Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
File: AsLBh9mLRgOATtEWWttFCbYwqDo.mft (raw, json)
Hash identifier: O4t/8KA1Xvdi3JLuZLz7a1MZlVXjZFKvdolaj4VX8QY=
Subject key identifier: 2C:F6:83:BF:E8:6D:8E:9D:57:61:1D:02:6C:E7:55:C2:93:42:4F:34
Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Certificate issuer: /CN=02c2c187d98b4603804ed1165adb4509b630a83a
Certificate serial: 0196545BEA640DCBFC2A3FD0B5869F44AE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
Manifest number: 09F2
Signing time: Sun 20 Apr 2025 18:00:31 +0000
Manifest this update: Sun 20 Apr 2025 18:00:31 +0000
Manifest next update: Mon 21 Apr 2025 18:00:31 +0000
Files and hashes: 1: AsLBh9mLRgOATtEWWttFCbYwqDo.crl (hash: BZvSzGABCr9CdlmW/O6Y8LbqhzK10nWnk0BmcuYsuMY=)
2: vSD8XToST3_PVTIy1XwVerhMPWI.roa (hash: Yvhr0/CtepPwOm3ynZwacKeoADnHcOUi9JQFKNsVsJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:ea:64:0d:cb:fc:2a:3f:d0:b5:86:9f:44:ae:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a
Validity
Not Before: Apr 20 18:00:31 2025 GMT
Not After : Apr 21 18:00:31 2025 GMT
Subject: CN=2cf683bfe86d8e9d57611d026ce755c293424f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:69:a1:58:cb:55:8f:e7:07:d5:bd:ef:d3:
82:9d:e9:9c:44:17:4a:00:79:f4:1b:57:48:37:44:
9c:d4:c1:80:e1:46:64:42:7b:25:d4:aa:cd:d9:da:
c8:1a:f6:78:95:05:b9:46:1d:9d:20:f3:e6:f5:3c:
03:76:7e:8b:df:6e:1d:0f:36:1c:c2:c6:ae:2e:cb:
c1:3a:86:ba:b5:2c:8a:2d:64:f1:50:7d:78:b2:23:
c9:7f:de:e7:54:d3:6b:2c:65:23:59:6d:c4:21:47:
9b:6c:19:5a:26:ab:4e:8f:7b:a7:34:78:6b:c7:48:
83:28:1d:e5:cb:26:0a:0e:cf:e9:57:91:dd:38:b2:
a3:7f:64:46:4f:6d:91:7e:01:46:f9:30:d3:7f:aa:
fe:06:07:9a:29:86:09:f0:d3:79:1e:f1:21:d0:92:
2a:9e:dd:ba:ee:27:ea:b2:46:d1:a5:4b:49:16:2a:
3c:9f:35:b4:9f:f4:84:67:6d:9e:9d:d0:a5:3f:72:
a6:c1:52:bc:49:f9:61:14:0c:cf:62:3c:dd:dc:4b:
a9:26:6d:65:b1:57:f4:9c:68:d5:4a:8b:e6:58:b8:
90:a3:42:6c:36:7c:be:c2:c3:ad:bd:3c:d2:ee:7b:
35:d3:b9:23:89:b1:61:3b:6f:04:be:7e:20:89:52:
56:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F6:83:BF:E8:6D:8E:9D:57:61:1D:02:6C:E7:55:C2:93:42:4F:34
X509v3 Authority Key Identifier:
keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:91:3b:56:d8:58:d0:83:cf:9f:60:b5:8f:cf:6f:ab:ff:d7:
a3:67:c5:2b:52:26:c4:0f:ab:1b:04:ab:17:6b:72:6e:01:cf:
fc:a0:af:da:92:f0:45:90:91:10:39:d3:2c:0c:8c:a4:31:e8:
99:52:44:38:c0:1d:d4:91:0f:85:bd:07:55:19:a0:8a:97:54:
dc:63:11:ce:44:07:a6:e3:2e:d4:be:bf:2a:7c:46:c0:23:98:
34:ec:29:93:e6:60:f4:ce:cc:80:98:56:ed:4d:63:e7:a0:a7:
7f:70:14:c3:76:46:cf:1a:ac:2e:d8:02:2a:24:ed:a2:e8:d6:
7a:25:fd:d9:4a:ad:b8:47:67:e7:a3:61:cf:e1:46:7a:c0:30:
00:47:f9:c5:fd:ba:da:d2:e7:83:57:a1:78:5d:fc:9f:28:a4:
58:de:62:62:79:66:74:d4:1e:b7:1b:28:01:8f:4d:90:b7:6d:
db:d2:19:34:b9:b5:e5:a1:96:28:fc:e7:65:c8:58:db:23:81:
ff:7f:ef:67:b8:4d:31:31:93:c7:7c:e4:8f:7c:af:6b:5e:78:
3b:10:44:94:ad:bb:6d:0a:af:ae:89:d2:87:80:ce:fd:9d:c1:
20:1d:7e:fa:02:8a:b6:10:37:f3:ae:3a:55:af:a2:a3:f6:32:
df:dc:46:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:32 2025 by rpki-client