Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
File: ASAlltXOzjfcNMhhBkV4_G2qXoY.mft (raw, json)
Hash identifier: T0d6SW16b5VyZpSbX/3TY+wFisci5ClXwJXSt2+7Bnk=
Subject key identifier: F4:9A:0C:1A:4F:AA:3F:AC:3C:F5:40:15:D2:5A:25:95:F3:9D:42:E1
Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86
Certificate serial: 0196895C177548560BDA666977DF1FDABCCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
Manifest number: 09E3
Signing time: Thu 01 May 2025 01:00:35 +0000
Manifest this update: Thu 01 May 2025 01:00:35 +0000
Manifest next update: Fri 02 May 2025 01:00:35 +0000
Files and hashes: 1: ASAlltXOzjfcNMhhBkV4_G2qXoY.crl (hash: O0U/+0nUIo88K2E09iFXQIwdBv53zk3Z3NLPZxdiyV0=)
2: GESlc56i4-gdhOlM9uZOfgy8aCc.roa (hash: 9R3PoH4Q7y5D2LVnthi2TWzvIx4vLCuEUl/il2GVgqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:17:75:48:56:0b:da:66:69:77:df:1f:da:bc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86
Validity
Not Before: May 1 01:00:35 2025 GMT
Not After : May 2 01:00:35 2025 GMT
Subject: CN=f49a0c1a4faa3fac3cf54015d25a2595f39d42e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:85:17:7f:e1:b4:cf:82:31:b9:68:b2:5e:
6b:98:1e:fc:af:ab:31:d5:55:53:69:40:27:1d:bf:
69:07:09:56:00:04:10:0d:ed:ce:b7:9e:7a:86:b9:
9d:67:c3:46:96:44:8b:0c:e0:22:9f:7b:d1:ca:00:
9a:df:13:1a:1e:7c:74:5d:d6:70:04:3d:14:ad:95:
d0:91:b3:ac:f9:1d:a2:f2:7f:6a:b5:b3:a6:6b:aa:
8d:70:6c:ab:8e:b5:7b:33:94:e8:26:7c:1a:33:1b:
a9:f7:c2:3c:21:ae:69:79:a1:42:75:73:b4:c6:2a:
01:6a:8d:cb:c3:1d:b6:39:f5:6a:dc:96:bc:90:fe:
f9:5b:39:b8:1e:8e:f1:40:78:b7:5c:ee:fa:94:ec:
c6:5f:a3:bd:3c:42:6c:11:b0:41:85:83:1d:4b:a6:
ed:31:7a:30:fc:6f:4a:9c:5f:64:5c:7c:86:0c:2a:
1b:39:b7:a3:2d:07:3a:eb:d2:27:86:ab:a4:a7:9f:
9a:54:99:ad:2e:bb:9a:68:d0:f3:a6:82:1d:72:be:
58:30:8a:76:8e:fd:e1:b1:2d:03:16:9d:f6:0f:d1:
9a:ed:69:0d:62:0e:b2:bc:47:b4:18:8c:30:df:a9:
b5:59:b8:c5:be:98:f3:42:bf:0e:ec:b8:54:76:04:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9A:0C:1A:4F:AA:3F:AC:3C:F5:40:15:D2:5A:25:95:F3:9D:42:E1
X509v3 Authority Key Identifier:
keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f1:31:2f:9d:25:22:c6:8f:6a:fe:23:cc:8b:29:b8:eb:93:
aa:4d:0d:ad:9a:cd:7d:c5:18:d3:39:71:b5:d3:e5:2a:26:da:
37:b6:b4:72:07:dc:d7:21:c4:2e:b9:ae:6d:e8:fe:97:93:4a:
e4:1c:fd:c4:14:c8:67:c7:ba:3e:ed:74:e4:98:2e:37:79:28:
f7:ab:96:ff:68:8f:fe:c7:68:0a:b8:00:38:61:15:0c:76:97:
34:38:1a:86:3e:be:e9:52:93:a9:e8:74:a8:26:1e:a3:55:8c:
8d:ca:42:73:5f:f9:d1:44:4f:8d:c3:13:9d:56:1c:eb:86:40:
ce:5c:ec:73:e9:99:9b:28:fb:fa:05:a3:b5:20:23:12:6f:ea:
b3:cf:c6:46:30:c9:ec:ff:af:01:db:35:86:4d:14:8a:57:e1:
19:ed:f4:05:27:1a:63:9c:63:c2:d1:fb:a8:4f:1a:f8:de:19:
c9:be:42:8e:f6:51:89:52:c9:b9:99:db:23:57:24:71:97:0e:
3b:fa:68:6a:93:30:8a:cc:ec:35:bd:8e:46:32:65:93:79:91:
c0:84:7e:ac:ac:a4:30:94:40:bb:64:87:94:e7:63:97:48:d7:
60:6e:c5:86:de:3c:ec:9f:f1:7e:e8:0a:0d:85:2f:c7:da:54:
c8:af:4d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:27:22 2025 by rpki-client