Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
File: afKVoxCPXPHTJv_pv2EPvPGNct8.mft (raw, json)
Hash identifier: Yy5ARSDrMM64sFAIgtgSA71XKe0SBaXO1QKBVIAnkQs=
Subject key identifier: CC:C9:F3:9C:78:00:84:63:C1:CC:15:71:06:2B:29:BB:CE:34:98:B9
Authority key identifier: 69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
Certificate issuer: /CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Certificate serial: 019675D5264011BD44CAE6E2963215526BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
Manifest number: 089D
Signing time: Sun 27 Apr 2025 06:00:25 +0000
Manifest this update: Sun 27 Apr 2025 06:00:25 +0000
Manifest next update: Mon 28 Apr 2025 06:00:25 +0000
Files and hashes: 1: 2kKgjfyddVwBqBtbcmC591hhds0.roa (hash: J3PsfHURY5KO0r8jrXSygLDWI9PtPmq+khbJ0BwKbpo=)
2: afKVoxCPXPHTJv_pv2EPvPGNct8.crl (hash: NuXinRWxtOt9nrzIh6jmqoaBWL+O/bjJ6zovyT+OuQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:26:40:11:bd:44:ca:e6:e2:96:32:15:52:6b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Validity
Not Before: Apr 27 06:00:25 2025 GMT
Not After : Apr 28 06:00:25 2025 GMT
Subject: CN=ccc9f39c78008463c1cc1571062b29bbce3498b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c7:ec:79:a3:76:b3:89:69:7c:c3:6c:1b:7a:
1f:aa:f3:9a:57:89:b5:e9:d2:69:21:af:bc:e6:bd:
06:d6:fb:d2:32:31:47:2a:82:d8:76:a8:b7:16:e9:
3c:91:1e:f9:70:a9:2b:cb:63:b5:06:92:1e:44:25:
b6:f7:24:c0:5a:25:1b:33:88:fe:03:1b:c0:f7:b2:
ba:79:67:63:6f:9d:16:ba:50:ca:f8:c0:50:2a:69:
19:67:5c:bc:96:3f:58:b0:37:55:60:3d:b8:a4:03:
54:98:c6:84:23:4a:da:5b:14:2a:1d:02:a2:cd:35:
d8:22:3d:dd:52:47:db:43:a3:54:08:4b:9e:cc:df:
1a:2f:3a:8b:f2:a4:1f:61:ff:45:e8:86:ed:69:f7:
d4:9b:f8:e5:56:f9:7c:ef:85:9e:45:98:75:86:15:
50:d6:17:23:6c:3b:e6:ba:ce:30:3c:43:0e:4d:94:
56:d3:0c:f7:28:70:82:e1:c3:e2:0f:fc:5f:cb:17:
b6:b0:70:d3:a1:df:6d:03:5c:31:71:a6:ca:59:aa:
a7:85:1c:c0:d5:0d:54:29:56:ad:fe:f5:c2:40:91:
4a:11:0d:24:42:fa:c4:17:52:56:b3:8d:e9:9e:1d:
d7:f5:6a:6a:ad:33:74:f7:75:5f:2b:30:d2:7b:c4:
f8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C9:F3:9C:78:00:84:63:C1:CC:15:71:06:2B:29:BB:CE:34:98:B9
X509v3 Authority Key Identifier:
keyid:69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c8:37:a8:ec:05:56:99:d3:64:ec:81:f6:d3:ad:36:0d:ee:
ec:db:e4:c1:c1:e1:1f:b2:dd:e2:8c:2a:ac:9a:cf:53:bb:54:
c5:4d:89:7b:84:76:42:08:25:9e:37:7d:7b:5f:df:4d:a9:9d:
49:92:83:84:66:68:b3:ed:24:d5:c9:17:49:e3:79:40:e4:14:
61:97:54:4d:19:12:28:a9:7f:58:d6:8b:52:c7:08:8d:09:59:
35:aa:67:25:92:7e:e0:10:be:66:9d:48:d6:1d:ad:5f:2d:a9:
69:72:28:77:c8:fe:e4:ca:bd:76:34:2f:28:96:70:bf:f3:b3:
cd:d7:25:5b:32:96:2d:4a:39:62:8c:a4:fa:1c:51:39:18:1c:
95:07:9e:13:6f:c0:c7:3a:8a:48:84:74:d8:8e:c6:72:08:9a:
97:c9:c4:71:cf:10:9b:07:fe:90:ea:43:93:70:21:25:99:a6:
36:74:f4:84:a5:6d:83:77:1f:e0:de:94:78:1f:57:fc:52:14:
a3:c6:de:07:c5:9b:21:83:7c:c4:b5:ed:f2:db:6b:1b:42:21:
93:fd:ef:09:e6:49:65:6d:e3:34:1f:cb:21:7c:35:d2:2c:a3:
cf:5c:b6:b5:d9:5a:5f:da:43:77:3f:1d:00:3f:91:e2:39:f2:
f0:a0:ec:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:53:38 2025 by rpki-client