Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json)
Hash identifier: 1rFE4NXXcAlD85Wn4fmRUnruVyMx+VHj0f2ycxgsgAw=
Subject key identifier: B2:0B:10:47:A2:C0:80:6E:43:8D:BD:84:55:5E:99:08:65:38:C7:E0
Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Certificate serial: 0196458DB5F92CE19ADC5A555B04797B33C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
Manifest number: 0A21
Signing time: Thu 17 Apr 2025 21:00:37 +0000
Manifest this update: Thu 17 Apr 2025 21:00:37 +0000
Manifest next update: Fri 18 Apr 2025 21:00:37 +0000
Files and hashes: 1: 5uljjHiNNOaac26tRfDYMvtnMkY.roa (hash: Q7M6Bp79D6O8dYm6M5ML2nLIMBbVb2sxR0r3nfKEu6U=)
2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: kmexehcDqg1FuZOcb3JctcXJR5lcJ7T4fhpy/dXb/5A=)
3: v48Lr2EX71CfbBZZKT-B2CDMZWI.roa (hash: FbcS7Loz8XtWLz+emLVfELqvfvzTkNt/9jQwmw4FZhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:b5:f9:2c:e1:9a:dc:5a:55:5b:04:79:7b:33:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a
Validity
Not Before: Apr 17 21:00:37 2025 GMT
Not After : Apr 18 21:00:37 2025 GMT
Subject: CN=b20b1047a2c0806e438dbd84555e99086538c7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ea:9c:06:52:4c:c9:8e:61:b3:2c:80:45:9d:
ff:ce:b9:d0:2f:aa:c7:83:70:f1:d1:26:5f:8c:d4:
f1:a3:ef:d8:09:a4:51:ef:6b:a0:53:b1:2a:22:3f:
3e:fb:9e:32:c8:42:e8:5b:79:15:d8:bb:d0:81:66:
75:7c:d1:d3:28:ff:90:9d:89:2f:65:37:80:ef:b8:
14:ee:fe:2c:3c:fd:d2:8d:9e:4f:85:11:d8:a4:1e:
c2:1d:56:39:e7:f1:df:80:d4:95:18:1f:0c:ad:db:
36:8d:ed:60:a1:ea:99:c9:c3:7f:3e:54:d8:57:88:
04:90:16:77:bc:a6:6b:e6:94:6c:ac:e9:f5:ac:70:
0c:5c:2f:87:1e:35:13:0f:0f:de:24:2b:2f:df:5f:
13:a4:1d:80:ba:10:17:fd:26:68:98:22:7a:01:97:
99:a9:80:08:d9:2d:f5:2f:7d:49:12:7c:fa:f0:01:
04:54:d8:09:3b:f2:50:98:0f:8a:10:09:3a:7d:70:
70:6a:21:93:65:45:3e:50:41:0f:68:95:2e:3f:26:
49:79:01:2d:6a:52:d1:10:1c:5d:be:73:4c:40:04:
0e:96:f3:33:b8:b4:3a:5d:20:68:84:96:92:54:6b:
2d:2a:a0:5a:c6:b9:24:86:42:23:f8:07:a0:7e:6f:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0B:10:47:A2:C0:80:6E:43:8D:BD:84:55:5E:99:08:65:38:C7:E0
X509v3 Authority Key Identifier:
keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:87:5d:db:ce:bd:59:bc:fa:4b:af:a5:9d:aa:f5:a4:3a:a8:
eb:2a:1c:ea:e6:64:40:08:81:14:c1:3a:48:42:ab:d5:d2:8d:
44:ed:34:7d:75:0a:bf:72:bc:7f:66:b7:af:dc:ad:b6:a0:1d:
53:3e:f2:06:bf:a7:87:f8:70:6d:52:26:16:48:93:34:76:b3:
c3:b5:77:5e:a0:a7:33:e3:2a:2b:9d:e8:22:4d:71:59:07:f2:
4f:44:40:a7:14:c1:db:40:e9:51:fa:19:3f:b7:77:5d:58:b7:
f1:4d:7f:65:1f:fc:95:4d:63:be:3f:58:38:c9:a0:c0:be:e3:
ce:91:aa:24:98:23:69:ba:42:40:98:c2:9c:e9:91:96:81:f3:
f9:6d:24:1f:f4:da:0f:85:65:0d:22:80:d9:cc:a5:a2:20:9a:
ec:03:cd:63:80:32:2c:98:97:68:5e:b9:63:c8:90:74:be:d4:
7f:59:06:39:8a:a2:b2:5f:26:d7:d9:86:cb:e4:37:40:ba:b9:
59:6f:20:01:05:4f:8e:ed:54:e0:60:b5:cc:ce:2b:38:c6:27:
17:d4:0d:8f:d3:00:20:25:fb:5d:82:27:d3:38:13:54:a9:c0:
9c:34:35:d3:ff:3d:ea:f1:a7:1a:57:bd:e5:e1:fa:b6:be:8f:
1b:19:4b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:22:52 2025 by rpki-client