Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
File: aYfUeTXhE31URCbbUojhKpwCWsI.mft (raw, json)
Hash identifier: LTkSOEsJ/QQcQkFnV6m78nNUgwPAKukKRm5nf+WftIo=
Subject key identifier: 50:98:55:15:19:86:A3:0C:4F:85:33:EB:A7:29:BD:D4:DB:18:D2:64
Authority key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
Certificate issuer: /CN=6987d47935e1137d544426db5288e12a9c025ac2
Certificate serial: 0196726664DE71BDD2658559A3185E1236C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
Manifest number: 0CD2
Signing time: Sat 26 Apr 2025 14:00:35 +0000
Manifest this update: Sat 26 Apr 2025 14:00:35 +0000
Manifest next update: Sun 27 Apr 2025 14:00:35 +0000
Files and hashes: 1: aYfUeTXhE31URCbbUojhKpwCWsI.crl (hash: jXVkNGYEW9JWzO6r392gE/vRcioPZKZZ5OvCSMGNZZU=)
2: u5cM_QOizpw-qJJPqONMvmbrpo8.roa (hash: GZfhlRyj3hdFyyCNQhpcV7zv1K17zHPhBmiPFi/AntI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:64:de:71:bd:d2:65:85:59:a3:18:5e:12:36:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6987d47935e1137d544426db5288e12a9c025ac2
Validity
Not Before: Apr 26 14:00:35 2025 GMT
Not After : Apr 27 14:00:35 2025 GMT
Subject: CN=509855151986a30c4f8533eba729bdd4db18d264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:95:4d:2a:e0:14:fc:44:6b:6a:fb:20:cb:
3d:18:6d:d4:95:94:55:12:41:94:31:e4:a8:f0:24:
e9:82:02:39:4d:c3:11:e1:78:8c:bb:7c:63:ee:19:
3c:4e:5d:10:6e:cb:98:6e:ed:ae:3a:b0:29:82:bc:
d4:f0:7c:24:2f:7d:2f:6d:c2:cb:ef:ed:d7:62:07:
7e:78:53:d6:60:de:2a:2e:4f:d1:e3:19:95:0c:e7:
52:e1:9f:83:a1:b1:53:b8:71:7b:49:9d:c1:f9:8d:
91:70:2f:5a:36:83:e0:a0:4b:12:ac:b3:19:66:f0:
0a:2f:83:29:ad:07:8d:ed:da:64:a9:b2:23:04:87:
b1:a8:27:4a:5f:81:cd:a2:00:59:57:fa:19:d6:7d:
df:04:df:fc:40:e3:41:aa:3a:c9:48:b9:49:e6:82:
ed:14:6f:07:bb:36:85:ca:70:c1:8c:9c:a4:f4:4c:
8e:60:a6:9a:27:55:ae:08:2e:6b:1f:07:c5:3a:f3:
7a:d7:ca:45:83:06:57:7b:91:ba:34:57:59:58:94:
49:f1:a8:c3:9f:a5:51:2a:96:f0:e0:43:7b:4f:5a:
c5:dd:2f:d1:43:0b:3c:5d:63:b0:a3:9c:10:7e:43:
91:19:5e:e2:86:3a:21:ce:05:13:36:7f:d9:5c:f7:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:98:55:15:19:86:A3:0C:4F:85:33:EB:A7:29:BD:D4:DB:18:D2:64
X509v3 Authority Key Identifier:
keyid:69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:80:ab:dd:54:f2:94:20:c7:07:a4:ce:dd:a0:ac:bb:a7:a7:
a2:25:4b:a5:8c:cf:95:cf:09:89:b8:46:39:b7:85:33:65:3c:
73:ec:01:a6:95:7e:ef:19:58:9a:60:4c:1f:5c:42:0c:1c:30:
0f:b5:8b:31:26:9c:07:5b:6a:62:36:66:97:b0:20:43:2a:c0:
26:8c:02:df:4f:4a:d4:0c:70:3e:80:c4:4b:e0:94:6f:0a:01:
93:26:b6:7b:92:64:5b:2c:e9:04:60:33:cd:91:1b:92:31:a3:
df:ef:e8:05:5b:d8:34:84:b2:4c:95:4a:c2:ab:35:ef:db:fb:
6e:84:d9:83:8a:05:81:da:84:54:00:21:90:d9:99:27:bc:2a:
2b:d7:73:a9:cf:fe:ea:76:78:47:15:12:cc:a0:60:fa:d2:68:
ed:14:f9:cf:06:d2:6e:06:8f:2e:6e:c9:21:35:75:6f:4f:85:
ff:e6:44:5e:48:1e:52:64:51:75:92:83:32:36:34:3e:31:ca:
00:93:a4:d4:80:57:5a:29:31:6b:13:ef:3c:10:37:fa:81:76:
f0:be:f7:b4:ee:fb:46:97:c4:ac:e7:4f:40:65:fb:b8:71:2a:
5a:e3:24:6c:c0:9d:58:14:9e:c8:31:b4:e0:b2:cc:40:69:45:
be:3b:62:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:51:31 2025 by rpki-client