Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
File: At-BJogpMB89aeuW-Kxhf6JSVqE.mft (raw, json)
Hash identifier: FiSxPIq3PWlr2PXr/9XnIUa2bsHx4P6XoV3WZD3tPJg=
Subject key identifier: F8:B6:EB:E0:99:21:60:EE:F0:DC:D2:54:A3:EC:A1:DB:0A:09:49:C3
Authority key identifier: 02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
Certificate issuer: /CN=02df81268829301f3d69eb96f8ac617fa25256a1
Certificate serial: 01968849105D08C009D9A226098599A07AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 20:00:11 +0000
Manifest this update: Wed 30 Apr 2025 20:00:11 +0000
Manifest next update: Thu 01 May 2025 20:00:11 +0000
Files and hashes: 1: At-BJogpMB89aeuW-Kxhf6JSVqE.crl (hash: SVla3P63wzZ9qzfB3JDoxo+dvcFYNzrIiUcf8g+SJV4=)
2: tHCbVYNtXVasJFwcwAVRKNWN-3Q.roa (hash: Ww9of/U+//ROw//qlU2ic3DOqjTFR4h9CkZcVWZJb4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:10:5d:08:c0:09:d9:a2:26:09:85:99:a0:7a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02df81268829301f3d69eb96f8ac617fa25256a1
Validity
Not Before: Apr 30 20:00:11 2025 GMT
Not After : May 1 20:00:11 2025 GMT
Subject: CN=f8b6ebe0992160eef0dcd254a3eca1db0a0949c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:8b:4f:8b:f6:96:48:77:47:6d:4a:38:4e:
33:1b:ca:93:6d:43:8d:17:17:bf:85:07:9a:9f:12:
90:eb:c0:61:cc:cf:35:59:1c:35:d9:df:4d:f5:11:
b5:4b:b8:c0:6a:f0:f0:fe:fc:07:96:e2:ed:76:9d:
05:e7:12:89:91:f5:31:ed:04:fb:98:09:8b:01:bc:
34:1d:fc:97:58:f2:ad:35:a1:d1:6f:32:96:cc:a8:
68:24:96:ff:ff:a2:8c:32:1a:4c:1c:33:98:62:5e:
67:2e:39:92:98:90:46:ab:39:7b:6e:cb:a0:3d:05:
49:c0:9d:2f:fc:e9:db:5b:31:c5:6b:73:54:bf:f8:
ab:fa:39:85:5a:33:df:d6:5d:24:63:d3:74:62:02:
78:91:df:a0:72:29:c2:b8:b1:31:6d:03:a7:6a:80:
45:40:0e:c9:0d:be:7b:32:69:f9:b9:33:e6:70:3c:
cd:d9:9c:f8:0e:78:00:29:3f:fb:2c:44:7b:88:a6:
5b:da:62:ef:23:8e:92:ed:60:be:0f:38:d4:eb:c6:
6c:31:6c:e5:80:61:cb:fd:82:bc:26:fc:b7:fe:82:
d4:f3:5e:bb:cd:4b:b0:d8:16:7a:78:9e:89:ff:87:
d5:8d:34:67:46:00:d7:56:a8:1b:72:be:5a:fb:47:
99:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B6:EB:E0:99:21:60:EE:F0:DC:D2:54:A3:EC:A1:DB:0A:09:49:C3
X509v3 Authority Key Identifier:
keyid:02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5e:94:b8:d2:dd:7f:e7:7c:0f:69:6b:b1:ef:0c:09:b6:f6:
38:66:5c:87:66:cd:10:f8:e9:b4:0b:be:93:e4:53:f8:16:c0:
34:05:67:98:11:21:7a:61:73:e2:3c:61:bf:cf:0d:40:94:74:
49:8d:b5:e3:a5:e3:34:3a:4c:39:9f:58:b0:91:12:dc:40:f9:
e8:1b:99:cf:b6:76:50:ca:17:7f:3a:45:91:23:ad:26:1d:6c:
a4:f4:4d:e3:91:11:f0:5f:70:26:ba:eb:c5:90:e8:13:d0:8f:
a8:6b:0f:7b:14:08:40:cf:74:31:88:aa:59:05:95:1e:83:2b:
42:a4:76:2a:3a:85:fd:36:f0:84:a3:8a:6e:17:f7:b2:33:61:
38:cb:e0:08:cd:7a:3b:87:32:d1:63:93:db:67:ea:c4:d4:03:
fe:62:fc:a8:3a:30:14:04:5b:0e:b7:1e:d8:c7:87:28:41:0a:
66:16:fc:74:7c:18:93:52:09:07:07:2c:27:3d:21:45:90:c7:
a2:b9:2a:39:c4:61:b0:9c:01:c9:69:ad:0b:58:77:6d:1a:dc:
3c:f8:83:4f:ef:53:31:ae:0a:8e:62:a2:79:75:fe:da:d5:4f:
7a:6e:1b:b4:41:af:e2:66:2c:38:b0:cf:6a:4a:2e:c8:f5:31:
02:f2:9a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:37:18 2025 by rpki-client