Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
File: A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft (raw, json)
Hash identifier: Y+zrk4tNygTT02PesQ2L6AtG8AEOT6ddN9/9/3fmgaY=
Subject key identifier: 43:62:3B:AD:B5:DA:CE:13:57:B9:F1:1B:CA:2E:43:23:10:74:E2:EE
Authority key identifier: 03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
Certificate issuer: /CN=039916dc890f08fe55c75bb4439d6016704b7a61
Certificate serial: 019685114122F05A967FC480F843B4C227F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
Manifest number: 0A8B
Signing time: Wed 30 Apr 2025 05:00:22 +0000
Manifest this update: Wed 30 Apr 2025 05:00:22 +0000
Manifest next update: Thu 01 May 2025 05:00:22 +0000
Files and hashes: 1: A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl (hash: 54OpEmkuMhlltRwGu6KO7cjVf/QKsWVi25N8LJD7aAE=)
2: PMNnc8UiTx_1PdJEiYIJsVqvM18.roa (hash: glo0oQZnzXQ/WEXl4o++QXVkyGkwmaHI6OvTjJhSMHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:41:22:f0:5a:96:7f:c4:80:f8:43:b4:c2:27:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039916dc890f08fe55c75bb4439d6016704b7a61
Validity
Not Before: Apr 30 05:00:22 2025 GMT
Not After : May 1 05:00:22 2025 GMT
Subject: CN=43623badb5dace1357b9f11bca2e43231074e2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1b:3f:97:b2:c9:2f:d8:84:a3:75:90:f4:da:
b5:45:0a:e6:4d:f8:4b:7c:7d:2c:68:57:0e:b1:c5:
7b:cf:13:3b:a7:43:de:5a:8c:14:a4:81:ee:5e:dd:
b6:ad:87:58:4a:fc:98:b0:65:36:70:f1:62:94:c6:
f1:67:dd:f5:89:4c:21:da:50:01:a5:40:91:66:11:
35:91:bf:57:03:c2:8f:a7:ff:13:d0:88:2d:6f:0f:
fd:dc:42:6b:f8:80:9a:86:83:81:49:ea:77:b6:30:
57:47:95:57:b1:c1:75:4b:cf:74:9a:af:80:99:7a:
dc:76:ae:6b:7e:8a:74:fc:ef:47:5d:26:47:a0:c7:
7c:fb:e4:9c:07:6b:74:c5:33:ec:23:a6:d9:b8:16:
bb:70:b8:1b:be:df:01:30:df:9e:13:e2:db:7f:98:
39:8f:ca:6f:cd:09:9e:6a:6a:7c:b2:d0:df:be:d1:
4d:f9:8f:09:6b:a5:e7:ae:df:82:8a:83:9c:ef:55:
6c:ef:fa:5f:8c:49:35:04:8d:db:4b:5a:0c:6c:6e:
fc:d2:de:68:ed:91:7a:32:e9:9b:d8:ad:15:a2:07:
f8:d1:76:ca:45:e2:7d:3c:22:92:72:c3:3e:d2:88:
8d:02:9b:44:76:aa:9b:ae:1e:78:af:bd:8d:d3:79:
de:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:62:3B:AD:B5:DA:CE:13:57:B9:F1:1B:CA:2E:43:23:10:74:E2:EE
X509v3 Authority Key Identifier:
keyid:03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d1:13:61:e3:cb:94:56:fc:d1:22:25:56:79:85:92:fd:b2:
40:7d:78:f7:90:c9:5c:45:93:b0:87:6a:c9:fc:23:3d:91:6e:
4d:22:31:e5:45:21:26:3e:b6:55:51:d6:f1:6d:c9:45:e1:65:
5d:58:82:e2:c7:76:af:43:31:f5:e4:82:70:ab:41:c5:fa:f7:
bd:58:1d:7b:6c:7f:3b:01:c6:4c:c4:10:8c:cc:44:ef:68:52:
bc:53:f9:a7:bf:77:b4:f3:4a:da:8d:08:2a:0b:83:da:a6:66:
82:89:ca:5d:3a:cc:cd:33:ed:19:89:f6:81:cb:33:da:f5:20:
ae:3a:8e:b2:33:f6:77:27:f1:d8:e8:7f:66:33:91:39:2a:d1:
db:26:70:ac:01:37:48:83:ea:dd:aa:9f:72:88:25:42:4e:31:
69:bd:6f:48:f8:4b:38:1c:52:58:e6:d4:b3:4e:26:7b:4d:1c:
9d:46:3a:8a:ae:33:2a:c5:e5:b1:89:7c:6c:a8:43:c2:fc:cc:
20:53:83:77:4d:f6:42:e8:82:08:1a:d9:14:fd:a7:fb:c9:96:
92:e2:98:2d:a7:06:fa:3d:24:d5:23:bc:f6:68:af:cd:e6:0e:
45:f3:e8:43:e2:ad:ef:c2:7c:cd:26:6c:2e:7e:48:9b:4c:27:
e1:37:6e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:33:28 2025 by rpki-client