:67:c4:d8:08:3a:88:90:07:02:fd:69:34:15:
5e:06:4b:c5:ad:da:7c:89:fe:4b:bf:02:d7:26:2e:71:f7:9f:
5b:12:40:32:3c:ce:13:53:b1:9e:31:af:ec:ce:e2:7d:1a:bf:
22:d2:91:2d:49:ff:fa:ac:88:2c:f5:f0:39:a5:76:89:61:69:
1b:55:cd:83:88:4c:33:1c:1f:73:3c:d2:12:b4:5b:d7:1b:4e:
a4:1c:e9:e4:72:ab:f2:e4:e0:ac:8a:1f:00:f6:df:c9:7c:9b:
6d:0f:43:b9:00:2b:24:eb:6e:a1:6c:01:be:d6:95:fe:37:61:
54:48:3e:f1:ca:01:dc:4b:29:d0:59:dd:0a:cf:18:de:cb:e2:
f3:e0:d6:ce:bf:9d:0b:07:c1:a1:92:91:6f:8c:05:2f:5f:d2:
56:1b:43:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:29:52 2025 by rpki-client