Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
File: aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft (raw, json)
Hash identifier: MeXlrcCblsDtmDqrq+hGwwPHUcUFD+pXa1UJZDiCy1E=
Subject key identifier: 04:0D:03:BF:C2:9C:A6:C6:9C:FC:43:7D:3F:38:BD:2F:49:4E:3F:C8
Authority key identifier: 6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A
Certificate issuer: /CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
Certificate serial: 019657CB6793DA1527AA310A61B9BAE263E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
Manifest number: 0140
Signing time: Mon 21 Apr 2025 10:01:09 +0000
Manifest this update: Mon 21 Apr 2025 10:01:09 +0000
Manifest next update: Tue 22 Apr 2025 10:01:09 +0000
Files and hashes: 1: Uk__OZgps3cW-lHF28p4Fkxzez8.roa (hash: xpOF8IhBwl9sbc7jkk5/9vqgBdRwATYGkdLVpY/CHdk=)
2: aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl (hash: RZHzUfzjH/oc9wEvEQ/knvWOHDeKOkp+K88U2VJP2UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:67:93:da:15:27:aa:31:0a:61:b9:ba:e2:63:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
Validity
Not Before: Apr 21 10:01:09 2025 GMT
Not After : Apr 22 10:01:09 2025 GMT
Subject: CN=040d03bfc29ca6c69cfc437d3f38bd2f494e3fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:c5:1e:b3:ac:b8:f1:f7:b9:41:29:8e:b0:
99:95:0b:04:33:a5:95:26:17:0a:58:f1:ac:f5:43:
ab:f0:62:ab:95:02:40:f6:52:13:81:3a:07:ce:ce:
46:7a:57:f8:d8:b9:53:b4:82:60:84:61:d0:f1:42:
61:d4:ff:41:bd:76:7a:58:f9:6c:48:f8:6f:54:61:
5b:04:d6:5e:50:4e:5a:a3:e9:49:a9:3d:bf:08:f2:
97:36:ed:71:95:41:98:e6:14:cb:2b:d4:c7:1c:1f:
43:38:1a:36:3a:2d:09:53:16:50:a1:52:36:ff:b3:
23:e5:80:af:da:b6:b6:48:2e:3b:0d:47:4c:89:38:
be:8f:fa:cc:bf:c6:ce:54:a6:9f:c8:64:52:b1:be:
e4:d0:46:69:4e:40:e2:e4:8a:1d:92:b3:fd:54:d0:
6c:53:6f:d4:3d:e2:f6:8d:b1:08:e3:0a:60:58:bf:
0a:a4:9a:b2:14:b4:39:7b:22:68:dd:98:12:91:4f:
42:ef:e3:4f:20:4e:a9:19:a3:68:ee:da:1d:a4:f6:
93:8d:12:ff:74:60:95:38:f1:1b:3e:f8:a0:e3:14:
f8:7d:df:b4:06:68:d4:13:5c:95:69:b4:82:bc:20:
ba:9a:df:54:a3:d5:20:37:1e:f2:2a:a8:5d:2c:a4:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0D:03:BF:C2:9C:A6:C6:9C:FC:43:7D:3F:38:BD:2F:49:4E:3F:C8
X509v3 Authority Key Identifier:
keyid:6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:84:70:fa:19:94:c2:e6:54:6d:5a:d3:ab:ca:66:f0:3d:6a:
d6:b7:1a:37:63:40:b5:54:0f:86:38:af:5a:76:18:6c:a7:6d:
2a:25:f3:3a:c7:f9:11:eb:a8:90:c1:be:90:c6:fe:0a:2f:7f:
9b:c6:5e:78:e2:30:87:34:65:fa:48:75:32:dd:1d:61:2a:f4:
0b:f4:b3:3f:52:1e:29:65:c2:77:93:3f:b8:a2:e6:7c:eb:de:
8b:7c:9f:39:37:39:5d:35:11:af:d7:5f:fe:29:85:01:1e:53:
52:ac:23:8b:bd:f0:63:b1:c7:b9:4d:a8:f8:00:ba:ad:b1:ec:
4c:15:fc:36:b8:84:49:31:01:ba:ae:cc:48:a6:57:b3:46:3a:
e6:ac:9c:b2:5a:49:3b:7a:8f:e7:62:91:ca:86:35:84:65:1d:
a3:64:3f:cd:51:1a:ef:05:cf:5e:79:d5:c0:f2:57:69:f8:cc:
ff:f8:82:fd:07:1c:98:c7:d6:39:e4:01:e1:ef:e9:35:1a:f5:
d0:57:7e:1d:59:9c:36:b0:bd:35:f8:9d:9a:52:4f:d4:2f:af:
1b:ab:05:f0:f8:b0:5d:09:9a:7c:4f:82:77:06:d0:68:ca:71:
11:09:00:72:46:4b:b5:bc:7c:8a:a2:92:b8:96:2d:b8:e7:b3:
58:92:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:22 2025 by rpki-client