Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: miPGAWIGo1Nq3bpP2DPZv5GAKDznVO4fcqMavw++DeE=
Subject key identifier: 5A:EB:AA:8F:F9:53:85:8D:63:24:B3:51:D3:27:3A:43:02:A6:1A:F0
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 0196564A53C9A6035D7463E09B78D4B5C2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 0616
Signing time: Mon 21 Apr 2025 03:00:33 +0000
Manifest this update: Mon 21 Apr 2025 03:00:33 +0000
Manifest next update: Tue 22 Apr 2025 03:00:33 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: Ucu698xs793a2XbZx4D7BkOY6SB2siBXgGodE7eBrPQ=)
2: h2bGxUxbqOMwKZqb7G6CRO2lZho.roa (hash: mynhqYVK2VXcY1dJrTVkYeBGm7TzlIqS2eWaSHlhFbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:53:c9:a6:03:5d:74:63:e0:9b:78:d4:b5:c2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Apr 21 03:00:33 2025 GMT
Not After : Apr 22 03:00:33 2025 GMT
Subject: CN=5aebaa8ff953858d6324b351d3273a4302a61af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:7d:41:4b:c9:cb:71:87:cd:8b:00:04:b1:
a6:2e:28:f8:2f:aa:4e:71:6d:74:e5:e8:c9:3c:a3:
c7:d1:b0:2f:89:bf:fc:e0:3a:6d:bf:0f:fa:65:e3:
03:17:b3:27:b9:f6:ea:f3:48:b4:6c:91:86:04:c5:
d9:f1:38:a2:3e:97:b7:a1:44:c2:49:f5:f7:51:04:
37:57:7b:77:c9:ae:7c:99:ce:59:f6:c4:c1:bb:99:
76:80:11:e8:ae:46:21:b2:fc:de:f2:ed:d7:26:ba:
4d:e0:c4:55:74:b9:76:bd:59:bf:58:c5:cf:6b:dd:
37:a6:8e:f8:26:32:cc:2f:f4:6b:a3:72:be:2a:34:
5d:79:12:ac:61:41:ae:c4:3d:80:d2:d6:9d:29:79:
dd:ee:36:81:61:f7:21:6c:1a:da:ad:9a:ea:c8:6e:
60:04:5b:26:9d:8c:9f:22:a7:06:c8:3c:b2:8d:c8:
98:00:c6:c8:b7:41:6c:44:dd:1a:ad:71:1e:b7:30:
7e:83:eb:95:fa:45:1d:9a:cc:21:af:89:57:39:87:
dc:00:1e:48:ca:75:56:c2:7b:33:90:ce:1d:b8:67:
00:b8:09:5a:58:5d:83:97:35:f8:81:5c:b0:92:38:
2d:78:48:7e:cc:b8:b9:6c:75:01:00:98:66:ac:86:
0e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EB:AA:8F:F9:53:85:8D:63:24:B3:51:D3:27:3A:43:02:A6:1A:F0
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e6:d5:5b:39:05:f0:11:37:75:b0:7f:bb:d8:c2:5a:c5:04:
9d:8a:b0:1a:96:8f:5a:39:c6:b3:b0:4b:5a:3e:cd:7a:6a:49:
b7:00:a5:85:06:5a:70:e9:cf:2f:0f:1d:a1:15:ff:f7:db:5b:
b2:d4:3c:0e:c1:39:f0:51:f4:3b:f7:f9:62:ef:a0:20:59:36:
40:18:96:46:8d:25:21:ad:c9:5f:ad:71:77:17:a3:b9:c8:6a:
c0:a7:0c:90:0a:e8:bf:9f:00:ce:be:c1:9d:ff:9b:5b:ce:7b:
34:aa:53:47:e9:64:5d:c5:be:01:a4:87:03:32:01:6a:f8:e7:
55:42:1b:38:d4:f6:77:e4:d9:49:f4:cf:69:d8:f5:67:41:65:
63:ce:a4:6d:1f:43:d6:46:cc:9d:ca:8f:bb:71:0d:90:bc:a2:
fc:be:03:41:44:9b:87:36:60:96:96:16:d0:24:0a:7c:57:1f:
84:3d:27:f5:20:f6:84:09:db:72:3c:29:6a:62:b7:88:e5:50:
e6:75:4a:83:16:18:e7:4f:ac:de:b1:7c:be:e7:8b:4f:bd:1e:
d3:a5:0c:b6:41:5c:ad:37:f8:8a:17:d7:cf:a4:66:90:47:1f:
a3:67:d9:fc:74:64:2a:36:29:63:54:d0:a1:47:eb:47:ce:75:
67:e8:84:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:22 2025 by rpki-client