Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
File: A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft (raw, json)
Hash identifier: T4kKnlwRiszNSLMBTqH6Tpfi1+3wVA2NMGtJtbtspIU=
Subject key identifier: 8A:D5:1B:E8:00:4B:0A:F6:C7:89:2A:DE:1B:F7:ED:11:5B:18:31:AC
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial: 019680FD67CDD89D679689A7548B3F360734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 10:00:12 +0000
Manifest this update: Tue 29 Apr 2025 10:00:12 +0000
Manifest next update: Wed 30 Apr 2025 10:00:12 +0000
Files and hashes: 1: 8uFEs8KT2lHNTf9FsmJqqvY7o28.roa (hash: vboc19xwSNPRyM8I2dQ1/VWhvxJAqCUk+Ws21D+P2qM=)
2: A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl (hash: tJNIV4tjejzQfllY/lwfRjDikXZjycO9UQ2dBxFlttk=)
3: JaJTfkcMlPavkQgIWd6Q5PErN44.roa (hash: xdZi+om1DwYfwvuK4ikXRudvdwfTqYCO5L9ilWGS09U=)
4: jBMHF4ZncYY2dSJ5CHqMIPV8Ofc.roa (hash: 42cb4s8kzaDp+6oFZFM5NFuRsfHrfiqhUgjsGF12wb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:67:cd:d8:9d:67:96:89:a7:54:8b:3f:36:07:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
Validity
Not Before: Apr 29 10:00:12 2025 GMT
Not After : Apr 30 10:00:12 2025 GMT
Subject: CN=8ad51be8004b0af6c7892ade1bf7ed115b1831ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:d2:07:9f:b4:f6:45:c9:ed:35:d6:b3:fe:
f6:0d:ec:ac:f7:2d:38:04:73:9d:84:5c:fd:2d:79:
da:25:c4:a6:c7:36:45:94:c2:4f:41:44:00:86:c1:
4c:99:8d:72:72:b2:e1:1b:b3:56:d2:dc:2a:76:4b:
d1:77:a2:a6:da:09:0e:5a:80:9d:11:ec:bb:8f:80:
c8:66:ce:a8:7a:19:94:23:d9:ab:a1:3b:08:87:36:
17:af:e4:94:f3:9a:e8:9f:2b:0c:52:33:37:bb:5d:
0f:cc:33:ea:4c:90:5f:69:45:a7:b9:24:ba:4d:4c:
76:c1:61:a5:17:96:35:85:69:1f:5e:aa:9f:f4:3e:
b2:5a:8b:f3:9e:1e:9c:f9:89:d1:0f:cd:38:4e:03:
c3:28:71:b4:e3:ed:77:7e:0e:52:ef:a3:8a:29:40:
6c:cc:31:14:e7:b2:4d:b3:e3:6c:cf:f3:53:96:bd:
ce:7e:37:aa:45:92:78:0b:aa:94:91:fb:27:cc:98:
02:62:be:73:1f:27:25:9c:35:0a:26:67:5e:ad:ba:
07:4d:f4:b2:ed:f4:87:b7:f4:5b:34:d1:e2:a8:76:
8f:8b:4e:23:e4:47:d2:21:83:f2:c3:39:0a:fe:48:
72:e9:48:f2:27:a1:7e:9f:45:1c:a3:a3:eb:ec:ac:
eb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D5:1B:E8:00:4B:0A:F6:C7:89:2A:DE:1B:F7:ED:11:5B:18:31:AC
X509v3 Authority Key Identifier:
keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2f:fc:41:57:94:37:23:44:52:03:99:e4:b9:01:8c:40:97:
af:3c:18:03:6c:f4:fb:d4:fa:90:af:d2:21:5c:98:53:87:9b:
d0:c1:a4:39:01:3d:30:7f:7c:70:2d:52:f8:22:fd:75:15:02:
77:f1:ef:da:7c:56:f8:10:fd:51:05:35:9d:05:5c:0e:70:e2:
a6:4c:2e:8a:fc:38:bc:a0:c9:28:51:a1:02:a0:20:53:d2:f9:
28:8c:67:81:d6:6d:c0:21:c8:82:86:ec:7f:54:67:cc:ac:54:
34:03:6e:80:99:8c:2b:05:f7:b3:16:e9:54:95:02:0f:a0:9e:
59:41:57:50:49:17:61:10:c8:c0:37:3d:b9:68:99:82:05:56:
87:cd:7e:90:06:41:64:18:c4:50:ae:c8:93:57:b6:27:26:32:
84:d3:ca:65:ea:07:9b:66:bd:85:25:b3:ac:8f:19:59:67:f7:
6e:fb:8d:5e:dd:e2:83:a2:4c:ff:fe:d5:67:29:ff:b5:4b:a6:
cb:ed:e8:ff:56:92:23:a0:88:24:3c:f4:ee:ce:42:cf:22:96:
c3:58:39:f1:e0:c5:1b:6e:3a:72:f6:74:a0:5a:0a:f5:1c:9e:
ad:2a:60:e2:93:ba:50:5d:2e:e4:e0:11:fb:eb:1b:1f:d0:6c:
7c:35:7f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:53:26 2025 by rpki-client