Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
File: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft (raw, json)
Hash identifier: 9dvKkdwW78UymWiBfJO1e0bk9f2poL2TEZ5cH+HfRFI=
Subject key identifier: 9F:78:EB:C1:12:C5:B9:BA:94:50:5C:9C:C5:A3:5B:97:65:41:A9:53
Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
Certificate issuer: /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Certificate serial: 019681349B6060DBF20D9BABC9AF129FCEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
Manifest number: 14A8
Signing time: Tue 29 Apr 2025 11:00:30 +0000
Manifest this update: Tue 29 Apr 2025 11:00:30 +0000
Manifest next update: Wed 30 Apr 2025 11:00:30 +0000
Files and hashes: 1: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl (hash: SMU/+rGsbToFyCPjMKjv8g7ZAtlCLmdpU3XquGiw8p4=)
2: RZsQW2mn0p77cUSrDj82xlpY4kU.roa (hash: PgZwlEZ/SO6/ySPSoJ7naRU3kSxO9+Lme8pB8HNwF8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:9b:60:60:db:f2:0d:9b:ab:c9:af:12:9f:ce:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Validity
Not Before: Apr 29 11:00:30 2025 GMT
Not After : Apr 30 11:00:30 2025 GMT
Subject: CN=9f78ebc112c5b9ba94505c9cc5a35b976541a953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:cb:50:ee:ed:56:0f:3d:bc:3a:26:c9:7b:
a1:5f:c3:6a:bd:eb:8a:62:8c:df:8a:41:fe:b9:db:
51:d0:5e:8d:ff:28:de:bc:c1:c6:a9:3f:6f:e9:50:
ba:e2:15:10:ca:6a:dd:02:61:33:02:b6:cc:80:24:
71:1e:2c:d1:43:01:4c:ba:cb:1c:eb:01:95:41:21:
e7:54:1a:f5:d3:29:69:ad:91:77:2d:2f:8c:d4:76:
8e:50:ee:92:0e:0f:19:5d:d3:f4:4e:b8:e1:4a:d2:
7d:a0:ae:f6:89:5b:f6:8b:33:f9:70:14:37:57:9b:
3a:b2:88:3e:66:79:c9:a4:8d:da:34:15:b7:cd:c9:
94:94:88:ec:7f:95:9b:42:7f:7b:28:d0:96:b1:69:
79:a8:4c:31:b3:3b:5d:33:a5:be:2c:af:43:62:f5:
be:5f:47:40:71:81:9a:a1:4a:06:67:40:c9:a6:c6:
da:45:34:f1:cd:0f:22:56:aa:82:0e:1e:c0:23:ef:
eb:f3:7a:e0:75:37:36:93:00:c1:bc:ba:1c:19:b2:
c0:14:02:fe:33:21:4d:fc:db:d8:64:67:3b:8f:c2:
7b:01:21:37:65:b2:0e:54:bf:17:ba:48:be:bb:07:
7d:85:a7:18:f6:6c:bd:0b:43:94:87:1c:bd:6f:99:
ae:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:78:EB:C1:12:C5:B9:BA:94:50:5C:9C:C5:A3:5B:97:65:41:A9:53
X509v3 Authority Key Identifier:
keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:89:99:d9:19:c7:49:4d:72:13:95:96:84:4c:f8:fb:b4:da:
9d:20:48:ec:b7:14:7b:98:a5:82:08:95:ad:93:58:7d:92:62:
81:f3:89:ef:a4:0a:b2:7c:ac:82:9f:82:d9:4f:b1:10:45:b6:
85:e6:b3:e0:da:6a:c3:9c:0b:7d:89:82:75:d1:f3:c9:d4:a5:
5a:58:5b:ed:f4:c7:4a:13:1d:97:2a:89:b3:f2:83:2f:6f:ee:
39:6d:29:93:b7:ee:4f:ec:10:80:95:90:19:4d:8b:51:d2:19:
21:37:b9:64:34:dd:9f:5e:ce:a2:76:31:96:95:67:9f:13:20:
89:47:98:60:5b:34:3d:a1:b2:0c:fb:cf:98:49:19:a9:0f:fe:
c2:69:a7:d7:0b:6d:e0:e6:f9:4c:e4:01:88:e6:8a:d5:bd:e2:
a3:a5:c7:6e:50:71:36:04:f9:03:8c:1a:e0:b5:10:9c:47:57:
1e:fe:73:f3:84:d9:79:94:8f:e1:35:2c:f5:d1:68:77:22:28:
8b:08:cc:64:7b:fc:40:f5:fc:16:3f:03:d7:53:4d:21:c5:6f:
1d:48:00:68:38:c0:b1:4f:9c:a2:69:f2:0b:07:bf:ca:a3:d4:
56:75:51:a4:21:f3:7b:e1:6e:aa:eb:c5:cf:11:6b:70:e1:53:
18:d5:9c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:39:36 2025 by rpki-client