Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
File: AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft (raw, json)
Hash identifier: 2B/IfKxvTEesvxSHJQUyGiIjWK/rz4ANyjyEy0yQj1I=
Subject key identifier: A0:8E:2A:46:EA:DB:F0:E9:E7:05:9F:7A:42:97:10:AF:64:E2:5F:F8
Authority key identifier: 01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
Certificate issuer: /CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Certificate serial: 01964DB4D2AA03A19735CAE55F4C92D763F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
Manifest number: 148D
Signing time: Sat 19 Apr 2025 11:00:17 +0000
Manifest this update: Sat 19 Apr 2025 11:00:17 +0000
Manifest next update: Sun 20 Apr 2025 11:00:17 +0000
Files and hashes: 1: 1-V8d9umP0McsFhAezBGsGExpglU.roa (hash: CUsrGluvA/qkzyOPwb3wxAIF8Xp3/wYNAg7YgPlNKrk=)
2: AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl (hash: QZti6NM9eccRAG7PPs2rdYY39EVuheXkk6JX/VPLQLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:d2:aa:03:a1:97:35:ca:e5:5f:4c:92:d7:63:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Validity
Not Before: Apr 19 11:00:17 2025 GMT
Not After : Apr 20 11:00:17 2025 GMT
Subject: CN=a08e2a46eadbf0e9e7059f7a429710af64e25ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:da:b0:65:df:b1:a0:19:7a:d2:eb:53:d4:
26:11:7a:3e:d4:da:8c:2f:e6:0a:c9:93:4d:c8:fb:
54:1f:fd:bf:42:79:e9:63:e7:e7:ad:d9:75:15:56:
b1:c3:5a:46:29:a7:15:0c:3a:41:3c:76:e2:37:e2:
74:58:1f:03:24:a5:75:60:27:60:8d:e2:98:8f:53:
d5:ce:28:93:b1:35:ee:af:22:cf:37:10:be:38:a6:
66:25:c4:6c:6b:2c:33:8f:db:29:2a:a1:83:55:78:
10:92:03:9c:96:cf:a6:99:8d:f4:54:4b:3d:c8:81:
ef:1c:99:a5:bf:bc:d5:49:66:ff:29:e3:2e:79:cd:
ac:e3:71:7f:ea:5a:60:45:2c:cb:57:2f:fc:27:8f:
8b:ca:7c:06:32:04:5c:de:b8:6d:a5:26:49:75:44:
c8:a2:c1:df:78:9a:b4:c1:6c:58:27:93:2f:b9:c2:
69:1a:75:2e:fe:92:44:55:11:97:d8:84:77:d0:9a:
65:99:91:ca:d3:6f:18:b8:72:f2:47:bc:30:94:b4:
78:12:74:a5:82:85:0a:74:c1:3e:2a:29:6c:11:b7:
d3:1f:bd:bc:95:bb:d0:ad:a4:0e:11:f6:93:0e:5e:
43:83:39:19:d3:c5:9f:8e:3a:ba:54:9d:6f:e4:79:
64:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8E:2A:46:EA:DB:F0:E9:E7:05:9F:7A:42:97:10:AF:64:E2:5F:F8
X509v3 Authority Key Identifier:
keyid:01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:69:42:4d:73:7c:7d:68:ac:ef:9b:80:81:3b:84:38:9d:bf:
4c:48:64:7f:ec:15:de:eb:d8:50:7d:06:f8:ce:1c:00:c6:43:
4e:17:2a:97:a8:03:b4:e1:f4:3d:ae:8e:ad:c3:f2:06:37:43:
d8:f2:06:a4:af:0c:cc:04:96:d6:e1:d6:f9:c3:04:45:7a:94:
7e:bc:11:8b:40:c2:c7:48:16:a6:09:29:c3:23:e4:41:0b:d0:
0b:40:9a:f9:f1:52:9f:0c:b7:08:be:d6:a5:25:99:cd:98:39:
3c:7d:b8:8f:e1:f3:bb:ed:ce:b7:31:11:ac:b8:1e:f0:d0:3b:
17:d6:b9:96:1e:50:4f:cc:8d:11:95:0a:29:a9:90:27:f6:4a:
49:64:aa:7c:20:29:1a:b9:93:2f:03:7a:4f:7a:ff:8b:4c:03:
b3:3c:dc:38:fe:33:df:4f:9e:92:87:e6:58:cc:c4:2e:1a:33:
65:64:1d:ff:36:87:eb:52:90:c9:e8:e8:90:52:f6:09:53:49:
13:f4:30:6b:c7:73:08:07:6b:60:61:ce:7a:50:eb:04:c7:61:
33:4a:68:22:d7:7f:22:e5:e2:c2:6d:79:fe:01:e3:64:d3:3b:
57:30:19:a9:1f:40:9d:9d:ed:fd:5e:26:19:94:41:49:3f:d4:
8f:24:5f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:22:47 2025 by rpki-client