Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
File: U_azaGcjiqcYvhfm5zzkCpiVeKA.mft (raw, json)
Hash identifier: dIOHknICo3ZDiiA6Mw2BlpklMq+qwcnno69oU0KaKO8=
Subject key identifier: 4B:CB:BC:52:AA:3C:C5:37:64:5D:2E:87:3D:9C:D2:59:C5:88:B0:F5
Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0
Certificate serial: 01967E33F8B1EB06446EBABEAC70B0AC7EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
Manifest number: 1220
Signing time: Mon 28 Apr 2025 21:00:57 +0000
Manifest this update: Mon 28 Apr 2025 21:00:57 +0000
Manifest next update: Tue 29 Apr 2025 21:00:57 +0000
Files and hashes: 1: U_azaGcjiqcYvhfm5zzkCpiVeKA.crl (hash: 73MOj6LIXXge2oLEsXD86KZ1y+TF8gsJg3AY6NyOq0Q=)
2: qm8-rtz9dvYOYtDUdJhFuQx2T1s.roa (hash: nzPHoD1cZfssTTQypaloowKyO3PlyRu1kf/LUUjI60k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:f8:b1:eb:06:44:6e:ba:be:ac:70:b0:ac:7e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0
Validity
Not Before: Apr 28 21:00:57 2025 GMT
Not After : Apr 29 21:00:57 2025 GMT
Subject: CN=4bcbbc52aa3cc537645d2e873d9cd259c588b0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:42:d4:39:87:21:b8:75:4a:aa:6c:09:d2:
06:81:99:b3:d3:d8:a8:52:bb:94:17:26:20:b0:4e:
8a:30:c6:32:2e:9a:0a:39:8e:0b:34:83:9a:03:1d:
46:6a:4c:d8:b1:b4:fe:78:c7:79:0f:b4:6e:7f:9c:
d5:68:b9:ea:72:87:b0:8d:ab:15:50:0b:bc:e0:32:
c5:a1:c2:ce:d3:28:40:60:1e:23:90:ec:d9:b3:f2:
94:26:94:99:59:6d:18:76:ac:d2:9b:89:c0:d1:08:
7f:f2:cc:83:be:ea:7d:39:b5:93:48:6d:e5:a7:9f:
44:74:3b:68:42:43:78:e0:1b:15:c7:3b:0e:c0:a3:
7d:d2:19:4d:04:07:f6:5e:79:cd:70:02:cb:e0:0f:
72:ec:da:3e:4f:c7:9c:87:98:66:74:8a:5a:29:65:
5b:8f:e8:a3:55:09:35:2e:c5:f0:26:b7:36:be:35:
24:3f:bd:29:8c:c6:9b:ad:ec:cd:fb:a3:07:c5:fe:
fa:49:87:0e:8a:37:9c:49:dd:54:b9:19:3c:34:30:
a5:a8:c4:41:30:30:f0:c9:5c:b1:c4:22:12:db:c4:
d5:a3:cd:ca:8f:63:b8:82:56:b2:4a:57:f1:51:ac:
84:81:a9:fa:19:8f:49:cf:50:2c:3b:64:90:12:b1:
9b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CB:BC:52:AA:3C:C5:37:64:5D:2E:87:3D:9C:D2:59:C5:88:B0:F5
X509v3 Authority Key Identifier:
keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:19:c2:9b:a8:47:bd:44:02:5f:4a:7e:6f:13:61:63:6f:4b:
b9:9f:85:55:0b:fe:80:68:a7:48:72:94:64:d4:66:6b:5b:07:
0c:a0:b1:9c:b7:bd:55:80:54:88:a4:0e:98:55:fa:fb:10:d4:
dc:bf:75:b9:8f:bb:4d:05:61:ee:8e:6a:e8:da:cd:31:07:85:
a4:b6:d7:78:2d:7e:f9:4d:69:56:a0:04:0b:6d:ae:79:f5:42:
70:5e:92:68:c9:82:25:e9:19:66:c8:19:79:d8:6c:b0:27:f4:
c8:76:99:9d:63:9d:13:48:64:e8:08:0b:1e:43:f6:cd:a5:97:
7d:97:f3:b9:dc:f7:44:28:cd:39:5d:92:0b:7c:84:68:a1:4b:
a0:be:88:53:5e:f8:a6:7f:b1:2c:99:8d:fc:8a:46:3b:55:f3:
5f:d7:00:c3:96:2e:0f:51:cb:aa:ce:7d:8f:14:a0:46:b1:7f:
84:0e:10:b8:cf:85:1c:72:6d:e3:83:1c:f8:2f:fc:fb:6d:66:
e5:14:d9:f2:02:fc:94:9d:d5:1b:e0:fb:64:66:77:00:d5:0f:
98:8a:e8:d7:a0:93:28:20:2d:37:f8:c8:bf:5d:82:48:dc:9b:
33:c4:8f:fb:b7:08:0b:b1:6f:e9:fe:49:8c:92:2a:4d:ba:f5:
56:b3:ef:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:11:07 2025 by rpki-client