
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
File: AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft (raw, json)
Hash identifier: 3F84V52vAXJuadHl06AnRqbBwlLSny+hOiYMbc/IAqU=
Subject key identifier: 2C:E7:0F:C2:2C:EF:46:FF:02:83:1F:80:6C:47:A2:6B:C1:53:E8:D9
Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Certificate issuer: /CN=0007534eb77caa836f8f118630164e0236e5fe86
Certificate serial: 01968210C8078098807B31838D7F10896AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
Manifest number: 0A43
Signing time: Tue 29 Apr 2025 15:00:59 +0000
Manifest this update: Tue 29 Apr 2025 15:00:59 +0000
Manifest next update: Wed 30 Apr 2025 15:00:59 +0000
Files and hashes: 1: 7elRG4gqnvY-kvee5EC-ljUx8zc.roa (hash: EBapcQW4LSNex4n/3b9OtP2KhuUXB5IUoQf2KZKkJ6Q=)
2: AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl (hash: Mpi9OQs2GksAPUfuHodPhCB/HFsO/+WxahrnO26a1gc=)
3: GAzN8JgljKfA3A30CpTpB9I-ljg.roa (hash: rKanLHq74yk8hIMHAP3lf3yTM47zrxq0k/XrA6g5TqI=)
4: KlGeCuL83ckpFDxEzckjMn7_6RE.roa (hash: sQSDNJGP0PRAc42NznmCEsFt8+XssPeUkQMlKcFGyeg=)
5: cI0Z3sLe1xjrCwyg19NbzVWgf58.roa (hash: RgqBJJ2OAbbh0xonFH0+36oQyNXiwKW4rTJMbCMMDzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:c8:07:80:98:80:7b:31:83:8d:7f:10:89:6a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86
Validity
Not Before: Apr 29 15:00:59 2025 GMT
Not After : Apr 30 15:00:59 2025 GMT
Subject: CN=2ce70fc22cef46ff02831f806c47a26bc153e8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:2b:3f:10:b0:2a:91:5e:c0:b1:42:0b:74:
86:f7:a1:a2:5a:5f:0e:b4:5d:46:2f:fc:5e:c2:a6:
f5:43:1f:4f:30:6d:4e:2e:22:4e:4b:e2:79:d5:34:
fb:41:60:3f:f7:4b:86:40:f8:7c:72:18:d7:bb:60:
11:31:1a:3f:99:9e:11:be:17:30:7d:b1:33:5b:10:
bb:b3:2c:26:7b:e5:f2:ce:59:07:f8:7e:21:fe:48:
b7:3e:56:e5:19:3d:46:88:d1:07:f4:3b:f4:aa:91:
cd:06:b6:6f:61:c6:07:02:fc:78:44:57:5a:fd:88:
b5:02:ca:bc:73:84:d6:85:96:90:6b:bc:6f:97:cb:
fc:28:68:48:b8:c2:09:0b:17:76:74:4b:12:43:a9:
5f:6f:69:da:27:50:a0:87:35:07:a5:6e:46:6a:77:
af:eb:12:69:7d:ea:1c:d1:94:95:4c:6d:a7:e2:de:
77:8c:58:05:ec:4c:23:a4:af:9f:b1:94:22:46:8f:
c5:75:39:3a:c9:1b:d5:35:27:5a:3b:91:18:44:54:
8d:bf:2a:c3:f8:1f:81:10:ea:47:ce:da:ba:e1:38:
73:36:56:89:a4:23:ed:9b:11:72:c0:7e:03:80:c0:
29:d7:f5:ba:ec:83:8d:e0:09:d0:7c:99:1b:98:49:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E7:0F:C2:2C:EF:46:FF:02:83:1F:80:6C:47:A2:6B:C1:53:E8:D9
X509v3 Authority Key Identifier:
keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e9:d6:87:f8:54:64:d0:11:de:c8:ca:17:31:6b:89:17:f9:
93:36:7a:1a:71:fd:2f:5f:4b:3d:ab:16:0e:9c:8a:17:27:3c:
54:ba:f8:75:8a:67:d6:1e:49:10:d9:c8:5e:16:6a:a2:c1:e6:
78:ce:61:77:8e:93:98:70:61:0b:bf:46:de:12:48:52:a4:93:
d5:87:4f:6b:39:c0:31:0e:a9:a4:c0:fb:f7:7c:44:99:c9:da:
73:1e:c4:71:a2:1e:d0:ca:3d:a3:47:8b:99:e2:3c:78:2e:a0:
3f:fc:5a:56:5b:85:67:25:be:8c:ce:65:7b:ec:61:e5:dd:5a:
10:18:71:9f:72:58:f9:0e:53:9a:20:bf:f7:89:10:ce:d1:58:
85:c8:ab:18:86:35:02:21:74:c8:02:ba:dd:ab:04:55:a1:04:
65:11:03:51:3a:da:0b:97:ea:1d:97:84:ba:d7:d4:4a:55:2a:
d8:9e:f4:41:eb:8e:88:8a:73:d1:ee:45:9d:3f:60:68:53:d9:
3b:03:6f:9c:44:41:be:6e:2c:d7:97:b2:c5:77:9f:0e:21:b5:
5d:52:d2:f0:fb:4a:53:92:27:04:0f:40:64:75:bc:6b:36:ec:
99:72:c9:03:2e:76:64:3a:49:8d:38:81:a0:ed:eb:90:98:5a:
ca:d5:c6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:09:38 2025 by rpki-client