Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
File: aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft (raw, json)
Hash identifier: Du5iPbzGvHOPY7xMOK4gr3EkJ0i5eEZcz5dXlXT70AI=
Subject key identifier: 4C:D0:46:71:B7:8B:EE:06:C6:3F:83:90:BF:3E:59:BB:33:5D:80:6E
Authority key identifier: 68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50
Certificate issuer: /CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450
Certificate serial: 019590060D19388A3439A0B7AE84A9019DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
Manifest number: 149A
Signing time: Thu 13 Mar 2025 15:01:10 +0000
Manifest this update: Thu 13 Mar 2025 15:01:10 +0000
Manifest next update: Fri 14 Mar 2025 15:01:10 +0000
Files and hashes: 1: Hpq861GqA5RqLih08GH13MdllW0.roa (hash: 6UGmd69y3tVELywuvYudCcD/UUgHO86OmDHx4Pt/TNE=)
2: aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl (hash: HRIvnS41ewUffOojoHOWYtl0/EXJPIorkY7PhQSTnZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:06:0d:19:38:8a:34:39:a0:b7:ae:84:a9:01:9d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450
Validity
Not Before: Mar 13 15:01:10 2025 GMT
Not After : Mar 14 15:01:10 2025 GMT
Subject: CN=4cd04671b78bee06c63f8390bf3e59bb335d806e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cb:e5:9e:20:09:85:65:88:ba:0d:36:28:0b:
aa:df:ee:c8:f8:26:96:b2:11:8e:79:9d:92:51:08:
66:41:c4:f0:a5:59:07:0f:4d:3b:ae:10:19:71:b4:
6a:55:12:da:d3:62:e9:e0:2a:3d:32:f8:20:7a:62:
4b:44:62:b1:b9:6d:8a:92:17:e4:a9:64:82:51:37:
a4:92:af:35:8b:09:81:26:cc:45:37:71:ce:d8:80:
4a:7e:47:30:5f:5e:c8:50:04:e8:9e:35:c0:df:9e:
bf:d6:52:41:9c:cf:91:00:05:47:22:4e:c9:a9:dc:
4f:73:bb:a1:0c:ba:95:e5:8e:12:90:61:39:a1:62:
74:d6:0d:84:ce:b2:e7:c7:13:25:df:66:c1:34:05:
b5:f8:81:08:a7:9e:76:0e:62:f9:89:e0:5f:20:f5:
c9:4f:7e:fa:ac:06:69:52:d0:02:c8:1c:ab:93:08:
4f:d9:eb:63:76:d2:fc:f3:b3:bf:d9:78:43:44:05:
18:e9:ec:7f:56:eb:ca:d7:54:e9:87:6e:df:11:9d:
19:a7:42:a5:44:cc:a4:7e:6a:75:d5:07:f1:22:c8:
d6:eb:b4:62:14:aa:38:3a:c7:36:a6:f1:10:0e:e3:
1f:db:c8:2b:6c:eb:be:69:2d:cc:6d:24:2a:54:61:
ee:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D0:46:71:B7:8B:EE:06:C6:3F:83:90:BF:3E:59:BB:33:5D:80:6E
X509v3 Authority Key Identifier:
keyid:68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c9:a1:2a:9c:b9:45:34:03:a9:2d:cd:bf:f0:de:e4:18:4d:
c0:6a:38:03:a5:e8:64:af:6b:c5:d5:21:bd:f7:a0:65:ba:e4:
cf:8d:56:f6:d6:a1:d2:45:2c:92:d2:dd:e1:18:40:8b:68:0d:
0f:1a:e1:5a:69:d4:0b:3f:a3:08:d8:6c:49:50:cd:0a:25:2f:
19:dd:c1:eb:83:25:b8:b0:10:5b:31:22:82:93:9a:80:d7:2a:
b1:65:5c:1c:f9:10:c6:62:1a:f1:c9:ed:cb:3a:2b:bb:57:da:
44:b3:ea:2a:ba:3e:5d:45:8d:24:fe:3d:c7:e7:79:3b:1d:3d:
31:43:8a:f8:83:13:78:e8:c5:2e:0d:2f:d6:9f:2d:88:71:88:
ab:88:5a:08:09:9f:75:cb:65:87:8e:1f:3d:f6:a4:31:7a:10:
72:46:30:03:12:9f:98:7d:db:93:f7:41:41:80:35:9f:74:c7:
cf:18:94:8a:d8:d3:b3:1e:f9:aa:67:fa:4b:1f:85:55:86:01:
be:24:ea:e0:90:25:02:79:68:88:3f:88:f8:8e:a2:b6:0a:87:
f3:1e:8f:29:e4:5c:1a:08:9f:06:46:9c:93:e9:10:61:53:95:
98:14:93:20:71:ab:33:8b:ed:c9:df:25:9d:6d:4e:1b:c6:da:
1a:0f:3f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:38:37 2025 by rpki-client