Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
File: aHyL8iKia_HJxmOMw1bSg1UC8tY.mft (raw, json)
Hash identifier: e4SisGxNVEImcGa8F07vyvOtUHNAq1GoHj8kk5Rfx+g=
Subject key identifier: 7A:44:AB:A7:A2:E0:C0:97:FC:0E:80:D4:5D:81:4A:FD:33:D4:9D:BE
Authority key identifier: 68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6
Certificate issuer: /CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6
Certificate serial: 01965726C713560C9C21BB86283E76243ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
Manifest number: 063F
Signing time: Mon 21 Apr 2025 07:01:21 +0000
Manifest this update: Mon 21 Apr 2025 07:01:21 +0000
Manifest next update: Tue 22 Apr 2025 07:01:21 +0000
Files and hashes: 1: aHyL8iKia_HJxmOMw1bSg1UC8tY.crl (hash: QwtXol1gQgFHz6l1hj69GtjALb9EPuGr3m9Ve6Q/WXE=)
2: szxe0DPYsGTMI_tgKM1yaWgLDtI.roa (hash: fjZgmmGMINi/iYDucRgC4NEVBx45QTUkAnBaw6M5XK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:c7:13:56:0c:9c:21:bb:86:28:3e:76:24:3a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6
Validity
Not Before: Apr 21 07:01:21 2025 GMT
Not After : Apr 22 07:01:21 2025 GMT
Subject: CN=7a44aba7a2e0c097fc0e80d45d814afd33d49dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ba:fe:c2:ae:5e:6a:d1:95:e2:8d:fb:d4:0d:
7e:03:b0:2c:b9:75:19:eb:9e:97:89:58:12:53:1b:
16:fe:27:6f:db:f1:2b:02:c0:f9:fd:26:be:f4:c0:
0c:e2:ff:30:55:7e:5a:1f:8a:c7:83:3c:1f:4e:dd:
ff:0f:b9:62:95:70:83:63:64:56:7b:5e:ed:b0:e2:
4e:75:30:00:8b:09:1e:ad:c0:01:f2:15:ac:e5:95:
a7:9e:c3:95:96:63:7a:79:03:f7:cf:46:f6:1f:00:
25:25:3f:af:60:40:a3:16:fd:8c:ad:76:2e:42:5a:
79:14:0e:d4:47:02:01:35:9c:80:c0:01:fc:14:2b:
b7:43:10:49:ba:95:fd:5f:9a:eb:19:43:b3:af:3d:
41:25:48:d1:ae:bb:69:f7:22:02:be:da:b6:77:ae:
83:44:e3:7e:8f:15:49:fd:40:38:b4:44:76:bc:3d:
22:be:c1:df:28:18:79:4e:6f:04:06:38:ed:6d:ed:
ed:d4:2f:0f:e3:ce:64:94:93:0b:76:28:2f:fe:88:
a0:a4:dd:9a:f0:51:96:35:70:72:37:e1:88:43:7a:
85:74:98:53:28:4f:a5:0c:55:51:b3:9b:62:44:4a:
88:8f:d8:c2:64:f7:d8:50:b0:aa:4b:fe:a0:d0:f0:
8e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:44:AB:A7:A2:E0:C0:97:FC:0E:80:D4:5D:81:4A:FD:33:D4:9D:BE
X509v3 Authority Key Identifier:
keyid:68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c7:00:95:8b:57:2d:78:6c:4b:a5:77:0c:fb:81:51:3a:95:
2f:39:bb:2e:f3:15:d4:44:b5:1a:f3:b3:bd:c5:f6:0e:82:22:
eb:3b:22:11:8f:a8:9b:97:a1:ec:a3:77:e0:75:78:6e:92:d9:
76:c7:18:0a:a9:84:10:cc:60:ce:25:4f:8b:73:78:7a:10:22:
96:c6:8c:c7:69:fb:68:06:65:db:cf:5c:37:0b:e2:31:09:04:
3e:a6:a2:72:84:a0:7e:1c:2e:f8:17:96:f6:ab:f7:8a:12:17:
ad:4c:f6:bd:75:47:d2:5d:66:02:bb:b0:ed:39:52:ff:97:c5:
62:42:5c:1c:52:d9:76:4e:22:f7:61:03:7d:5d:d0:bb:b6:f7:
b6:71:e0:3b:1b:6c:2a:aa:07:f3:55:c0:e3:a2:f3:46:0b:4f:
3e:f4:66:e1:5d:e7:09:dc:2f:03:5d:9e:46:cf:77:3f:4f:99:
52:66:f7:7e:5f:39:81:e3:0b:95:39:8b:2e:1a:74:ce:f9:c1:
38:fa:c6:2c:d9:fc:e6:90:c2:06:30:f4:85:49:eb:52:f5:f0:
1c:60:75:e6:fe:d0:cd:22:cc:e5:d9:ea:5c:09:93:e5:c1:3b:
94:81:8c:d2:61:01:76:39:43:3d:0f:2f:28:7c:2c:bb:16:9d:
81:c4:65:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:21:01 2025 by rpki-client