Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft
File: ABPKmgrnGxDSnboMs-yrXxDfUXk.mft (raw, json)
Hash identifier: 2Zkk7+5FG/lZLitJWQJn3I8rY5+iCNKpkcZbVzNc3ig=
Subject key identifier: AA:24:AF:48:2B:4D:AB:15:D9:12:33:AF:44:FD:73:E9:01:E4:D5:3E
Authority key identifier: 00:13:CA:9A:0A:E7:1B:10:D2:9D:BA:0C:B3:EC:AB:5F:10:DF:51:79
Certificate issuer: /CN=0013ca9a0ae71b10d29dba0cb3ecab5f10df5179
Certificate serial: 01964F6C32E031AFDED47F99FAD931837640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft
Manifest number: 0BD6
Signing time: Sat 19 Apr 2025 19:00:12 +0000
Manifest this update: Sat 19 Apr 2025 19:00:12 +0000
Manifest next update: Sun 20 Apr 2025 19:00:12 +0000
Files and hashes: 1: ABPKmgrnGxDSnboMs-yrXxDfUXk.crl (hash: 2PkhYHFmj/nzp9x0/15CUBZ4Cq7ueRrmzXpH3ck5Y18=)
2: KOmHsYTT8dHL3QRmpI2yEaWq1H0.roa (hash: lw5VEiyghZjGPBV+Cuu9js4RXnD7F0lqD5TiyyWbpk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:32:e0:31:af:de:d4:7f:99:fa:d9:31:83:76:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0013ca9a0ae71b10d29dba0cb3ecab5f10df5179
Validity
Not Before: Apr 19 19:00:12 2025 GMT
Not After : Apr 20 19:00:12 2025 GMT
Subject: CN=aa24af482b4dab15d91233af44fd73e901e4d53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:22:3a:2a:f9:2c:aa:94:c4:c6:6e:d9:68:
7c:a5:ca:bb:e0:56:17:6a:e2:09:7b:59:50:f0:ca:
2d:ec:8c:14:0e:84:83:02:c8:5b:57:42:55:92:2a:
24:49:14:a5:b8:17:e4:b1:c8:85:d7:e0:b2:90:1b:
ec:5e:25:4e:82:74:37:5b:9b:ab:1d:93:1c:a7:df:
9b:db:11:f3:5c:86:ed:90:2c:40:89:b4:7a:65:71:
22:db:fe:fc:13:6c:c4:9f:d1:cc:11:36:65:c1:42:
62:fd:25:ec:43:2b:9b:57:15:a0:ac:e1:b9:58:cd:
f0:d6:b6:91:81:9e:69:17:c3:34:b8:93:53:ca:5a:
f4:84:bc:ea:04:c9:f9:62:ee:76:01:75:ff:70:09:
b0:1c:3e:c5:aa:34:a2:3b:9a:15:c4:6f:94:4d:3f:
be:6d:3f:f5:eb:f9:53:75:78:ef:fb:a0:ef:19:d1:
71:3a:17:23:1d:33:0f:ea:26:dd:8b:26:00:2c:7b:
03:60:eb:1d:53:3c:a1:31:8d:55:8a:49:3e:2f:0f:
f1:18:67:65:c5:fa:85:c9:dd:a0:54:67:6f:dd:0d:
7a:c3:af:42:b8:93:69:b7:62:97:0f:7a:34:80:36:
e2:ea:76:2e:8a:41:f7:42:ca:bb:04:6d:98:5c:70:
92:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:24:AF:48:2B:4D:AB:15:D9:12:33:AF:44:FD:73:E9:01:E4:D5:3E
X509v3 Authority Key Identifier:
keyid:00:13:CA:9A:0A:E7:1B:10:D2:9D:BA:0C:B3:EC:AB:5F:10:DF:51:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b1:af:87:d2:67:cc:78:65:de:fd:86:f2:37:46:2f:43:45:
ce:e4:23:09:f9:00:11:e4:49:ef:82:97:89:e6:12:ea:d9:a8:
cd:1d:d9:2a:d9:d5:4a:05:47:4c:61:98:2a:a0:44:5b:e5:36:
56:d5:5b:ce:fc:a5:a8:fe:42:7f:9a:4b:ca:3d:55:98:08:dd:
f2:47:8a:d1:c7:b9:f4:19:73:27:62:74:70:f7:14:2d:6a:49:
bd:fa:d8:61:af:7b:b0:9b:a4:c8:70:24:cd:24:6c:ef:12:2a:
6a:f6:64:84:2a:52:8e:9a:92:06:6e:30:56:e5:75:06:5b:ee:
e9:c8:1e:12:63:ad:a6:28:9d:4b:2a:ee:a7:2f:06:07:1b:3c:
f3:63:b9:52:3d:20:73:74:7e:9c:67:79:f7:c4:bf:17:45:4d:
e2:a6:60:b5:25:ac:42:88:b9:8a:39:99:33:e4:50:09:08:bd:
09:a6:39:7e:0e:3c:d6:66:c1:14:01:dc:6f:de:0d:98:ef:0d:
07:4e:c3:4e:e0:e0:fd:f5:a2:98:1c:5c:0a:94:5b:4f:7e:4c:
87:cf:0c:cb:f9:9d:79:50:de:d0:48:55:6c:c9:cd:5a:28:32:
46:69:7f:d4:15:34:31:67:38:47:7b:16:01:19:50:c1:08:5b:
e0:80:05:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:07 2025 by rpki-client