Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
File: _AY2gjog5gJjQv6MiOpyqPj3p0k.mft (raw, json)
Hash identifier: mqnYL0ozqVkc7UgD3GpQLx0FLsXKUnUu28cEGXveYbE=
Subject key identifier: D3:0B:9A:BE:B4:51:77:4F:8B:BF:6C:5F:49:39:4B:8A:C2:FE:20:FE
Authority key identifier: FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
Certificate issuer: /CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Certificate serial: 01967454E1D877EC79EB5017FB81AB57137C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
Manifest number: 1131
Signing time: Sat 26 Apr 2025 23:00:41 +0000
Manifest this update: Sat 26 Apr 2025 23:00:41 +0000
Manifest next update: Sun 27 Apr 2025 23:00:41 +0000
Files and hashes: 1: _AY2gjog5gJjQv6MiOpyqPj3p0k.crl (hash: HqDDhcrbv8icskYP03fHMLuB6+QWg+S2DMKQZxvNHCw=)
2: hIlU1ledlK0WoRmp-tL_K_qi2N0.roa (hash: ZI6M6O4nwpCFukoO/yVoA24rabSe9nnOSdxH4aDpFEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:e1:d8:77:ec:79:eb:50:17:fb:81:ab:57:13:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Validity
Not Before: Apr 26 23:00:41 2025 GMT
Not After : Apr 27 23:00:41 2025 GMT
Subject: CN=d30b9abeb451774f8bbf6c5f49394b8ac2fe20fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:76:a9:ee:8a:5d:9a:9b:bd:95:ec:05:25:5d:
12:c0:e6:6a:55:30:6e:ec:1d:6c:a2:73:a0:1c:f0:
63:2a:27:dd:35:fa:dc:94:db:de:57:8c:b8:53:ae:
92:15:a7:8d:64:28:3e:46:02:d6:c6:75:ad:50:ed:
c7:b3:1c:69:a0:cb:08:45:fe:0f:c1:29:2a:3a:49:
48:0f:5e:c8:66:43:8b:b2:40:7c:26:3d:5c:c1:6c:
b3:a3:6e:b4:d5:52:6b:77:b0:d8:a4:db:9a:a0:05:
24:bb:46:75:95:63:ff:2d:65:3a:a5:a3:fa:39:46:
31:b0:2e:05:d9:75:8a:9e:ec:73:13:1f:e5:52:9b:
0f:6b:4f:61:47:7f:03:15:da:a0:56:c4:4f:40:54:
74:b6:48:bf:e4:f6:ca:d4:6d:52:91:0d:e4:c0:b3:
ee:a3:db:25:b7:87:a5:3c:b5:ea:a7:d7:8b:0b:de:
ea:ef:08:cb:96:3a:2b:62:f9:50:1d:69:0f:39:92:
58:5e:bd:97:0a:ec:52:a6:0f:c8:47:3a:f1:74:f5:
e7:a0:fc:1f:7c:62:8a:d1:96:b5:a1:51:aa:f1:2b:
25:ca:55:63:0c:02:e1:eb:af:1c:2a:45:5b:4a:a0:
d9:6d:15:00:b2:8e:16:91:08:6a:85:26:30:25:78:
17:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0B:9A:BE:B4:51:77:4F:8B:BF:6C:5F:49:39:4B:8A:C2:FE:20:FE
X509v3 Authority Key Identifier:
keyid:FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3b:77:0d:93:53:f9:d3:6b:74:11:56:8a:fd:01:06:34:7c:
61:b3:a6:d5:2c:ec:72:5e:09:8e:2a:68:be:71:89:50:c6:1d:
3d:1c:2d:ee:30:6d:5f:85:93:21:d7:1e:6f:80:11:fa:5f:72:
9d:12:7f:01:72:ff:c4:ee:54:95:d4:13:d2:e1:54:13:81:39:
81:90:5d:d0:32:2b:0c:89:1a:0d:7d:bb:b5:d4:3c:54:8b:c6:
b8:56:a1:32:ff:1c:49:4e:ca:80:71:a4:a4:cf:05:77:c6:17:
85:7d:b3:fd:99:62:f4:d5:ab:60:cc:90:bd:e7:c6:95:d7:27:
67:b0:c4:c9:c2:e0:54:e4:ee:91:ce:39:0c:a5:ef:f6:10:f1:
d6:2a:c2:40:90:a5:dd:1d:26:74:8a:8a:4b:1a:7a:4e:1e:62:
d0:f8:40:6f:0b:60:9f:9a:ee:41:cb:bc:a3:8f:6c:ad:60:34:
e2:86:ed:35:a8:ff:fc:95:67:77:da:a6:23:78:86:ff:1f:43:
e1:60:af:37:a0:f7:2a:5b:13:c4:d2:38:32:9c:d6:2d:95:1f:
b8:81:01:bc:25:df:68:7d:19:f7:bb:28:2c:36:89:ab:41:0d:
14:17:80:d3:72:31:aa:8b:d5:bf:65:8d:50:f4:e3:e4:63:6b:
0f:6f:3e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:31:58 2025 by rpki-client