Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
File: AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft (raw, json)
Hash identifier: lg5qt9019LnOkqwUtu4BQCIGumTTdWLKWmcKpeBFxnI=
Subject key identifier: EA:55:CD:49:73:BA:89:BC:C6:9C:3A:04:DF:E3:87:0F:C4:87:D9:8E
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Certificate issuer: /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial: 01967E6A614700CDB577EC8C16902EB79ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
Manifest number: 1419
Signing time: Mon 28 Apr 2025 22:00:23 +0000
Manifest this update: Mon 28 Apr 2025 22:00:23 +0000
Manifest next update: Tue 29 Apr 2025 22:00:23 +0000
Files and hashes: 1: AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl (hash: L36ubeBYmnLuSIRxYYjiEMzaww3OqdK+4xqSxBiHE70=)
2: kSz4LlQ62tJYPQQ8qxacl2uxsCY.roa (hash: 8GdPcvKpfPL7jxJZaxJa9Y6MJqoF7wYY1b8gzsfXwWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:61:47:00:cd:b5:77:ec:8c:16:90:2e:b7:9a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
Validity
Not Before: Apr 28 22:00:23 2025 GMT
Not After : Apr 29 22:00:23 2025 GMT
Subject: CN=ea55cd4973ba89bcc69c3a04dfe3870fc487d98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:63:6c:bf:5a:e3:11:5c:33:5c:f2:75:26:
5d:20:8c:2a:d4:75:74:72:5f:f0:bb:6b:5b:c2:e2:
a4:c2:72:77:76:0b:f7:cb:3e:19:6e:48:bb:02:5b:
92:1c:a2:be:44:99:81:3a:56:a0:f1:83:a0:72:66:
c9:6f:4c:02:e1:46:29:2b:7a:e9:a1:3e:ee:3f:62:
79:bf:c7:a7:ca:19:fa:e0:d4:28:47:6b:7a:72:af:
52:de:7d:80:fc:5f:ae:b8:b9:93:10:6e:1c:94:ca:
25:0c:2c:3e:db:c9:5a:c6:38:33:9e:3a:86:1f:7b:
04:eb:f2:93:df:ec:ee:f0:23:92:cf:ed:66:9c:f4:
7f:2f:eb:34:fb:5f:f4:06:4b:63:73:4b:f6:b2:69:
9e:17:18:ed:fd:49:f7:3a:29:69:98:3e:c8:7e:53:
d7:94:a8:9d:e9:23:63:79:d7:05:6c:3d:de:24:b3:
02:bc:34:78:73:25:de:98:cb:d5:03:2a:34:33:82:
cd:bf:57:72:2c:5d:42:05:29:fc:98:6f:3e:e6:4d:
b7:7c:99:3c:e8:14:0b:f0:70:ea:81:8e:cb:ee:55:
1d:43:74:1e:dc:c6:cc:51:0d:7b:4e:c3:99:c8:5e:
72:0f:71:9d:d6:ab:f3:55:4f:af:ce:3d:d9:65:97:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:55:CD:49:73:BA:89:BC:C6:9C:3A:04:DF:E3:87:0F:C4:87:D9:8E
X509v3 Authority Key Identifier:
keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:dc:13:ba:d7:ca:64:30:fd:97:2b:bb:dd:7f:11:b8:55:66:
be:af:85:c4:2a:27:d6:fd:df:a9:f7:0a:94:5e:e4:61:d0:b2:
59:5a:e3:98:7f:dd:7d:36:ae:dd:de:b2:74:34:73:47:07:e9:
d7:13:56:68:ce:52:8a:ab:d8:65:25:91:ad:d5:e1:39:bc:44:
04:a6:51:22:6b:9a:9e:3d:cc:bb:cd:82:a3:f8:ec:52:ae:10:
d9:b6:f7:7c:12:da:05:16:be:d6:15:73:4e:d3:f9:16:99:31:
79:49:d9:78:c0:09:31:da:67:62:97:9f:1b:a1:55:ff:df:39:
5e:9a:68:10:7f:95:72:8d:4a:b6:2b:7a:a8:80:6e:71:b0:8c:
78:7c:7f:04:67:52:8b:79:4e:32:60:12:7a:45:a0:dd:5d:86:
d1:d9:0a:d3:db:f2:3b:ba:d0:6f:0c:5b:e3:82:11:1d:7b:8b:
ee:b6:f7:a3:38:5e:b2:f0:70:75:95:2b:16:7f:58:f7:f4:65:
11:6d:78:0c:bb:c6:e0:ac:18:de:5f:dd:d2:57:fd:b5:5e:6a:
58:1e:22:ca:3b:1d:84:07:92:45:84:fa:3f:b2:86:90:bc:c6:
97:76:8f:8c:49:7f:39:39:68:28:74:a3:14:c0:de:ec:37:c3:
ac:bf:f9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:33:53 2025 by rpki-client