Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier: ZO4K3u336N+D6h3li/TMRCKcmK2AOnCGvCItY7eJC7I=
Subject key identifier: 4F:27:32:B8:1B:B3:51:EF:D3:FE:8E:0A:E1:21:6C:13:BD:28:A6:B6
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 01965A5DC823E8F542358FAA516EA1FF9164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number: 05C7
Signing time: Mon 21 Apr 2025 22:00:17 +0000
Manifest this update: Mon 21 Apr 2025 22:00:17 +0000
Manifest next update: Tue 22 Apr 2025 22:00:17 +0000
Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: z6ZkJ5FpAP8wwkOLliLpsGlCTlTVwEhmDc+B6WfNiYk=)
2: F2c_uapmp4EWBvth9YsoExmggYE.roa (hash: F+OHkAH0cbjuGBPEpniF6/AR3wbSHhM+96aLypnHnng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5d:c8:23:e8:f5:42:35:8f:aa:51:6e:a1:ff:91:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Apr 21 22:00:17 2025 GMT
Not After : Apr 22 22:00:17 2025 GMT
Subject: CN=4f2732b81bb351efd3fe8e0ae1216c13bd28a6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:a9:60:73:49:8d:e9:1e:c6:dd:50:54:8c:
de:86:4e:6b:f6:35:c1:b3:35:3c:f1:38:eb:57:94:
8a:eb:df:7e:83:36:6e:3f:da:29:41:0b:8e:52:08:
ad:12:65:63:f8:7e:b1:29:3f:19:60:2b:92:72:40:
0b:40:00:8d:04:99:71:78:cc:0d:06:4c:be:dc:fa:
96:b3:5a:e9:d2:4a:aa:0c:76:68:42:09:3b:8a:94:
6b:b8:22:8d:64:0b:fa:9f:44:b2:64:8a:d3:b4:cb:
ce:35:76:6f:bc:30:36:dd:ca:b8:c4:ca:19:17:06:
f4:24:98:9f:bf:1b:7d:ac:9d:8b:f6:ac:f7:56:3c:
12:67:86:9b:77:1c:94:9b:2b:fc:17:4a:3e:20:e6:
7c:61:a2:ea:24:ad:13:5d:59:4c:4d:ff:ea:7e:9f:
6d:57:a3:48:19:71:e7:9a:46:ea:10:1c:82:4c:f0:
24:03:68:0d:50:5f:15:8d:5f:79:8b:d2:1f:c1:6f:
48:67:d9:a7:bb:1f:a7:fb:1f:f4:25:bb:6c:db:77:
00:65:c3:f9:25:cd:a5:eb:d0:2a:6e:76:a4:be:34:
43:9c:6e:91:c8:80:d8:c1:60:95:9e:cf:c6:21:20:
cf:d7:f1:4e:7b:9a:a2:1a:14:28:c6:0a:32:6d:9b:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:27:32:B8:1B:B3:51:EF:D3:FE:8E:0A:E1:21:6C:13:BD:28:A6:B6
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6f:a6:c2:b4:7d:eb:c0:ba:d1:8c:b7:30:81:38:bd:6e:29:
d0:75:0a:09:06:70:71:22:7d:fe:a1:c7:10:df:0b:e2:9c:0f:
90:47:54:63:50:4b:13:c6:35:1c:c9:44:c5:82:09:3e:a0:66:
b0:89:0d:9c:6c:02:b4:55:6d:2c:55:5a:5d:e5:22:f6:23:ef:
36:38:34:85:dd:29:4d:e2:2a:31:52:b1:76:5e:1a:81:d6:fd:
39:8f:a1:91:9d:80:e1:05:b9:02:86:79:9b:6f:2c:cd:ab:d9:
d4:b8:b4:1f:d7:40:08:80:6e:e7:94:ce:62:a7:9e:c4:b6:c2:
bf:23:bb:a0:e8:20:f4:60:4c:2d:65:8d:02:6c:7a:f2:57:13:
b2:c3:f3:32:ad:79:5c:68:79:fd:0a:03:f0:4c:83:76:2f:1e:
f2:ec:91:b2:80:bc:39:78:74:3c:91:4e:9a:7d:49:15:97:68:
8e:18:c2:fd:bf:9e:cd:a8:a1:8e:22:16:7b:6e:76:30:85:a8:
d4:87:98:a7:57:0f:22:91:40:cb:20:b7:67:76:ce:69:f4:97:
54:be:68:a4:25:a9:cc:35:64:45:11:32:8a:d3:75:62:6e:6d:
2b:76:34:f2:a7:7f:56:98:43:83:5f:15:bf:fc:80:ba:29:88:
1f:de:31:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:52 2025 by rpki-client