Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
File: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json)
Hash identifier: uQ2Z+aaIOJz4xabAnXvDDWkuOt1ZIMDBwS0dnsq6ugo=
Subject key identifier: 19:44:9D:E4:0C:87:A9:37:0B:7F:84:EF:7A:FD:5A:59:4F:8D:79:12
Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
Certificate issuer: /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Certificate serial: 01967EA1E8E253E6BB5BFCD161ECC6B30E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
Manifest number: 0359
Signing time: Mon 28 Apr 2025 23:01:02 +0000
Manifest this update: Mon 28 Apr 2025 23:01:02 +0000
Manifest next update: Tue 29 Apr 2025 23:01:02 +0000
Files and hashes: 1: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: TpVeZONXLSsF64XoVcizQv05oWoL1/mi3iSuBTvpQHI=)
2: waNULbcRhTUiNsANSLGcB4J4itI.roa (hash: 9dW8NgonrZBc4IChXkCIdxerNGPGCgwx9gaoEJblTYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:e8:e2:53:e6:bb:5b:fc:d1:61:ec:c6:b3:0e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Validity
Not Before: Apr 28 23:01:02 2025 GMT
Not After : Apr 29 23:01:02 2025 GMT
Subject: CN=19449de40c87a9370b7f84ef7afd5a594f8d7912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:f0:9e:19:27:f9:69:0c:27:7c:14:19:99:
8c:f5:ae:33:f7:db:1f:a3:cd:60:cd:59:92:e9:30:
df:55:4a:e6:72:df:1c:61:a9:a5:5f:13:47:5f:62:
53:ae:78:91:07:f5:8b:8e:2f:41:7c:7d:dd:92:29:
c9:9f:57:12:3d:16:83:5c:03:ef:51:0f:0d:b5:17:
42:7b:cf:77:b8:63:35:c1:1e:21:b9:ae:61:de:0b:
2d:a4:7f:a9:f1:19:f1:29:1d:37:8d:1d:2f:cd:7c:
eb:4c:86:4c:17:aa:fb:f6:dc:9e:c5:76:2a:68:6c:
18:3c:23:f4:b8:73:bf:e1:fa:a4:a2:4a:1d:2e:cf:
2f:f2:ed:d5:b3:46:cc:e6:8d:8b:40:ca:84:ad:86:
90:e7:0a:a2:b9:93:95:dc:25:8d:32:35:4e:7f:22:
6f:8a:69:6e:ac:be:4f:52:64:29:82:95:18:52:ec:
25:8a:09:23:7f:7b:e1:1a:c4:6e:0b:13:67:f5:a4:
d6:de:39:9d:7b:cd:49:66:d7:ad:35:90:8d:c3:6f:
3a:ad:4d:fe:6d:64:4a:d0:59:0d:7a:bf:31:5f:e1:
d1:d2:60:c6:db:bd:e0:14:8e:d2:99:34:78:d9:da:
4e:4d:13:23:b6:e0:21:8b:04:2b:ad:c7:c5:8b:6d:
40:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:44:9D:E4:0C:87:A9:37:0B:7F:84:EF:7A:FD:5A:59:4F:8D:79:12
X509v3 Authority Key Identifier:
keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:42:92:e6:bb:56:6d:22:96:aa:aa:b3:3c:02:ca:cc:3a:40:
38:e4:22:f3:e7:9d:18:72:bb:88:ca:71:25:50:eb:03:e5:0c:
a7:00:27:6b:f8:f4:9e:8f:5d:4e:8c:a5:4e:12:22:7f:5c:65:
8b:e6:c9:4c:71:2f:d3:3f:ee:06:03:c0:81:af:a9:54:5c:65:
16:6e:6f:66:57:e7:fa:cc:41:0b:35:b0:3a:e1:04:81:0c:ba:
f1:0a:37:91:1d:95:3c:a5:13:3e:6b:c4:aa:98:8f:e8:7c:2a:
19:89:51:11:f4:2c:2e:19:1f:22:31:72:88:ad:83:d3:ee:fc:
d2:9a:fb:87:e7:e0:2d:a0:71:36:6a:cc:dd:ef:8d:7a:c6:34:
a2:c0:3c:44:a0:ad:82:3f:97:97:7b:b0:8d:12:1f:05:5c:f5:
c5:9c:c1:2e:29:1b:70:a9:40:d9:da:02:ab:ac:12:74:60:30:
74:10:9e:bc:cc:55:17:23:ba:99:6b:87:d1:43:d3:c3:1b:f2:
f1:68:79:f6:02:a5:aa:99:f9:37:5f:39:6b:b3:5d:90:e1:3c:
c9:0e:f2:68:47:01:7a:d1:0a:9f:38:52:37:a0:b5:7a:be:96:
95:fa:b9:f7:b2:94:66:03:14:4a:da:e2:13:4a:87:39:02:3f:
93:82:9d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:23:52 2025 by rpki-client