Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: EbvdLE9jtxfa81SX7Y4HAUvgIoTJdAsNeuAeMScDvP4=
Subject key identifier: BE:D7:AD:29:30:9B:C9:A6:F3:EC:73:9C:5D:F8:E0:B5:EB:D8:CE:DE
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 0196851186EDB84AF528EF68A44B84C65DCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0A00
Signing time: Wed 30 Apr 2025 05:00:40 +0000
Manifest this update: Wed 30 Apr 2025 05:00:40 +0000
Manifest next update: Thu 01 May 2025 05:00:40 +0000
Files and hashes: 1: F66nmw_9gnfRz1vGxzlxmQMgQys.roa (hash: V2QUSY1nIUt0LG1yVgyvdzAwGo/lvS6oHhY3urqyJbE=)
2: IdMP5mSXjXy5RCG7h8iUYBC-7wU.roa (hash: Ak+0cLrZuuXp8cAQmKH4z3k18zZ0o3zgplicC1IedBk=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: bSJnbCJfvLNOLSTUz1TmKki8Z2FoT30iCPBA/1s8r1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:86:ed:b8:4a:f5:28:ef:68:a4:4b:84:c6:5d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Apr 30 05:00:40 2025 GMT
Not After : May 1 05:00:40 2025 GMT
Subject: CN=bed7ad29309bc9a6f3ec739c5df8e0b5ebd8cede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:d8:14:67:9d:bd:e1:e0:3b:f2:e4:30:16:
32:fe:cd:dd:66:d5:aa:41:92:5e:12:19:e8:d5:2a:
97:3d:78:22:b8:ac:7b:72:4f:2e:50:2b:84:14:21:
4a:58:58:2b:8f:fe:14:b3:b2:4a:5f:49:1c:9d:ef:
56:59:24:18:97:db:12:36:21:2d:e9:2c:dd:3c:86:
92:22:bb:0a:e1:77:d1:24:bd:14:ca:58:b7:5a:6a:
0b:28:1c:ae:ba:34:43:0b:17:69:c8:9f:6b:1c:56:
31:85:bb:df:7b:53:95:7e:58:08:14:36:e0:07:fb:
c0:0d:6f:ba:6f:8c:7b:f3:31:50:62:e6:0c:bc:1a:
09:a3:e3:79:87:42:1e:d3:36:1c:d6:60:25:55:b6:
7b:a0:c0:7a:01:42:74:cc:0b:a9:70:83:a7:9a:24:
44:13:82:e5:81:02:65:73:60:13:5a:f9:58:3f:69:
8d:8b:94:2e:c5:bd:21:6b:b7:23:16:44:6e:bf:97:
2a:26:ed:b6:2b:02:52:06:89:27:3f:e9:7d:3f:bc:
b9:81:0f:a5:f9:c2:20:c9:0e:7e:c5:bf:56:2c:53:
08:14:10:98:27:16:df:b8:80:34:d8:66:ab:51:1c:
d2:bd:ba:dd:83:e6:49:c8:13:ad:ab:48:71:3a:9b:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D7:AD:29:30:9B:C9:A6:F3:EC:73:9C:5D:F8:E0:B5:EB:D8:CE:DE
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:47:7e:98:8e:ef:4e:6a:35:92:8f:8d:71:21:db:7b:91:58:
85:72:5a:0f:48:37:19:a4:78:3f:4b:a4:2b:8f:e5:43:53:69:
18:ab:cb:ba:cc:d9:38:7c:f6:23:b6:cd:27:7b:f8:fb:db:91:
8f:70:03:2e:68:c2:a6:a3:f5:4b:2c:cd:67:98:7a:8d:96:13:
59:c4:31:bc:bf:74:8f:45:e8:67:f9:54:37:01:e4:c6:09:e5:
1b:bb:1b:dc:6e:8b:3e:4c:be:57:ec:d5:e2:09:19:d4:33:33:
91:80:e5:04:27:e5:54:64:2b:fe:12:21:96:eb:58:eb:e9:f8:
14:97:23:54:d9:0c:97:54:06:31:89:0f:3a:ab:28:94:05:03:
b6:c4:dd:8d:e7:5c:c2:6c:d4:7a:5d:a7:8b:7f:30:32:2f:1b:
18:93:db:02:b0:89:c2:43:34:00:87:ae:7b:e8:59:f8:f6:b0:
e9:5b:de:52:1b:8c:22:d1:04:34:1e:9c:49:df:d4:41:f9:9c:
8e:28:78:47:a4:ad:0a:cc:e5:9d:ae:66:2b:ab:81:f2:21:3d:
40:25:2a:e8:a4:5f:10:c0:ec:cf:e2:90:b4:55:fe:1c:da:25:
55:7d:5b:4e:e8:5f:01:5c:fb:29:09:92:d6:28:6f:82:77:94:
36:46:66:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:50:54 2025 by rpki-client