Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier: CNYfGKoQXWI7F0KNEmN5tpViK/oHqq56VGcDOK7lMPU=
Subject key identifier: 4D:1C:31:B5:17:C5:FE:C9:DF:EC:FE:63:78:BA:FB:D9:08:57:ED:D5
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 019681A31275903DC11ACE600F35E1C21C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number: 0E94
Signing time: Tue 29 Apr 2025 13:01:09 +0000
Manifest this update: Tue 29 Apr 2025 13:01:09 +0000
Manifest next update: Wed 30 Apr 2025 13:01:09 +0000
Files and hashes: 1: U87y99J1siFcY1ZoT18_zMMUqw8.roa (hash: WlkxlG9RIuCR4qy7OuSRfiHWs7ZtaSsDc6kVoZ9JKfA=)
2: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: hNnnnfj6/0zcnamRcw9Id4FPs9GMqe5kCAnxFuRcvDE=)
3: t16Nt49ySAy36uwAiD0PGu1Vpfg.roa (hash: ad44+rctUZO6EQ8Ns0r6TEi9u2Ekz8ljDyuPV/oNu1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:12:75:90:3d:c1:1a:ce:60:0f:35:e1:c2:1c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Apr 29 13:01:09 2025 GMT
Not After : Apr 30 13:01:09 2025 GMT
Subject: CN=4d1c31b517c5fec9dfecfe6378bafbd90857edd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:bc:50:5e:70:2b:da:e1:6e:7d:7a:4c:d3:
2d:b6:6f:04:b1:4b:7d:bf:45:f3:de:bc:89:df:2e:
1a:0b:72:e0:66:3c:7d:6c:9f:15:d0:58:c7:1a:9c:
08:17:b9:33:a0:0a:76:51:e8:14:0c:c2:6e:fd:dd:
5d:1e:61:d6:61:7a:20:2b:af:21:06:db:91:92:c1:
a9:1c:01:33:87:c1:67:44:67:3f:f9:6f:07:45:41:
95:6b:a2:4b:8f:24:ea:92:d3:0e:17:26:05:78:3c:
b9:e4:12:cd:57:26:42:f7:7f:c5:ff:d9:2d:8f:68:
e0:d4:f1:c6:6b:0d:cb:20:16:0d:0d:75:b4:04:29:
3b:96:ec:a2:cd:e3:b5:4c:8c:44:e5:8b:c4:bd:a4:
1c:5c:4c:9e:f4:1f:e6:e7:29:4d:79:e0:4f:64:1f:
bb:9d:34:55:aa:9e:f1:59:f2:2b:2c:62:e1:b3:ee:
44:89:fd:92:9b:3b:b2:bd:9a:51:7f:65:bc:70:85:
8b:32:cd:ec:fd:f3:10:0d:f4:8c:01:0f:01:97:66:
3c:c3:4b:27:47:53:c7:18:f0:c2:85:b9:e0:dc:bf:
ab:47:d2:5f:98:49:bb:19:f8:81:0c:83:6e:26:11:
37:4d:3d:1d:46:5c:f6:3a:9d:2b:9b:27:b5:34:7e:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1C:31:B5:17:C5:FE:C9:DF:EC:FE:63:78:BA:FB:D9:08:57:ED:D5
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:de:e3:0f:07:5c:97:34:9b:ec:e6:37:e9:e3:8f:fd:05:35:
5b:e2:bb:bd:c5:c9:a9:c7:97:22:e8:43:4d:3a:b4:c5:da:a2:
b9:d8:f4:65:29:6e:23:a4:72:67:97:b5:24:8f:1a:9e:25:4f:
35:f2:78:61:06:e1:ec:56:76:95:c7:57:a3:b9:78:45:27:36:
f7:08:7d:59:98:fb:fa:89:07:18:17:a2:dc:3a:05:6f:7d:4c:
46:2a:00:95:04:83:24:10:a2:e1:a0:62:d9:1f:19:96:63:43:
95:48:77:20:e1:b7:f5:15:5c:9a:20:2f:9e:3c:d8:e1:c9:f4:
0e:40:50:3f:db:02:21:be:35:02:10:5a:1d:ab:52:dc:c8:e8:
0a:cd:4f:f4:99:28:c2:b6:de:83:d5:77:fd:38:cd:09:d1:be:
72:fc:94:97:e7:64:7c:62:95:9f:b1:ff:a5:21:71:c0:93:af:
d0:24:00:1d:a2:85:2a:f5:81:1d:34:27:49:a8:26:80:8f:23:
84:c8:cf:8c:d0:90:c9:59:29:12:a9:90:eb:0f:0b:2f:2b:da:
82:44:5f:a8:90:7c:ef:ca:72:49:fb:a1:14:99:12:5f:6a:0f:
0c:a9:ff:a3:ee:36:1c:14:5b:24:0a:af:0b:41:4d:1f:82:f2:
e3:c6:bf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:17:24 2025 by rpki-client