Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File: AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier: 1ijUvP+Vehuk3MW0CooA2jtlVW4k3s+I1UzoxZAhJHA=
Subject key identifier: 2B:E7:0B:D1:F4:98:89:8D:48:09:C7:0F:B0:3B:2E:58:67:76:45:EC
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer: /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial: 01965A26C9FEBF9D0826990B738CB077CA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number: 0BA1
Signing time: Mon 21 Apr 2025 21:00:13 +0000
Manifest this update: Mon 21 Apr 2025 21:00:13 +0000
Manifest next update: Tue 22 Apr 2025 21:00:13 +0000
Files and hashes: 1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: RljSWtUhSgoF+Uvh1nxh2uG775cIZAuXOAM94haDqiE=)
2: ttoTW1mb5ILG0PA-_tc15H39Bu4.roa (hash: NuP48I/0CSAZd0tA3+gwMRRMyGbGny18PxWX5GZCZw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:26:c9:fe:bf:9d:08:26:99:0b:73:8c:b0:77:ca:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Validity
Not Before: Apr 21 21:00:13 2025 GMT
Not After : Apr 22 21:00:13 2025 GMT
Subject: CN=2be70bd1f498898d4809c70fb03b2e58677645ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:0a:c9:ca:51:ce:63:86:29:a6:2d:0d:d3:
04:1e:b0:ef:9a:5b:54:aa:91:5d:fc:3c:37:62:cd:
9e:83:15:3b:5e:58:75:c1:d9:39:91:7c:75:24:01:
5a:b0:c7:1d:0a:34:b9:14:53:c9:45:34:ee:fb:17:
96:23:a2:15:df:d5:66:e9:55:cb:51:b4:b4:b8:53:
ad:73:31:49:ba:5a:47:42:18:c1:32:d8:24:fb:e9:
80:ea:b7:18:cf:bb:cf:ee:ad:5a:4a:4c:cf:e9:47:
2f:62:cd:dc:61:d5:4a:2d:d6:5d:b7:92:bb:cc:b5:
3b:0a:ec:f8:a2:60:3a:72:42:d0:c9:25:50:ab:87:
14:61:fa:bc:67:93:7d:d4:8c:51:10:5f:02:0a:58:
01:a5:b9:35:e1:3a:a6:72:a5:61:40:30:57:44:14:
38:3e:1d:d4:49:16:99:a0:1e:a8:fe:1e:3b:3f:ff:
d0:87:7f:7b:25:a8:d0:0b:98:98:e3:1b:00:2f:03:
f5:21:6e:56:54:87:d6:c8:ef:ce:fa:23:11:25:19:
64:a2:29:38:7f:06:c1:03:f0:20:58:e5:7e:35:d2:
3e:d8:a6:82:73:15:f8:d1:19:5c:76:d0:5d:e7:02:
ca:5c:18:1e:a5:5c:31:70:4f:b9:42:7e:5d:74:61:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E7:0B:D1:F4:98:89:8D:48:09:C7:0F:B0:3B:2E:58:67:76:45:EC
X509v3 Authority Key Identifier:
keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:55:b4:25:ce:b7:86:35:a6:b2:b4:78:e7:d2:58:cc:04:3c:
74:44:86:86:3e:60:a3:c9:6c:1c:de:35:4b:04:8e:c4:ed:4c:
43:b0:14:ed:43:8d:2b:20:83:d9:22:bc:7f:fd:88:f5:e0:c4:
5a:0b:8e:04:21:af:22:d9:a4:ee:38:98:b0:35:f0:8b:15:bb:
fa:48:04:ce:e8:7a:26:29:f7:a0:7b:28:10:54:bf:ba:73:e9:
3d:37:4f:70:2d:1e:52:93:87:b2:53:17:38:1e:25:78:31:3d:
97:0b:3e:37:04:56:15:83:81:9e:65:77:69:59:9b:97:3d:17:
b6:b3:14:82:a3:2b:71:a3:f3:6a:b6:75:37:8f:50:d5:ed:28:
54:1c:cd:aa:92:28:65:da:92:e9:4e:3c:52:11:d4:3f:43:33:
42:4d:3b:d1:f3:0b:5b:cb:f5:5a:21:af:60:04:23:6a:ad:a6:
7f:ec:b1:0f:fc:4d:5f:06:de:5b:f1:0f:00:f6:ac:f2:0b:60:
74:74:68:43:da:64:bb:96:ab:7f:39:8e:6c:31:c0:9a:f5:62:
c9:e1:07:8b:48:29:22:33:74:42:af:f0:d2:66:06:12:f1:cc:
04:38:17:ac:ad:58:58:4c:3a:94:6c:00:92:c6:9a:00:d3:63:
07:35:a7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:59 2025 by rpki-client