Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
File: afY2pbazoordg_l0Rtewg7lMPa4.mft (raw, json)
Hash identifier: BlGwl8AC9ptcO9TY7iRoLb2Nx2JfqRHgcrFG1qF8ahE=
Subject key identifier: 13:40:32:D7:00:6F:62:04:C2:C6:1D:3E:45:11:EE:FD:16:41:E1:CF
Authority key identifier: 69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
Certificate issuer: /CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Certificate serial: 01968021B76076ACDEE6A426632E85451256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
Manifest number: 04E2
Signing time: Tue 29 Apr 2025 06:00:15 +0000
Manifest this update: Tue 29 Apr 2025 06:00:15 +0000
Manifest next update: Wed 30 Apr 2025 06:00:15 +0000
Files and hashes: 1: afY2pbazoordg_l0Rtewg7lMPa4.crl (hash: JlIg3TAIo2FAQYVlo82VDJpOngy1Wj/jkDkUkFh2Ip0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:b7:60:76:ac:de:e6:a4:26:63:2e:85:45:12:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Validity
Not Before: Apr 29 06:00:15 2025 GMT
Not After : Apr 30 06:00:15 2025 GMT
Subject: CN=134032d7006f6204c2c61d3e4511eefd1641e1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a9:d6:9b:3b:de:bc:b0:17:36:d4:41:d2:00:
68:7b:7b:d0:dc:05:99:e2:ce:d1:cd:ae:f3:87:45:
84:f5:11:5e:09:12:4c:33:cc:12:cb:5f:4f:f8:dc:
1f:88:7a:d2:d7:c4:bf:f8:29:43:d4:f4:67:7d:4c:
ba:74:06:5f:1c:e7:b0:16:34:fe:58:99:9f:87:9c:
9e:f6:5c:7c:6e:85:84:ff:41:2e:7d:ee:cd:72:8f:
b8:90:40:b2:90:f5:b8:a9:82:0b:43:2b:2d:88:8a:
d1:21:1c:fe:7c:28:dd:ce:84:22:0a:de:f8:b9:d8:
28:94:87:c9:28:85:98:ec:84:ee:1c:a9:73:7b:38:
8b:48:66:55:73:7c:ea:64:8d:77:7a:56:9f:7c:4c:
58:2b:27:87:7a:e8:61:f9:76:62:f5:2e:f4:68:ab:
9c:a9:4f:25:53:9b:59:5a:94:77:a4:5b:d5:65:cd:
62:90:c7:51:d6:7c:3c:ed:1a:20:21:87:3d:ab:c5:
75:d2:73:7a:2f:eb:31:70:d3:ec:0a:06:7d:e1:6c:
00:57:b2:a5:a2:6c:74:75:cd:f2:cb:82:35:65:84:
93:7b:88:ba:45:a8:eb:2c:04:0c:65:0d:4d:95:ca:
ea:14:05:91:02:90:dd:7f:3d:88:3a:52:36:5a:4d:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:40:32:D7:00:6F:62:04:C2:C6:1D:3E:45:11:EE:FD:16:41:E1:CF
X509v3 Authority Key Identifier:
keyid:69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:31:89:e1:3a:09:12:ea:4b:c3:d4:4a:b6:63:17:68:18:62:
04:0b:53:f5:a9:fd:47:37:5a:0b:a1:c1:6f:1f:70:c2:ee:80:
ae:9f:a9:14:43:2c:bd:65:a5:a3:85:7a:43:79:a3:d1:37:ae:
32:8a:4f:17:5d:f8:7a:81:a6:d7:77:f5:07:85:08:da:1d:5a:
c4:c9:93:5b:fb:8c:6f:17:d5:6b:a6:0e:30:06:33:b7:0a:dc:
03:0a:66:6a:3d:9b:0c:9c:1c:b5:3a:00:9b:f4:c3:8f:7a:10:
15:3a:50:e4:35:95:26:56:d1:97:fa:dd:40:4f:a9:7f:e3:cc:
ab:80:cd:e7:dc:08:0a:c4:4d:17:2e:aa:b7:aa:8b:53:d2:06:
7b:c1:11:35:58:fd:f7:fb:3f:a9:1f:15:b7:81:44:79:ab:81:
7b:2d:6f:c2:c1:d1:c4:21:ca:46:98:ed:0d:8c:68:a0:5a:59:
7e:d8:50:5c:0e:d8:b2:90:ec:c3:46:2c:0a:00:db:09:a4:36:
8f:df:c3:aa:51:02:2b:60:0b:79:f9:c1:fd:e1:40:73:01:73:
30:d0:29:bf:66:76:b8:76:32:63:4e:3a:95:ef:6f:4c:b5:a1:
ae:e6:2e:ff:28:ab:f0:41:ec:11:d4:89:53:81:4b:48:38:0f:
93:da:77:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:12:07 2025 by rpki-client