Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: gg00SnzxiCNvH43Vde0a6295C+/HwtIFKNg+6YgXaFE=
Subject key identifier: 0B:19:BA:10:09:BA:31:B2:A5:F2:22:03:FD:73:D6:E0:49:70:A8:F1
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 01964CD9324CFFB47CB71E6889B9F4EE90CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 116D
Signing time: Sat 19 Apr 2025 07:00:24 +0000
Manifest this update: Sat 19 Apr 2025 07:00:24 +0000
Manifest next update: Sun 20 Apr 2025 07:00:24 +0000
Files and hashes: 1: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: OQrKfknSZcItnwHtenzvL9bVV6+NMZ8onrYcTkpPZMw=)
2: sKAD-zz-BRWYNXUbPUkAH8zshko.roa (hash: EDXKNxmjLcm1f7Z+fC9VrUm9WnMWvsfY7cjn8s/MMDI=)
3: sTJ8g6TTY2UuXfLwNf59KxMe0Ck.roa (hash: +jqZMtdreDLK//f5JbKCQ0ZFiAghZAZLwWdEli3rEUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:32:4c:ff:b4:7c:b7:1e:68:89:b9:f4:ee:90:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Apr 19 07:00:24 2025 GMT
Not After : Apr 20 07:00:24 2025 GMT
Subject: CN=0b19ba1009ba31b2a5f22203fd73d6e04970a8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:e2:68:62:7b:e6:f2:c3:b3:e3:e1:32:9e:
1a:d8:85:c8:1c:10:0b:8b:ac:d9:0b:87:23:ee:90:
ad:3a:a6:5a:ba:f3:6d:e8:6d:58:28:f2:9e:83:e3:
40:14:fb:7c:80:59:c5:c7:d9:ea:d3:fc:2e:8e:ac:
87:e5:e0:86:33:91:3f:8f:8a:e6:12:41:bc:d6:c6:
48:e0:96:17:02:fe:cb:fd:09:8f:88:d9:6d:e8:59:
88:e0:34:04:6b:77:7c:b2:bf:dc:4b:c9:ec:95:b3:
86:e5:53:86:4b:32:06:ae:70:5e:1d:f0:71:e2:4d:
56:c2:db:e3:69:94:4e:b3:a5:07:05:63:20:42:9b:
c4:c6:83:70:bf:a4:d0:50:4e:85:9b:2a:0a:a9:5a:
28:b5:fc:03:85:35:ab:b0:1a:6d:fa:2d:1a:75:15:
c9:d4:98:02:f6:5d:b0:7d:e9:03:24:5b:a9:98:56:
b4:0f:64:5f:39:8e:5f:18:98:12:60:99:0f:33:88:
f6:8b:26:1a:5a:a5:31:83:07:ea:e8:4c:7c:61:bd:
e1:c4:47:f3:71:51:9b:63:69:c3:80:64:9a:04:a1:
07:9f:15:84:eb:60:db:f1:79:da:6f:cf:ca:5a:b0:
77:52:f4:d6:56:a4:35:27:55:0c:05:f2:76:7f:d1:
6e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:19:BA:10:09:BA:31:B2:A5:F2:22:03:FD:73:D6:E0:49:70:A8:F1
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f0:d9:ea:74:d5:fb:be:68:e6:e4:a5:86:50:0d:9e:fc:2f:
e7:f4:10:74:c4:2b:dd:3e:50:80:70:10:f0:57:4b:59:ef:18:
ad:6a:9d:e6:95:6d:43:14:7e:18:2d:7d:7e:8d:78:f9:99:dc:
14:df:0d:1f:a2:fa:18:3d:40:1f:cb:56:ba:5a:b4:0a:0b:49:
52:23:06:56:13:bf:52:c6:5e:58:6b:43:1b:59:72:ed:7c:ae:
1a:18:22:13:14:d5:3f:90:83:83:59:69:35:f7:ac:8e:27:40:
b4:26:37:0e:ba:d4:2e:9b:6b:1b:a5:bf:ab:4d:65:a8:ee:8b:
e0:12:51:68:d2:f9:ac:c6:38:c3:e8:b7:a8:55:c4:dc:8d:30:
c8:66:93:a1:4f:cf:7b:c4:31:8c:00:f5:3b:59:e4:ab:fd:83:
5b:76:08:e9:af:e5:56:56:79:9d:98:35:e3:5e:37:28:08:ba:
b7:a8:c2:7d:87:53:8d:5d:2a:4d:09:93:61:d7:ef:07:a9:c7:
b6:ad:a8:84:ef:04:32:e8:49:23:aa:ee:31:ad:e8:41:4e:f0:
6d:7b:b6:03:b7:1a:86:7f:f2:7d:03:71:04:bd:cf:17:78:d0:
af:8e:9d:65:83:6e:2f:7c:f1:6c:b0:f6:f6:93:99:da:43:36:
2c:cd:51:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:17 2025 by rpki-client