Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier: 2G+EuKIt7f4FTZ+d/kgcXgWBDuqcgMCdks/i4Cl3EMw=
Subject key identifier: 4C:68:78:91:39:AA:BD:F1:4E:4A:EB:41:85:DD:FB:3A:83:D2:75:E8
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial: 019657CB8EBEE26994E833B33EFFF015A7FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number: 23
Signing time: Mon 21 Apr 2025 10:01:20 +0000
Manifest this update: Mon 21 Apr 2025 10:01:20 +0000
Manifest next update: Tue 22 Apr 2025 10:01:20 +0000
Files and hashes: 1: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: S2QxNtmazK1PhnJz29wVgOZ8/sO/GWx/S0TtkS4b8Y0=)
2: dG3vSEaAbpBYGMjnVqj3IkRAi0o.roa (hash: gF5q2naGzlJIG0YvikJ9g/7wr5QlHQs7okrQO5XF9dA=)
3: fE-CoC_oBJRa8r51jGuZP6UT1fo.roa (hash: EW07mUQxRP7f97x2KLlPw1Z2VU9hXKfncKzg+1xlCj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:8e:be:e2:69:94:e8:33:b3:3e:ff:f0:15:a7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Validity
Not Before: Apr 21 10:01:20 2025 GMT
Not After : Apr 22 10:01:20 2025 GMT
Subject: CN=4c68789139aabdf14e4aeb4185ddfb3a83d275e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:68:19:83:27:6d:9b:34:36:54:b5:1a:b9:
30:d8:ec:e9:ad:8f:1d:8e:5c:39:da:a4:ca:77:a2:
90:c1:fe:38:e5:9f:65:e4:98:88:ff:d0:ad:9d:37:
fb:da:87:ca:14:d4:7b:0f:11:be:9b:f4:fa:2a:c4:
52:dd:cd:72:07:1c:14:70:7e:a2:13:0b:e1:1e:15:
9b:c5:d6:38:10:0a:36:33:05:15:27:e5:d6:ab:99:
8d:3b:46:95:16:7e:6e:85:16:0e:db:18:d3:1e:ec:
20:c6:d7:e7:92:3b:59:f6:b4:09:6e:56:c3:e2:a9:
f5:50:5a:03:e6:a7:3f:fd:3c:f5:9d:34:b4:68:57:
08:55:e9:96:15:08:3d:8c:67:b5:05:8b:ff:b6:79:
fc:67:f6:3f:05:f5:58:ee:9c:80:f4:35:6b:07:79:
e3:33:e6:c4:ab:81:11:9d:d4:47:1b:21:39:e8:87:
77:ed:f9:e6:cd:01:f6:2e:f1:7c:28:2d:20:56:78:
75:c4:50:76:17:c2:be:73:3f:1a:80:4e:61:7d:37:
8c:7f:bd:1b:78:73:5e:bb:2d:7d:2e:d9:f2:a6:03:
4d:b5:31:7a:d9:bd:ce:57:b1:c0:ff:64:bd:36:ed:
0a:b3:d5:20:65:be:70:2a:b5:fd:58:dc:b2:a8:47:
dd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:68:78:91:39:AA:BD:F1:4E:4A:EB:41:85:DD:FB:3A:83:D2:75:E8
X509v3 Authority Key Identifier:
keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:86:b2:4c:6e:a3:f6:20:5f:94:27:05:f1:24:9b:f4:a2:74:
6e:89:07:c1:72:b2:f9:29:49:d9:ae:a1:06:23:26:b1:4a:53:
9e:50:86:c9:1a:34:81:ba:45:c4:7f:d2:cb:b8:6e:13:a6:89:
54:a5:26:45:e7:d1:59:88:b2:f3:80:0f:ed:28:ef:c7:a7:92:
94:38:86:50:f8:30:84:d8:9e:df:9f:80:de:ec:76:e8:01:98:
d8:92:ad:9e:e6:a8:5b:23:dd:7e:3f:2a:3a:4d:6d:f9:b7:08:
a6:59:b9:08:f6:71:5f:8d:52:77:34:0b:15:f7:39:02:eb:a1:
47:0b:ed:ed:1b:31:1f:8b:8f:d9:7b:55:e9:2a:19:c1:62:ff:
cb:87:a0:9b:2f:06:26:96:be:f7:2d:99:c3:5b:7b:ca:72:dd:
0d:d8:2b:6e:af:b5:1b:c2:c9:5b:27:07:8a:a4:ad:89:a3:5b:
40:f5:af:65:b3:2a:47:48:98:72:94:27:24:9e:bf:d9:16:b8:
d9:31:27:ae:60:49:52:20:63:cc:d2:5f:c3:cd:38:94:4c:0e:
b2:2a:d7:c7:39:99:ee:e7:28:f1:da:e2:2a:5a:8f:0c:e1:6a:
32:57:48:c5:b2:d1:5e:85:64:35:13:fa:a3:1b:48:f5:8f:de:
03:db:b8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:12:55 2025 by rpki-client