Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
File: AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft (raw, json)
Hash identifier: FWYZZOcfIr+55KN3i/eBeTANcqof1JT0pr4IWUFWjCo=
Subject key identifier: 15:66:EC:DC:E4:9B:E8:A3:A8:5E:71:A3:B5:4C:A7:92:A2:21:BE:D0
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 0196760C5545009FE376569E34AE4C94785F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
Manifest number: 0956
Signing time: Sun 27 Apr 2025 07:00:41 +0000
Manifest this update: Sun 27 Apr 2025 07:00:41 +0000
Manifest next update: Mon 28 Apr 2025 07:00:41 +0000
Files and hashes: 1: AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl (hash: YUVbt9uc5aAWPtLHokfDw7X4Hf2ztV/q9VcRpLzGl3I=)
2: HO4rdY3E48qrjdqnzlEZca_Yebs.roa (hash: kWWt5WfRThziurqE+e5TqB208tDWvrvzVmVg4ZHkDjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:55:45:00:9f:e3:76:56:9e:34:ae:4c:94:78:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: Apr 27 07:00:41 2025 GMT
Not After : Apr 28 07:00:41 2025 GMT
Subject: CN=1566ecdce49be8a3a85e71a3b54ca792a221bed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:56:39:76:85:59:1a:ec:9f:5f:21:21:31:
57:59:c6:cf:f8:a9:e3:ac:c3:84:a5:53:72:ec:e3:
32:60:0f:05:38:32:9b:ab:38:6a:3d:82:99:e8:ac:
6c:86:1b:35:2a:44:91:d6:f7:94:98:96:61:63:07:
20:90:d9:44:4a:06:62:a1:f2:ad:be:cb:4c:7f:80:
c3:e4:74:33:04:e9:9c:a3:45:f2:6f:6c:1e:a8:f6:
df:12:d6:c1:0a:e3:cd:a3:08:e4:fd:33:1c:ad:af:
71:8d:bc:31:88:6a:b0:29:a6:7c:ff:8b:ac:be:66:
a1:90:9c:95:15:dd:04:f8:bd:53:fb:42:c0:58:ed:
02:c6:99:5b:67:13:21:59:24:8f:49:c2:28:98:fb:
82:d3:33:eb:d8:d6:69:30:b3:21:b6:66:47:50:4f:
12:fe:10:2d:58:17:7d:80:10:8a:53:ed:f4:5f:a7:
07:1d:45:56:e7:54:d9:40:7c:95:c7:8b:f2:d1:21:
63:67:2c:db:e3:6b:d9:47:e6:cd:da:0b:54:f8:12:
5e:9e:80:5a:23:1c:06:34:7e:6f:73:a5:13:9c:99:
5e:ea:b5:6c:bb:c1:d6:62:bf:56:3f:da:08:b3:a5:
f0:5a:62:55:fe:64:14:32:0e:3d:6a:28:2f:e8:3a:
c3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:66:EC:DC:E4:9B:E8:A3:A8:5E:71:A3:B5:4C:A7:92:A2:21:BE:D0
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a7:df:93:ac:4f:1f:e0:7d:8a:18:ed:28:69:a4:be:36:c8:
05:83:c7:b5:d4:47:f9:fd:94:24:d4:01:03:68:cd:3a:f4:a1:
57:42:58:6b:c0:a1:67:c9:55:19:5e:c0:7d:da:1b:e4:5a:4d:
dd:dd:0f:15:cb:f9:a1:59:81:10:ab:67:50:a1:a4:03:38:4d:
3a:82:6e:e2:ca:71:cd:7f:f9:a1:37:71:c8:49:ea:80:52:59:
db:2a:ac:c7:e4:68:88:5f:a5:de:41:24:99:da:fb:8a:10:fe:
16:f0:73:21:11:b2:97:3e:00:c1:9d:06:85:eb:80:5b:e7:90:
29:09:b5:bb:e7:c8:06:ab:99:7f:1a:3d:ec:db:78:9d:be:bf:
d4:6e:02:7f:6b:79:17:24:70:30:16:db:dd:92:84:d0:5b:0d:
bc:7f:b9:f8:e4:73:9b:06:a5:f1:bf:be:fb:cf:02:60:b1:09:
b8:66:10:d3:00:5a:1d:55:9c:f5:44:79:05:9b:fc:c0:75:22:
97:2b:92:2a:cc:cb:28:f0:93:0a:eb:27:11:86:d7:be:9d:d0:
c8:59:f6:fc:b5:be:f9:94:ed:1a:ed:3c:b5:ca:5c:c1:dc:76:
6d:72:59:7f:38:4b:69:30:06:fc:44:dd:bb:7a:a9:e6:4a:b5:
f7:54:4c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:17:22 2025 by rpki-client