Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier: BK82FNgsJHSgamY6GwFFCtPGV2Qj0CVR3HJbpXq6Yyo=
Subject key identifier: 19:FF:02:B6:C0:F4:8E:89:B7:9D:59:79:89:95:DD:F0:A7:F0:26:32
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer: /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial: 0196816B88B0DE792E274BD3FC1349A2E483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number: 08D4
Signing time: Tue 29 Apr 2025 12:00:30 +0000
Manifest this update: Tue 29 Apr 2025 12:00:30 +0000
Manifest next update: Wed 30 Apr 2025 12:00:30 +0000
Files and hashes: 1: 1-Oc-5i1yyq11robM4onOto0qtew.roa (hash: k/9TNuFsVCQ/WuYJYH9Qe3QLWgW1naRjiSPb+eOEI+0=)
2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: Ig4uDN1OyKG9YWUWSOTN/oceU7wWhm2lIULceSvOp3s=)
3: C1SZKKCkY7SbLFevNwXtaHd2whI.roa (hash: qLK2DqN3/ycXpzvuQLbdz4SdUDAqvfLR7qE4BXoJD04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:88:b0:de:79:2e:27:4b:d3:fc:13:49:a2:e4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
Validity
Not Before: Apr 29 12:00:30 2025 GMT
Not After : Apr 30 12:00:30 2025 GMT
Subject: CN=19ff02b6c0f48e89b79d59798995ddf0a7f02632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:90:cc:dd:cb:58:f7:e0:00:49:05:6a:48:
92:76:9e:5b:de:55:d2:64:c3:c4:ba:0a:90:df:c2:
38:94:d1:05:75:3e:9e:2b:7d:d2:11:52:60:09:cb:
da:79:f4:f3:e6:26:1c:02:d3:b8:e8:ad:ce:93:95:
d6:c5:8d:2e:10:48:c8:a6:b9:b6:58:1f:53:4e:aa:
4c:28:98:da:a6:68:2f:38:a7:1c:f4:81:c0:b0:02:
d4:e2:f5:af:c8:ad:98:e8:80:6d:8c:4f:89:d4:81:
d5:2c:df:89:9f:45:92:ea:3f:1b:58:b8:ca:7a:2a:
88:52:7c:fd:b9:62:32:e0:f8:53:1b:3b:3a:ab:b5:
ea:65:82:46:1f:05:ae:7f:bd:54:51:13:ad:88:ec:
e9:7c:06:2b:3e:98:c2:3e:45:f2:b3:ef:db:91:78:
14:e8:fa:2b:ab:4d:36:ba:bb:73:5c:6f:37:4d:82:
c1:c7:35:32:da:91:28:a0:f5:cd:6a:d0:04:c6:ce:
05:85:0d:19:b2:e5:82:00:40:99:83:68:7c:5f:fe:
09:af:76:26:28:ee:4f:f0:05:f0:b5:4f:e5:9c:5d:
52:26:96:55:80:e3:57:ae:b1:f1:1b:76:d4:8e:c4:
8c:42:91:29:b7:f0:9a:55:9e:bf:34:96:10:47:e1:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FF:02:B6:C0:F4:8E:89:B7:9D:59:79:89:95:DD:F0:A7:F0:26:32
X509v3 Authority Key Identifier:
keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:85:b7:34:a4:87:38:cf:e4:f4:23:a2:5b:35:f2:fb:d9:f0:
18:f9:b6:ef:68:cd:30:f3:87:db:75:63:5f:9c:21:f6:4c:89:
c5:31:1b:95:17:4d:72:40:fe:ee:68:6d:32:56:42:dc:01:a8:
98:a3:da:f9:ea:54:56:84:71:2a:1c:f1:65:e9:36:9b:f8:cc:
f7:aa:74:92:24:df:29:e1:37:85:94:3e:f6:f4:a2:24:4f:9c:
15:94:0d:85:a9:25:ee:a6:de:fa:b9:41:7d:76:ac:57:cf:6f:
30:2e:ac:4f:21:15:ef:2f:c1:78:8c:30:c4:5b:7c:5c:28:79:
32:f7:d1:6e:af:8a:e3:4e:45:3d:25:77:f5:4b:66:cd:5c:4f:
9e:5b:45:fa:ee:d9:97:35:12:9f:c8:22:d9:f9:99:8f:51:a3:
78:02:ee:8e:fb:09:aa:cf:4c:d4:36:db:7c:58:84:21:ef:aa:
74:8d:e8:01:8d:08:ec:3f:d0:11:fa:de:89:05:f0:f9:3d:7a:
c0:04:ba:a1:2d:0d:2a:fb:0e:46:88:42:b3:f4:66:b4:a9:bc:
20:40:fb:cd:05:0e:1c:19:9f:5d:4c:2c:68:63:37:b9:f9:8a:
e6:48:d8:83:36:a4:07:21:94:c4:98:bc:5a:19:9b:d1:72:d8:
d5:95:cd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:19:47 2025 by rpki-client