Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
File: am_dL9Qvq_hycglSRo0pY0xoydw.mft (raw, json)
Hash identifier: yVJd/SbE2CJtraUmz8rNt7m9lSSQ9mEBVQc3FQmSGgo=
Subject key identifier: E4:13:FE:0A:83:83:8D:77:8E:8C:5E:47:D8:8E:1E:AD:7D:D0:AD:11
Authority key identifier: 6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
Certificate issuer: /CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Certificate serial: 019677FA848EA622ED0F440E817F844F6487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
Manifest number: 0873
Signing time: Sun 27 Apr 2025 16:00:28 +0000
Manifest this update: Sun 27 Apr 2025 16:00:28 +0000
Manifest next update: Mon 28 Apr 2025 16:00:28 +0000
Files and hashes: 1: QZxCWcbwldfBbje2z7CU-dKZ2OQ.roa (hash: z3N51ZQ5F8Gr4zs53/jXBVGssP0tmVUaOonBzkRtl38=)
2: _od80ObLqomwGF2QQRW4qwheTZ4.roa (hash: CaYsbUoRWbmVInyGmVu/D6GkTzKF8+37wy3InRczmKA=)
3: am_dL9Qvq_hycglSRo0pY0xoydw.crl (hash: iuo1P1Ht1m4VBlVIH8odh8o4O1Tp0xjk5pEF7k4cZfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:84:8e:a6:22:ed:0f:44:0e:81:7f:84:4f:64:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Validity
Not Before: Apr 27 16:00:28 2025 GMT
Not After : Apr 28 16:00:28 2025 GMT
Subject: CN=e413fe0a83838d778e8c5e47d88e1ead7dd0ad11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:37:15:b1:9d:6a:dd:b6:81:cc:6e:34:82:
4d:9b:92:2a:89:87:72:9c:50:40:5c:69:e0:a9:aa:
1c:cf:4c:8f:e7:4d:07:20:19:4c:c1:89:84:4b:61:
e1:a2:c3:4c:7b:6b:b3:b8:a5:5b:be:c4:85:2d:48:
84:52:39:c3:52:52:04:f5:80:60:bc:54:52:91:0a:
1d:cd:13:76:c2:f7:da:84:61:3c:41:5a:9a:d6:69:
79:4c:db:10:8b:96:d5:2b:9b:1c:68:86:a5:78:aa:
ba:23:e0:7a:fd:4b:8e:09:72:5e:24:44:4e:22:91:
56:da:08:ed:61:8d:34:98:25:9b:53:b6:92:b3:86:
af:48:16:bb:82:5c:aa:d4:4a:3a:db:59:f8:f2:f5:
a5:67:fa:db:a4:5a:d3:04:23:ae:a9:3e:02:3e:80:
c9:6a:88:e5:1d:bf:7b:c8:bc:36:a1:ad:4d:b2:a8:
4e:dc:fe:2e:fb:de:bb:2a:d7:7e:4f:73:33:50:88:
14:f1:ed:54:0b:a2:86:f7:2f:a7:bf:7b:b7:b3:e2:
fb:d5:1f:90:2a:a4:c8:ef:8b:f1:2a:6c:97:48:1c:
15:cd:dd:b1:89:82:10:88:fd:01:53:e5:ad:6b:9d:
f1:e1:19:2e:d0:12:a7:cf:3e:c8:cb:48:ec:13:41:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:13:FE:0A:83:83:8D:77:8E:8C:5E:47:D8:8E:1E:AD:7D:D0:AD:11
X509v3 Authority Key Identifier:
keyid:6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:33:d4:63:63:ab:0f:7f:1f:72:19:ae:52:a5:a5:83:d3:43:
b5:4a:ce:30:30:69:51:a9:17:34:d9:26:57:83:52:4f:ce:7c:
7d:4f:79:36:50:39:e3:77:1e:42:4d:b9:97:13:df:bc:af:4b:
3c:e6:92:33:b3:68:96:78:09:45:54:29:5c:22:73:98:71:2e:
3f:b3:4c:eb:30:d7:57:a1:ef:78:a5:8e:84:7e:65:42:c0:4b:
a5:30:b4:a8:7c:be:5c:14:d5:89:d9:27:f7:c2:3d:78:ce:17:
d1:a9:95:a3:40:af:92:f7:bf:7b:0c:14:9f:d9:ed:43:34:63:
cb:17:05:ec:75:43:2e:d4:59:cc:d0:60:77:3f:85:f2:10:3f:
13:33:7c:46:1a:83:6b:5f:f0:2b:81:c4:39:b1:ee:d8:92:f2:
8a:38:9b:f6:20:63:7f:7b:be:28:c0:2a:3e:a3:13:19:41:90:
d9:c3:74:0a:53:73:c3:13:5e:ee:bd:3f:8a:a9:5c:f5:7d:2b:
63:60:77:12:d5:29:a2:38:c9:ea:51:2f:b6:f2:27:70:4f:2f:
74:f0:09:20:79:ac:ee:1b:89:05:36:d2:f0:c1:97:cc:cd:bd:
f5:79:1e:1f:d2:ba:ae:9c:0d:e0:d7:55:74:e8:d9:b6:04:40:
25:20:af:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:03:50 2025 by rpki-client