Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
File: aomTYnatLRhxB9-3QAeTADrBSac.mft (raw, json)
Hash identifier: xyDVYJwLjgNXn0bLHec9ebMXGlAFmsvQF36k6WZ8rwQ=
Subject key identifier: 83:1D:78:CC:5A:E4:BF:B2:3B:21:51:B8:5E:5E:CA:A0:52:55:D8:F5
Authority key identifier: 6A:89:93:62:76:AD:2D:18:71:07:DF:B7:40:07:93:00:3A:C1:49:A7
Certificate issuer: /CN=6a89936276ad2d187107dfb7400793003ac149a7
Certificate serial: 01967567541B24337DB80297BFD6CAFA25AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
Manifest number: 149D
Signing time: Sun 27 Apr 2025 04:00:28 +0000
Manifest this update: Sun 27 Apr 2025 04:00:28 +0000
Manifest next update: Mon 28 Apr 2025 04:00:28 +0000
Files and hashes: 1: aomTYnatLRhxB9-3QAeTADrBSac.crl (hash: I4nE9vTi+Fwta5pW7Rrc/BaaTp5W73CaA8vDWV+6mE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:54:1b:24:33:7d:b8:02:97:bf:d6:ca:fa:25:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a89936276ad2d187107dfb7400793003ac149a7
Validity
Not Before: Apr 27 04:00:28 2025 GMT
Not After : Apr 28 04:00:28 2025 GMT
Subject: CN=831d78cc5ae4bfb23b2151b85e5ecaa05255d8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1c:72:6b:77:dc:b2:d7:2a:6c:6b:22:4c:d6:
43:f3:d6:ea:55:44:71:e9:97:7b:89:c0:37:92:de:
f6:58:29:65:f6:56:fa:94:fa:dd:19:31:21:40:52:
11:b7:fb:1e:20:bc:6b:2c:7e:06:a0:95:a2:ef:73:
b1:3e:ea:ef:24:35:3f:8e:ae:ef:19:17:82:48:8d:
ab:c7:21:6b:08:39:d1:88:9e:37:b5:bc:8f:dd:2b:
96:e5:f2:88:4c:56:11:2c:b5:2a:9d:65:eb:49:f0:
b8:7a:79:65:f0:93:0c:76:d6:bc:b4:3b:dc:a5:59:
27:4a:52:7e:ea:08:d9:d9:7b:d3:ca:3c:97:fb:53:
0a:14:0e:bf:68:80:8d:56:b9:c3:bf:15:d5:4d:39:
3e:9c:3e:6b:4d:ef:e0:98:b7:ad:bb:94:55:9c:9b:
4c:c3:9d:7f:42:5c:e6:40:cb:ac:32:d6:39:00:6c:
9c:00:e9:b8:ab:09:8e:9c:18:bb:f2:3c:a0:3d:73:
59:fd:0f:c2:b8:bf:51:b8:0b:31:bd:3a:c0:1b:c4:
5c:be:5c:d5:fb:2b:81:0c:f7:05:77:e1:a0:48:d4:
ef:ef:59:c3:c6:f3:55:b2:b4:e1:2b:1d:1f:b8:b1:
c2:b3:1c:71:05:ce:0e:97:6c:b7:dd:64:a8:7d:9f:
99:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1D:78:CC:5A:E4:BF:B2:3B:21:51:B8:5E:5E:CA:A0:52:55:D8:F5
X509v3 Authority Key Identifier:
keyid:6A:89:93:62:76:AD:2D:18:71:07:DF:B7:40:07:93:00:3A:C1:49:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:58:64:c5:99:84:1c:61:00:07:11:d5:ed:e5:85:61:64:d7:
31:37:74:81:9a:18:94:ca:7e:5d:d1:1f:60:c9:94:74:fd:31:
93:98:4c:8a:d3:9c:c1:13:92:99:15:bc:34:92:92:bb:97:55:
66:fa:b0:09:22:2e:d9:5b:4c:6e:bb:20:45:cf:c5:6e:61:6b:
9c:d2:0a:52:f0:99:74:20:37:58:68:2a:b0:0c:e5:33:d6:76:
04:b7:d2:74:e8:9d:37:79:20:9e:11:7a:9e:3f:81:f4:70:b8:
28:86:7a:a7:82:e2:67:a7:e6:68:df:82:df:bb:fe:4c:0a:c7:
21:e5:93:8f:74:42:1c:db:02:50:19:1c:88:7d:3c:ac:8d:63:
05:15:e3:00:06:6d:e9:34:57:a6:cd:e8:f0:b8:d3:b2:93:58:
af:43:0d:2c:bf:c4:42:81:9d:86:9e:37:b0:19:eb:f4:3a:c1:
22:bd:9f:50:d2:de:7f:99:ed:60:59:71:82:54:0c:16:b4:a1:
06:0d:c1:2d:79:25:d4:6d:c4:30:7b:6c:04:e0:c4:da:6d:ff:
54:ab:85:e8:df:5e:96:57:f7:48:63:78:7d:e4:04:e1:ca:57:
e8:61:d4:00:4f:0a:a3:5f:44:da:f2:7f:4d:8d:6d:2d:6b:dd:
62:7f:de:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:43:40 2025 by rpki-client