Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
File: AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft (raw, json)
Hash identifier: vQbKk1/4Fvs4D4CI7zA8/3LALiXy/1N9Il3YYfwnyKk=
Subject key identifier: 3B:DF:45:20:A5:20:D4:3D:3C:D8:A4:3C:E9:AF:B1:7F:A2:CD:D4:E5
Authority key identifier: 01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
Certificate issuer: /CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Certificate serial: 019659145FD6D78D09E6CD9787AA9C7D10F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
Manifest number: 05F8
Signing time: Mon 21 Apr 2025 16:00:29 +0000
Manifest this update: Mon 21 Apr 2025 16:00:29 +0000
Manifest next update: Tue 22 Apr 2025 16:00:29 +0000
Files and hashes: 1: AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl (hash: cRkiqRCreuVy/v2mY9njI7y6Y43vFYYRrusGbm91LHM=)
2: ejcizS9O97cOz2tmfObTCZwdW-4.roa (hash: wllgRCbw1IesItOzWT+KT7KXRGHhzCz/LBiRwpHauW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:5f:d6:d7:8d:09:e6:cd:97:87:aa:9c:7d:10:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Validity
Not Before: Apr 21 16:00:29 2025 GMT
Not After : Apr 22 16:00:29 2025 GMT
Subject: CN=3bdf4520a520d43d3cd8a43ce9afb17fa2cdd4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:f1:b3:d5:10:eb:8b:8e:7c:5c:67:f3:70:
23:20:d3:63:d0:ad:25:e0:e8:12:92:e0:fb:35:dc:
8b:82:aa:60:9d:e2:d3:52:ef:95:1c:b7:ea:b1:6f:
b5:f0:97:19:bb:41:18:b9:23:b7:51:93:47:15:83:
be:08:c5:3c:25:15:de:c1:c7:72:4b:4a:b9:f9:b4:
8c:c3:ea:c2:2d:a5:8c:34:af:2d:e2:cd:f1:ab:5d:
59:80:b8:fc:72:63:91:87:b0:5e:99:82:cb:82:0b:
54:2e:7b:af:24:e1:be:fa:69:7b:35:08:e6:e3:52:
57:31:47:7a:ac:ab:a3:ac:04:28:a1:e7:a9:d5:b6:
3f:c0:d6:b0:4f:24:d8:55:0f:74:25:74:2a:33:f7:
c3:05:9c:2b:e3:90:44:c0:48:ec:b7:25:f9:78:45:
56:d8:9a:23:d6:36:85:6c:ba:9f:2c:12:16:2a:7a:
cc:74:e4:43:33:bd:51:73:16:b8:fd:d4:8d:64:78:
d9:ce:60:f8:d3:f0:63:7b:f8:61:1d:83:41:73:b5:
03:80:77:70:06:23:4d:e9:34:28:f3:5e:28:bb:8d:
4e:2f:a6:a9:ca:a2:e9:97:5b:66:2a:36:97:dc:a7:
46:e1:ac:9a:ec:69:f2:8d:1b:c2:2a:ba:4d:82:0e:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DF:45:20:A5:20:D4:3D:3C:D8:A4:3C:E9:AF:B1:7F:A2:CD:D4:E5
X509v3 Authority Key Identifier:
keyid:01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:cf:aa:fb:f8:bf:e2:8a:83:8f:25:b0:21:6f:18:ee:bb:7a:
d7:87:cf:ed:6c:ab:6f:66:ea:3f:54:62:09:52:b9:48:fc:25:
6a:f3:07:8f:41:5a:19:dd:98:a2:dc:7e:13:9d:5b:1f:68:a2:
3e:49:86:95:3a:98:a7:a7:b3:a8:20:0c:c0:c7:bf:ef:6e:71:
37:0e:69:87:3a:10:00:39:11:3d:57:0b:99:33:66:a9:24:22:
dd:7f:fa:50:19:ba:ac:4f:0f:61:4b:b5:39:03:68:f6:47:aa:
e6:04:81:93:25:75:f8:a4:98:34:88:3a:bb:f9:1e:e0:86:90:
b5:0f:2a:9d:06:a6:0e:b0:e3:8d:c3:60:0b:73:12:31:9f:99:
98:91:30:ba:44:8e:95:33:0a:27:ff:fc:c2:c6:27:79:92:43:
5b:c1:dd:51:28:d4:7b:6f:51:c8:75:4c:c1:aa:b6:4a:27:0c:
57:f9:31:79:8b:6e:26:cd:89:eb:d9:20:fe:75:d8:20:0a:fa:
80:db:54:00:78:d9:ea:b0:c3:e7:01:e9:d5:fb:d2:f4:a6:a8:
ac:21:f6:a4:2d:1d:56:81:34:f7:31:5e:11:39:ca:b3:bb:b9:
24:e3:09:90:a2:d5:76:88:8b:ed:11:03:ba:e9:a7:67:93:1e:
6a:1d:6c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:34:59 2025 by rpki-client