Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
File: AwkPrDzELxmXRVoS5kMGRjfGncM.mft (raw, json)
Hash identifier: BtyDz9I3/T3u/hSX3t3OQ/KjAyBQ02htucvvHtJehfg=
Subject key identifier: 10:88:83:7E:DA:B5:AE:F8:7A:A5:12:0F:55:61:E5:CA:C3:25:5D:09
Authority key identifier: 03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
Certificate issuer: /CN=03090fac3cc42f1997455a12e643064637c69dc3
Certificate serial: 019654934A84780FD27810A735EC2E0D8626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
Manifest number: 0A39
Signing time: Sun 20 Apr 2025 19:01:01 +0000
Manifest this update: Sun 20 Apr 2025 19:01:01 +0000
Manifest next update: Mon 21 Apr 2025 19:01:01 +0000
Files and hashes: 1: AwkPrDzELxmXRVoS5kMGRjfGncM.crl (hash: hBWom14OkC6oGvQrzamur7WT4+hphJPw4SmcoAjbNwg=)
2: IXB7KzKujGJB9qHSV-0muRiEa80.roa (hash: BqHzdDeRfi2F8mGR+zPLtSwSdgCJjnyKcweTv1mlvB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:4a:84:78:0f:d2:78:10:a7:35:ec:2e:0d:86:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03090fac3cc42f1997455a12e643064637c69dc3
Validity
Not Before: Apr 20 19:01:01 2025 GMT
Not After : Apr 21 19:01:01 2025 GMT
Subject: CN=1088837edab5aef87aa5120f5561e5cac3255d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:5d:10:da:9b:e7:13:5e:35:9b:6c:29:31:
02:c5:14:a2:d5:42:4a:82:b5:fd:02:f5:46:9c:8c:
8b:5d:1a:01:58:ae:8c:39:c5:9b:99:62:2f:5e:66:
06:3f:f2:b3:ae:2d:7f:b1:6e:6c:3a:b6:d9:7f:0e:
89:46:31:cf:b8:cd:52:0c:87:2e:6c:84:7e:03:fa:
fe:49:5b:81:1d:2e:24:97:34:8c:84:a3:93:f0:77:
e5:1f:19:f6:08:22:4c:08:52:6a:82:38:8a:6e:2d:
0f:25:6f:43:65:85:14:2d:eb:6a:d3:e8:56:bf:95:
91:fd:ff:4a:9c:4b:06:c2:21:87:51:6e:c1:45:f4:
83:6d:a6:dc:86:96:02:82:51:c4:cb:8e:c4:e1:e6:
c7:2d:72:71:7f:2c:5e:e7:c3:15:2c:9e:d0:f3:ba:
9b:03:02:b1:84:a4:74:e6:33:58:58:06:5b:c4:7a:
b3:5f:f5:f3:1a:db:ec:d5:af:6e:5f:3c:c0:2b:80:
d4:d5:24:10:f6:22:35:8e:14:71:ab:d7:12:7e:9a:
4c:86:7c:f6:a3:f2:fd:5c:41:92:23:5b:74:1f:ac:
b1:6a:fc:7e:d1:37:68:a6:dc:a2:ac:b3:ce:a5:65:
69:6e:9f:e4:a5:c2:b7:0f:bc:12:8a:a7:75:9b:be:
89:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:88:83:7E:DA:B5:AE:F8:7A:A5:12:0F:55:61:E5:CA:C3:25:5D:09
X509v3 Authority Key Identifier:
keyid:03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6d:00:68:d5:1c:ba:1e:36:2d:0d:fe:e4:2e:4d:31:9f:21:
90:24:9b:4f:01:38:bb:b4:80:82:54:07:05:49:86:08:94:b5:
43:3d:97:09:06:b7:b6:b2:fe:f1:03:a0:1f:11:01:77:e6:c4:
ad:ae:97:7e:97:79:ba:89:ec:dc:99:b3:81:c7:84:d4:c5:a2:
c1:4a:5e:29:95:c1:4c:28:cd:1f:38:69:f6:84:ef:dd:21:4c:
71:04:3e:29:5d:72:53:c0:77:8d:b9:de:38:20:0b:38:37:7e:
cd:3b:f8:4c:84:d5:3f:c0:90:3e:83:d3:01:11:da:3d:7b:ae:
8a:22:ea:b9:90:e7:d3:c2:ca:22:55:07:62:af:fa:16:75:7a:
c2:03:ae:ec:04:1b:cb:06:53:80:00:6e:5a:70:ef:bb:f8:09:
dc:5e:3b:40:fa:1a:75:f6:93:4a:b0:0d:43:3f:2e:5a:fc:fa:
ac:75:bf:22:05:49:bd:82:2d:da:8e:e3:c5:d2:5e:4d:54:29:
09:5d:40:12:49:60:9f:2c:db:25:5f:eb:14:ce:69:f8:ab:c9:
bb:fe:8c:f7:f6:f4:e4:87:98:f8:14:41:97:45:fe:ee:af:71:
35:d9:60:d6:1b:51:4c:d4:c5:b9:6a:1e:5e:3f:57:9c:1a:92:
20:a9:1b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:24:01 2025 by rpki-client