Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
File: aL0515MSXGhN_ycviGIrrEMhgPA.mft (raw, json)
Hash identifier: G5niNpc1SEPY8RAtaayroc5WuOq9S/5CV+0hazGDXyY=
Subject key identifier: D4:04:27:2F:F1:2E:91:71:65:A7:AD:06:19:BA:5A:48:74:ED:93:2E
Authority key identifier: 68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0
Certificate issuer: /CN=68bd39d793125c684dff272f88622bac432180f0
Certificate serial: 01965500ED88BC598F81B695351EF9B2EE91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 21:00:46 +0000
Manifest this update: Sun 20 Apr 2025 21:00:46 +0000
Manifest next update: Mon 21 Apr 2025 21:00:46 +0000
Files and hashes: 1: UITBZGotoEJu7VXUeHnQEpzUh80.roa (hash: +4A8vS2ImMKHLoBNzMFALbXMy6VYqIeTofj/Zphvx9I=)
2: aL0515MSXGhN_ycviGIrrEMhgPA.crl (hash: Hd7jzsswdh5hpMfPAG7VCrd77bXO5ROm1vRX/3Kmj+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:ed:88:bc:59:8f:81:b6:95:35:1e:f9:b2:ee:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd39d793125c684dff272f88622bac432180f0
Validity
Not Before: Apr 20 21:00:46 2025 GMT
Not After : Apr 21 21:00:46 2025 GMT
Subject: CN=d404272ff12e917165a7ad0619ba5a4874ed932e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:64:2c:f2:9e:f4:1c:b6:5c:e2:63:5d:80:fa:
49:40:9a:15:84:a7:24:5c:ec:2a:95:17:79:05:22:
10:0b:4f:23:b7:da:04:b5:6d:8a:d3:e4:b5:a3:7c:
27:50:ab:57:ed:21:dd:fc:fd:a0:59:a2:c5:00:1b:
32:66:29:e4:47:dc:50:ef:53:55:d3:b1:c9:9c:8e:
19:18:01:20:d3:d1:e7:9c:6a:fd:43:70:07:ae:fa:
0c:82:6f:b6:ee:72:ed:62:90:0d:b4:33:74:97:d9:
19:5e:c6:df:34:ff:3b:c2:ad:23:a9:08:b9:71:cf:
bb:99:a5:31:36:a0:94:09:40:70:cb:d0:6a:61:5d:
96:53:55:34:ec:c5:9d:6f:c6:f7:2a:83:d8:96:d8:
72:fc:17:31:a6:33:24:e3:8b:34:49:22:ba:05:3a:
53:9e:96:3d:58:8b:43:f9:50:70:83:13:4b:75:2a:
02:a3:6c:c8:6f:1b:9a:af:22:d5:1e:a9:69:15:99:
f0:58:0b:ea:df:f6:1b:4b:4f:65:5c:2f:cf:1d:a9:
58:2f:1f:30:be:cd:13:6b:17:f3:97:95:20:4c:9c:
f8:4e:f2:21:65:06:f9:50:71:ee:c1:43:66:8e:d0:
51:06:94:57:03:d5:ec:d5:63:aa:b5:92:46:eb:ed:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:04:27:2F:F1:2E:91:71:65:A7:AD:06:19:BA:5A:48:74:ED:93:2E
X509v3 Authority Key Identifier:
keyid:68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5c:f9:23:60:4f:a0:6d:96:03:c1:12:19:8c:c1:fb:05:76:
c4:74:22:17:29:ed:6f:ce:e4:ba:5d:50:58:1d:d9:47:9d:d5:
1a:99:62:6c:d2:f5:cf:69:a2:1a:0a:1c:0b:59:b2:70:76:02:
10:b9:56:72:c8:82:85:03:aa:aa:fb:78:c9:6c:64:99:51:30:
41:f8:f2:34:da:38:b0:7a:02:14:ea:f3:93:68:c8:4f:68:be:
57:f7:09:20:fe:d4:bb:c6:d1:e6:65:b7:ef:84:a0:f7:e8:46:
41:73:bd:09:cf:54:2d:5a:ca:d4:2d:29:ec:cf:89:82:75:8d:
23:e8:70:9d:47:20:a4:c5:3a:bb:c4:1d:cb:7e:5d:a4:ca:b9:
a3:e5:d1:73:5e:14:13:5f:cb:da:4f:68:38:f3:34:a7:cb:fc:
5d:1c:80:32:50:b8:22:8d:6c:02:fe:44:05:b7:8f:a4:ad:c7:
8c:d3:c8:87:02:73:a2:a9:cd:fe:fe:54:07:06:16:62:4c:b6:
58:3b:f5:fc:da:92:f3:4a:26:82:0f:bd:df:cc:63:03:e6:29:
ae:7d:50:6e:28:69:8f:f6:66:70:6c:a0:1e:c0:92:27:fc:45:
2a:be:d7:32:9c:92:82:4b:e9:26:e7:73:42:9d:89:93:f9:3e:
37:4d:ce:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:23 2025 by rpki-client