Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: 821e4dSO+zmphtj8I2GSKCw7wcUIKz4YXy8fCLaxGqg=
Subject key identifier: 4B:FB:FB:DF:72:56:AA:A9:CF:7D:2F:D3:1D:1E:77:25:C7:1F:F1:26
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 019677FB6EFA76A889A97ABFDA9B44738BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 16:01:28 +0000
Manifest this update: Sun 27 Apr 2025 16:01:28 +0000
Manifest next update: Mon 28 Apr 2025 16:01:28 +0000
Files and hashes: 1: 139lyeNlCTZU0BOy4AWB3XIegPQ.roa (hash: VzrpaxikQ2FR1JamVqwQwq75MdkFdQ6cyhvfG8bUdXQ=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: 0xkEKmBd58JSUru0zjdQeyZSTg5jdJG3j70QFPi5Tck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:6e:fa:76:a8:89:a9:7a:bf:da:9b:44:73:8b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Apr 27 16:01:28 2025 GMT
Not After : Apr 28 16:01:28 2025 GMT
Subject: CN=4bfbfbdf7256aaa9cf7d2fd31d1e7725c71ff126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d8:fd:13:96:7a:05:28:7b:e6:d4:43:25:21:
4f:31:95:79:b9:c1:48:05:53:84:99:5c:f6:b2:ae:
4e:2f:96:c7:72:23:1c:44:20:09:da:8c:aa:71:f3:
37:de:31:d9:1f:d8:9b:f1:31:d9:e4:67:48:4e:55:
ca:f2:4f:73:58:c3:7f:dc:7d:21:ce:d4:cd:3f:58:
dd:fd:bb:7a:48:de:dc:45:8f:d6:33:96:f4:ea:6a:
07:e6:13:05:e9:db:16:95:a9:69:79:8e:4b:c0:3a:
7b:6a:e0:65:1c:fc:ea:08:33:a4:aa:73:8b:df:8c:
89:e2:23:78:a1:44:de:60:b5:b8:69:7c:5b:50:a6:
76:d4:6d:ec:87:d2:ee:53:e2:ed:b3:fe:c0:82:0c:
4f:fa:03:f1:90:e5:31:6c:2b:94:51:c9:98:1b:b0:
d8:10:2b:8a:75:5c:c5:c0:e9:54:c3:80:ec:b6:c9:
fa:e5:cc:22:3e:39:a2:4c:ae:0c:cb:eb:47:d9:cd:
8a:c5:29:73:fb:d3:5f:62:e3:a1:72:8c:89:50:7e:
7a:5e:cb:f7:62:87:e2:78:ab:01:6b:66:1e:2f:ac:
31:b5:a1:d6:59:1d:fb:9a:2d:6e:1d:c4:ce:41:75:
db:8c:1c:cd:12:f9:23:53:6b:32:67:33:b7:fb:b8:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FB:FB:DF:72:56:AA:A9:CF:7D:2F:D3:1D:1E:77:25:C7:1F:F1:26
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ab:04:2c:1d:cf:91:80:7c:f2:c3:dc:d0:0c:3d:24:2c:c9:
f0:a4:5f:28:6c:48:b0:df:38:b7:dd:67:26:5b:a3:75:19:fc:
92:39:6c:ab:1b:66:8d:16:91:a5:33:34:0c:ab:fb:18:7b:c5:
00:60:e4:e2:cc:f4:89:42:7e:7f:c4:0b:7e:4c:9e:b4:a2:69:
c6:bc:0f:96:69:e9:8e:f0:29:f3:4e:fe:dd:96:30:41:1d:5e:
26:b0:68:1a:15:a3:b9:c8:3f:be:d7:e4:2b:4a:b1:93:12:57:
d9:28:31:aa:2e:20:a8:29:21:36:31:61:5d:8d:9f:27:94:9c:
8a:d4:98:db:8f:42:63:ad:8e:b6:13:0d:9a:01:03:a7:cf:41:
56:ef:48:ef:20:37:5c:e7:73:6c:67:55:c5:59:f6:b1:c3:ee:
27:e4:f8:a5:36:f3:c3:3b:1d:7b:4a:1d:67:e3:e8:72:75:90:
a9:b9:22:f1:be:ff:1e:d7:92:52:33:49:4c:06:16:c1:25:39:
e0:e6:b0:1c:b0:a0:e4:c7:8a:4e:e7:dd:12:34:13:55:cc:b2:
8a:4b:64:a6:49:5b:e6:2f:b4:99:aa:6a:a1:51:46:6f:e7:85:
4e:65:a2:f2:68:0d:0c:7d:ac:01:c0:dc:b7:c6:ac:f5:c8:ac:
63:0b:43:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:06:25 2025 by rpki-client