Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
File: AObmXtdPBsIjqaScPqbT7uyyOFA.mft (raw, json)
Hash identifier: 7ftuShRwiItHFvqULajCWZ4fkZeN2wiv15pgb6BpvDo=
Subject key identifier: ED:9F:E0:C0:44:75:F1:58:C7:A1:F7:E4:1E:DB:83:07:06:A0:B5:B3
Authority key identifier: 00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
Certificate issuer: /CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Certificate serial: 0196767A07243D7D5413146545159B929C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
Manifest number: 14A2
Signing time: Sun 27 Apr 2025 09:00:30 +0000
Manifest this update: Sun 27 Apr 2025 09:00:30 +0000
Manifest next update: Mon 28 Apr 2025 09:00:30 +0000
Files and hashes: 1: AObmXtdPBsIjqaScPqbT7uyyOFA.crl (hash: Rav5Lc9TiSv/XLqRQU47361xSkDWA2sAgrDbXzjZlFE=)
2: aayHPIzZH8kuE4buX9L9ekn6vNY.roa (hash: l5K0Mav5diQmhRgoJ50XOjjqH5sf6SBC+nvBy0fzfF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:07:24:3d:7d:54:13:14:65:45:15:9b:92:9c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850
Validity
Not Before: Apr 27 09:00:30 2025 GMT
Not After : Apr 28 09:00:30 2025 GMT
Subject: CN=ed9fe0c04475f158c7a1f7e41edb830706a0b5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:2b:38:c9:6c:a0:e8:21:7e:6b:fe:75:01:
92:4e:d0:34:67:a5:7c:72:8b:46:ed:09:64:7f:f1:
09:6e:68:e9:6d:59:48:08:35:36:e8:ce:e0:14:c8:
2e:7f:73:db:c0:f5:fd:89:78:34:44:50:23:8a:f4:
ec:41:f7:e1:f6:72:42:a1:8f:9a:3f:f0:ac:dc:14:
9b:8a:98:5d:a7:fa:37:00:39:a4:b7:f8:5d:b0:dd:
98:ac:d0:e8:db:2e:7d:61:2f:a0:a5:79:68:0e:ac:
a8:37:80:43:3e:bd:1a:ea:18:6a:21:fa:09:10:a5:
0a:e6:99:6c:2d:d0:e6:c6:78:f5:c7:df:fa:3a:38:
07:d4:20:ec:db:02:2c:66:2f:f8:13:ef:91:53:de:
c6:65:5f:31:bd:dd:bb:78:c2:08:85:f5:9a:c8:a9:
eb:45:32:8d:29:ea:f8:66:d2:b0:44:8c:72:1b:53:
d2:fa:6e:44:d2:aa:80:e2:d4:e9:0f:1d:e5:58:34:
92:41:0b:93:9d:21:31:08:2b:15:ce:d3:79:46:c2:
88:48:12:83:e0:15:75:f5:fc:6c:8f:06:84:86:44:
ef:62:06:d7:2a:03:5d:f6:a0:f4:37:db:01:7b:c0:
9f:6e:4c:0e:f6:10:69:a7:f6:ca:6e:e4:d1:4e:2f:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9F:E0:C0:44:75:F1:58:C7:A1:F7:E4:1E:DB:83:07:06:A0:B5:B3
X509v3 Authority Key Identifier:
keyid:00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ce:ea:f1:b4:7e:d7:93:b4:1b:8b:08:0a:71:47:1e:00:3e:
21:1f:ab:94:81:7b:5d:9a:40:6b:c3:e3:1e:34:7d:e5:42:2d:
b4:98:8f:ca:11:db:f1:37:8b:07:89:e9:bc:85:31:64:f4:ba:
e9:8f:20:36:ef:95:4b:d7:1e:65:61:5e:33:db:37:eb:23:86:
42:c3:f0:60:29:bd:2e:f7:24:48:cb:0d:16:84:f1:45:77:e7:
1d:00:00:af:88:f0:d3:03:7c:f7:41:39:4e:cf:47:f2:10:ff:
75:b6:0b:ce:a7:22:f1:18:07:f5:2f:64:bc:ef:17:4e:ac:b8:
06:33:f3:46:44:0f:a3:29:93:de:b9:ef:9a:71:82:cb:94:fb:
91:19:71:87:24:2b:a9:e7:fd:ae:3c:b5:2e:f1:00:96:19:bf:
56:f0:0b:70:55:d0:07:6c:2a:cc:5e:2f:fe:0c:50:bd:0f:dc:
bb:a6:5b:fe:eb:21:f5:b7:1d:85:de:32:3b:c3:9d:a9:31:e6:
4b:3b:32:2e:26:68:90:9a:70:30:b0:54:14:31:88:6c:71:64:
99:bd:81:3c:fe:c1:2e:df:ee:f8:b1:ef:18:81:a4:0e:7d:47:
7b:a5:d9:14:2b:76:ac:66:ac:f5:76:4d:b9:6e:76:ff:ac:09:
a7:f2:f7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:02:42 2025 by rpki-client