Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
File: ATNUQlFNUkm1FDz9-CEha7XFKUA.mft (raw, json)
Hash identifier: n5apy6rJpwShC0zoScRwgcrI2Ui7MS9itoTmrPfh/4k=
Subject key identifier: DB:1A:A0:FF:7B:64:F6:22:06:FB:6D:D5:87:C5:18:15:37:07:EF:80
Authority key identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
Certificate issuer: /CN=01335442514d5249b5143cfdf821216bb5c52940
Certificate serial: 0196741D80F4BCE298C914A76DA37E96D24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
Manifest number: 126A
Signing time: Sat 26 Apr 2025 22:00:12 +0000
Manifest this update: Sat 26 Apr 2025 22:00:12 +0000
Manifest next update: Sun 27 Apr 2025 22:00:12 +0000
Files and hashes: 1: ATNUQlFNUkm1FDz9-CEha7XFKUA.crl (hash: B1m03MaoTlYEDYtQVfByc1SZQdvykMQzMqbXSxQZckw=)
2: Yp_lUqP28vEyFCPRb80UtGDXNsg.roa (hash: ywVUWmL4GSGoY6WsMRyetGJGnvc6akPYgfQXjeu4wCo=)
3: jA79aGVqPI-PvZSOlUeJ0j64c1Q.roa (hash: cpbrUzoeXFWleCog+F05RG8Xxbfmz0h5Ia9JXBRNANY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:80:f4:bc:e2:98:c9:14:a7:6d:a3:7e:96:d2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01335442514d5249b5143cfdf821216bb5c52940
Validity
Not Before: Apr 26 22:00:12 2025 GMT
Not After : Apr 27 22:00:12 2025 GMT
Subject: CN=db1aa0ff7b64f62206fb6dd587c518153707ef80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2b:b0:48:31:4a:59:aa:b7:a4:de:07:e0:5d:
2d:d2:a1:88:c4:50:47:48:c4:7c:32:98:f8:76:73:
24:5f:52:57:32:8b:87:8f:a5:bc:1a:52:1f:76:e5:
41:3c:98:e5:82:63:1e:01:4a:91:bc:5b:09:a6:35:
9b:0b:a2:be:cd:fc:35:df:d2:22:ef:30:34:f3:2e:
60:32:46:bc:99:41:4c:6d:cf:33:ee:5f:8f:ab:17:
19:87:ea:91:9d:34:29:2a:39:b2:c0:1e:8b:c6:84:
20:ad:aa:bd:19:66:fb:8e:08:5a:18:2f:d2:56:bc:
8c:64:37:f2:c1:59:19:e2:f4:3a:42:9d:21:d1:6a:
aa:24:2d:84:30:ab:d8:72:75:fe:c8:c7:e0:97:b5:
72:a9:97:cc:41:e1:52:2d:79:c2:80:9c:cd:0c:a6:
78:94:20:33:fd:62:a6:ee:51:0e:a4:d9:71:43:43:
27:65:9d:11:15:56:72:fa:1e:9e:a5:8a:3e:05:3f:
ad:0c:45:52:a1:89:3b:5c:7e:6d:29:7b:c8:d0:c7:
34:6e:0e:54:bd:81:0f:f4:73:2d:40:6c:38:de:37:
5d:dc:8f:97:37:d4:23:aa:e9:65:67:04:ac:5b:87:
79:9c:aa:b0:a5:1b:5b:f4:a5:1c:37:d8:40:a9:a1:
fb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1A:A0:FF:7B:64:F6:22:06:FB:6D:D5:87:C5:18:15:37:07:EF:80
X509v3 Authority Key Identifier:
keyid:01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:50:b9:1b:19:f8:fa:56:36:de:6b:15:ff:ea:b2:72:f5:2e:
8a:64:93:ea:e5:c0:c3:0d:11:d8:4a:c5:2c:04:61:ec:77:b8:
78:99:92:3d:ef:d8:ab:3b:60:c9:7f:1f:97:73:78:86:a3:1b:
0a:31:2f:4d:b8:dd:a5:a3:19:8b:14:85:69:9a:8c:ad:87:cc:
e9:c0:d9:df:20:d3:1e:98:eb:7b:d8:3b:1c:e9:33:ab:84:d2:
1b:de:1f:04:f4:90:51:7e:39:db:c8:5a:b0:5d:4f:13:a7:73:
ff:36:01:ae:fe:83:88:9c:3e:cc:d1:ee:97:8f:bc:5c:aa:a2:
d2:d3:c5:c4:0e:77:4d:54:33:a7:6d:0e:d7:d3:90:ba:43:bb:
91:29:d1:a8:cf:5f:6f:96:37:e3:6c:fc:79:73:fc:c2:37:6e:
c7:48:85:2a:ae:c8:09:94:a7:70:46:b3:3f:53:f2:14:bf:b4:
71:d2:fb:bd:95:79:2f:57:01:e6:b0:64:2f:bc:3c:94:57:17:
03:60:60:83:af:04:42:49:4a:6f:d1:bf:43:ae:93:8f:13:3e:
54:b6:ce:f0:1c:53:45:09:f6:42:52:2b:36:f2:41:7f:33:b5:
20:c9:03:2f:f2:87:7e:16:d5:28:d6:64:eb:2a:2f:a7:48:56:
38:c8:0c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:06 2025 by rpki-client