Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
File: aVTpCJn_JWRFIHJM3owhFhNgC-8.mft (raw, json)
Hash identifier: AOM60sQQlbk+vQq53DySi+Ec9UMGfkgT5t9AsVTnp0s=
Subject key identifier: 56:E5:58:78:5D:C0:60:CA:D0:6B:2E:1D:9E:64:D5:7C:EF:7A:1A:30
Authority key identifier: 69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
Certificate issuer: /CN=6954e90899ff25644520724cde8c211613600bef
Certificate serial: 019613587E198CB5352CCD2A3743B83C111C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
Manifest number: 14DA
Signing time: Tue 08 Apr 2025 03:01:28 +0000
Manifest this update: Tue 08 Apr 2025 03:01:28 +0000
Manifest next update: Wed 09 Apr 2025 03:01:28 +0000
Files and hashes: 1: KG5vfN5Uvfai8ejvP2GF9IZcxGI.roa (hash: tUW+ah0ofkg4/88FsRUE5OcUfQMkD6Zq0UYxy47va9A=)
2: aVTpCJn_JWRFIHJM3owhFhNgC-8.crl (hash: GgXjUq3UeBhm5g9F5TpFugm3VbGsKq4Er/Z0L1Fw+l0=)
3: z4qOlf0RFKvmrLipGybi9vRSQo8.roa (hash: ekx6TWWmFCXsO4PnzGvIUJMQy90Loghm7Y0vzWHJWE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:58:7e:19:8c:b5:35:2c:cd:2a:37:43:b8:3c:11:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6954e90899ff25644520724cde8c211613600bef
Validity
Not Before: Apr 8 03:01:28 2025 GMT
Not After : Apr 9 03:01:28 2025 GMT
Subject: CN=56e558785dc060cad06b2e1d9e64d57cef7a1a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:97:44:f0:b6:ea:2a:ce:e6:15:ce:46:c9:e3:
48:88:b6:af:f7:96:3c:62:f9:25:8e:92:2f:68:42:
ee:0f:bc:6a:ad:56:43:83:b7:82:b6:74:a6:7d:ed:
73:4d:ae:e7:6a:ee:3a:9b:c1:19:d1:fe:70:21:39:
03:49:09:37:51:1a:7f:5b:d9:50:e4:42:0b:4b:c7:
e9:04:f4:7b:23:ed:72:0d:6f:7e:9a:ea:2f:45:5f:
2d:e3:0c:15:84:1d:23:7f:72:06:b1:eb:d9:ed:66:
ff:9d:32:4b:b0:34:f2:f9:b5:71:48:2a:85:9c:35:
10:26:32:54:04:2e:39:21:8a:60:e0:a7:f7:7c:58:
40:fd:77:c3:6a:6e:4d:b6:70:06:8b:2c:a0:a4:37:
3e:88:82:aa:95:1a:e7:85:32:dd:e4:b3:6f:4c:26:
07:6e:74:e0:c3:a3:1f:6c:da:0d:39:53:17:15:f1:
08:16:18:11:4c:3a:ff:e5:11:9d:22:02:97:18:c9:
42:13:62:ac:88:80:49:8c:6e:47:89:cb:a2:74:c4:
61:1c:49:fd:8f:02:bb:5a:45:91:ea:a0:88:16:36:
08:41:41:0c:b8:62:9a:c2:1c:68:57:5b:11:57:57:
c3:ac:a5:8f:1c:cd:b8:b0:2f:38:c2:4d:ec:f4:d5:
34:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E5:58:78:5D:C0:60:CA:D0:6B:2E:1D:9E:64:D5:7C:EF:7A:1A:30
X509v3 Authority Key Identifier:
keyid:69:54:E9:08:99:FF:25:64:45:20:72:4C:DE:8C:21:16:13:60:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVTpCJn_JWRFIHJM3owhFhNgC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1cb911-5e7f-49e8-b4f0-3f6ee705915b/1/aVTpCJn_JWRFIHJM3owhFhNgC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:88:7c:69:d6:95:d0:9e:62:7b:cf:be:22:d4:3a:51:28:24:
6f:9e:b6:82:84:c2:5a:78:18:ee:ab:4c:66:8b:30:4b:1a:53:
d6:62:83:1a:61:64:b0:30:e4:68:3c:f1:6e:0e:f7:70:32:4f:
c7:e2:97:8f:bc:a9:39:ee:15:08:85:02:eb:95:b5:6f:21:b4:
f8:5b:73:2d:31:13:e5:4e:e9:72:9f:32:83:24:d7:b7:64:66:
7e:06:b3:01:9a:c5:1f:c6:b9:66:35:0e:46:a5:88:76:bd:09:
75:f9:4c:37:20:ec:6a:5a:6a:a1:ae:e3:25:38:ba:55:08:42:
0e:b9:14:02:67:f6:54:36:87:ac:41:fb:e7:fc:bb:cb:c9:0f:
51:3b:61:a8:17:6d:b5:04:da:ed:27:15:42:7a:53:48:02:3f:
88:98:38:26:e4:26:4c:05:76:89:47:13:f2:ef:67:76:67:08:
c2:ce:e1:18:87:12:4b:f2:6a:3c:60:d2:2f:69:41:51:c8:8f:
40:4b:24:f0:72:72:2e:e0:ae:f9:59:a9:36:82:ba:95:e6:71:
a2:9b:bd:f8:e4:18:43:9b:dd:13:fa:bf:7b:7e:c5:38:f1:08:
b6:15:7a:79:7d:20:58:74:41:97:50:e7:ad:74:b1:70:05:0d:
1f:bd:6c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:16:16 2025 by rpki-client