Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
File: rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json)
Hash identifier: MoSltZMVVbx4TxFTrkGXlMrdlkJJGkrDrkZL08Bovy0=
Subject key identifier: 39:83:07:4A:12:9A:24:1B:16:99:D0:A1:9F:18:6E:B2:D2:0C:DD:7A
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 0196771EDC9F5802FD044B5CA046252B19FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
Manifest number: 66
Signing time: Sun 27 Apr 2025 12:00:33 +0000
Manifest this update: Sun 27 Apr 2025 12:00:33 +0000
Manifest next update: Mon 28 Apr 2025 12:00:33 +0000
Files and hashes: 1: OHSgHk7806-Y3EiMMODqh70dnpA.roa (hash: dwELo2G8zKa9A3mOV9vawf+jeFFyKXxpSg3LwUytDM8=)
2: ZfKmgCC5shqdiJ4oG4WQU2IlAJs.roa (hash: xPdeleCRUgq2S3wQBazj5FbP5YRWDoq9gRuAfQMqJJU=)
3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: T+1irMtY+n+upFQj7EIUQAWNxXfTBI5CTEWcQ5NGrdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:dc:9f:58:02:fd:04:4b:5c:a0:46:25:2b:19:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: Apr 27 12:00:33 2025 GMT
Not After : Apr 28 12:00:33 2025 GMT
Subject: CN=3983074a129a241b1699d0a19f186eb2d20cdd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:70:cd:c3:4d:fe:f6:60:88:fb:45:b9:62:
6d:cf:f9:bb:91:d1:4c:d7:af:86:13:94:d0:7a:d4:
eb:2f:02:af:e0:a3:f5:a0:da:24:c5:a8:46:a6:d4:
43:02:7e:00:96:3c:06:3b:d4:04:1b:4e:23:ca:75:
49:f2:94:47:59:cd:aa:43:8b:21:50:30:af:80:77:
07:fe:4a:72:79:80:b9:30:20:7d:dc:25:20:1c:f6:
d3:56:89:49:29:88:3c:8f:48:e4:f5:3d:a3:a0:e3:
98:67:dc:6b:3a:75:e9:a7:c4:72:c7:d3:ba:fd:60:
7d:e6:7c:df:7e:3e:30:b4:36:96:64:61:41:b7:b5:
45:17:d6:a7:df:11:b8:8c:d5:0a:ab:76:d7:ad:df:
5b:55:03:be:d7:18:bd:bf:d3:d1:d4:2c:c5:f5:1c:
08:8a:c5:d3:85:10:9f:ae:5e:6b:50:e0:6b:fb:24:
d0:27:ba:e4:0d:f2:1a:10:65:ca:64:22:58:76:76:
0e:5f:ab:61:2f:eb:5f:d8:3e:f0:68:4a:84:53:28:
59:90:56:78:95:40:89:7a:84:37:6e:50:ca:23:da:
55:cd:65:79:a7:31:49:cc:a7:7b:bd:dd:0e:e9:f2:
3c:ad:e2:f1:eb:a7:78:5a:7b:6a:6b:17:31:47:84:
09:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:83:07:4A:12:9A:24:1B:16:99:D0:A1:9F:18:6E:B2:D2:0C:DD:7A
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:42:1a:5f:45:02:cb:f7:dd:e8:ce:5b:5d:ab:56:1b:ff:f7:
aa:b3:2f:bb:d8:18:8e:7d:ce:08:e9:ed:74:c8:e7:82:21:ec:
6b:fd:53:91:40:da:a7:aa:9c:53:7d:1a:4e:f1:d2:d1:2c:a3:
06:63:60:02:6d:7e:ff:f7:25:56:bc:ef:af:71:be:89:83:b4:
35:77:c3:e2:e0:e3:92:1e:f9:3e:67:ac:4f:3c:0a:bb:44:24:
c1:c0:e7:b9:69:97:1d:1e:06:a8:37:0d:d6:6f:60:03:38:64:
f8:86:7a:1b:da:61:aa:36:69:ef:ab:48:f8:ea:ae:81:51:c6:
46:74:c8:88:69:bf:bc:f6:fd:ab:82:13:b0:57:ed:0c:1b:84:
02:27:0b:d1:a0:c7:ab:d7:c6:eb:ca:d3:61:90:39:5d:ce:fd:
af:8e:0b:61:2c:e9:fd:71:c9:99:fc:ed:63:27:d5:4a:31:3d:
23:56:ea:1b:c3:00:6f:91:2e:29:10:42:bf:55:30:13:2c:53:
62:64:eb:5e:a1:8e:c5:b0:44:23:2a:d6:8f:0c:47:76:cd:61:
f5:94:3e:c4:c3:74:6c:4f:a5:46:65:6c:c5:f7:ae:8f:42:86:
c0:15:68:2e:3a:78:ca:4b:08:d8:aa:6c:51:6f:70:0f:ec:b3:
6e:79:87:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:38 2025 by rpki-client