Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
File: AsNyEO2KVs4O3UV0v3NrYyReWCM.mft (raw, json)
Hash identifier: 7ErT5xqs1CkHCnn0p3RfmtJiYbiPjyng3qPmVXrvnDA=
Subject key identifier: 3A:5C:D6:6D:51:FF:4D:EA:AF:EA:AF:C8:A0:7D:89:EB:BC:CE:FC:5D
Authority key identifier: 02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23
Certificate issuer: /CN=02c37210ed8a56ce0edd4574bf736b63245e5823
Certificate serial: 01967ED898211C2BE96D56EBE6D5E7CF236A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
Manifest number: 14A2
Signing time: Tue 29 Apr 2025 00:00:46 +0000
Manifest this update: Tue 29 Apr 2025 00:00:46 +0000
Manifest next update: Wed 30 Apr 2025 00:00:46 +0000
Files and hashes: 1: AsNyEO2KVs4O3UV0v3NrYyReWCM.crl (hash: ZYr3W9Z2kgZrHkWJf5JZAlL9oFSsOnRSP3Xulme51XI=)
2: k_PCDa1MyltAYjWzYMAd9l-Wa5E.roa (hash: lyYvyESDGqkH326dhXSiycM2A323liIWVuNkJINconc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:98:21:1c:2b:e9:6d:56:eb:e6:d5:e7:cf:23:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c37210ed8a56ce0edd4574bf736b63245e5823
Validity
Not Before: Apr 29 00:00:46 2025 GMT
Not After : Apr 30 00:00:46 2025 GMT
Subject: CN=3a5cd66d51ff4deaafeaafc8a07d89ebbccefc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:1a:ab:e9:c4:0b:81:14:7e:d5:9a:d6:48:
8d:98:44:b1:84:ee:46:88:21:5e:91:c3:68:02:3d:
0e:44:20:c2:58:cf:78:a7:e6:58:53:ed:84:ff:26:
6e:ec:be:1a:18:da:93:91:2e:74:53:27:bf:7e:05:
b7:0f:f5:e6:c6:d3:94:1d:38:5d:21:2f:df:b0:2a:
58:ab:e7:de:dc:fe:54:0b:1b:ef:f9:66:62:4b:77:
f5:5f:1e:33:32:41:ba:71:5b:58:2b:77:1a:b9:78:
e3:dc:51:ab:2e:97:eb:50:4f:97:c7:16:97:69:39:
fd:d8:5c:88:f9:2b:d6:0b:4f:a0:79:ae:b7:8d:8f:
6b:5c:4e:04:f0:69:5f:a3:07:92:15:2d:41:1b:ba:
48:ed:1a:05:71:44:90:ab:9c:b1:f4:cf:34:03:b8:
2c:f7:80:fe:bd:e5:19:44:ed:a5:3e:bb:c4:fb:d7:
2b:f1:99:fc:ea:53:84:3d:de:a9:80:16:e9:62:ae:
51:50:46:26:75:33:26:8b:2b:13:54:15:39:f3:d0:
db:dc:e1:9d:47:ba:22:5c:88:dc:90:49:73:fa:60:
2f:c4:67:8d:24:60:57:12:d9:a4:66:8e:09:07:74:
60:11:a0:2f:a6:88:57:2f:ff:53:b1:75:c1:72:54:
24:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5C:D6:6D:51:FF:4D:EA:AF:EA:AF:C8:A0:7D:89:EB:BC:CE:FC:5D
X509v3 Authority Key Identifier:
keyid:02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5b:6d:be:f5:8b:e0:50:ea:75:a8:5a:46:07:6a:2d:b7:62:
d6:b4:9e:f2:de:90:d0:de:f0:dc:58:78:68:49:89:0d:76:7b:
86:3f:f8:85:46:b9:85:ba:64:22:64:10:4e:41:20:2d:f6:7c:
dd:28:81:b3:d8:30:ed:3b:a6:de:c5:21:dd:3d:8e:d5:ae:c0:
e1:61:61:f6:7b:51:4d:d7:40:00:cb:68:e2:6c:c1:ee:4d:d0:
13:21:9e:c8:32:8d:38:71:fb:5e:e6:63:69:17:ef:ce:a7:79:
aa:e9:ea:2e:13:e4:68:18:63:64:04:c7:cb:5a:55:00:3c:28:
1d:7e:53:c2:3a:0b:29:9e:23:7c:cf:0a:ae:74:05:30:b2:f2:
e5:1d:31:75:01:8a:f1:13:da:68:f0:ee:10:2a:e3:15:35:76:
9f:41:d3:21:84:c5:29:da:c0:14:2a:53:2c:b6:44:50:97:ed:
7b:fc:72:9a:32:ad:c9:9e:c2:1d:49:e2:ba:46:2b:90:b8:ae:
28:b0:64:87:5b:e4:91:99:fa:79:f8:04:fb:7f:a8:74:12:f6:
77:6d:76:97:a4:8a:15:f2:e8:1f:e2:8c:53:14:cc:27:b4:49:
3d:91:7a:8b:f4:20:55:e0:a4:8e:1e:82:a3:7a:36:89:55:06:
1c:dd:54:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:09:24 2025 by rpki-client