Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
File: AmWtlOeXE1kGs-EahHyOr9CU50U.mft (raw, json)
Hash identifier: 2eRuY/+/jgKVeVAKMSuzjhGreZXanAJhMvBCkQAYf78=
Subject key identifier: 56:18:D7:83:66:13:1D:2E:5E:94:75:AA:31:50:9B:27:41:29:88:6E
Authority key identifier: 02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45
Certificate issuer: /CN=0265ad94e797135906b3e11a847c8eafd094e745
Certificate serial: 01965A26F31010CDA36793CE684559AA57B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 21:00:23 +0000
Manifest this update: Mon 21 Apr 2025 21:00:23 +0000
Manifest next update: Tue 22 Apr 2025 21:00:23 +0000
Files and hashes: 1: AmWtlOeXE1kGs-EahHyOr9CU50U.crl (hash: DPytq1mMK7Weiu+AQFp8t2MIb4+YJelbbV94YJ9fB4Y=)
2: SZBAF2HXjdb03PkJpOVysksT_8k.roa (hash: Krg8gvZLzhIMGcL+cCXvbm4nAV3yJmkdyGbkdVJo2Lc=)
3: ubILPtIGLcaC5tdulnfQHq0BdoU.roa (hash: BJYBDA5/MNdL6MG7ef+wXgyzjJiGCTkzcJs87HpsXHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:26:f3:10:10:cd:a3:67:93:ce:68:45:59:aa:57:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0265ad94e797135906b3e11a847c8eafd094e745
Validity
Not Before: Apr 21 21:00:23 2025 GMT
Not After : Apr 22 21:00:23 2025 GMT
Subject: CN=5618d78366131d2e5e9475aa31509b274129886e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:71:8b:fc:fd:90:5a:3d:18:c2:51:cd:02:
08:93:32:cc:e2:a4:48:69:9a:91:cc:2e:7a:ea:f4:
28:4a:53:ef:4d:5f:ef:a9:85:aa:35:29:e1:3b:1f:
b1:54:5e:a0:7e:06:73:5b:78:4a:a7:3f:1e:26:06:
d3:84:91:aa:41:6e:f6:7a:48:b0:8f:7f:e3:30:8f:
7c:c2:12:b3:77:e4:ee:6e:7c:df:0a:6a:fc:0d:06:
6e:63:b5:3e:03:52:1d:c2:26:87:49:9e:81:b2:4a:
93:7b:fb:c4:79:59:87:fd:8d:6a:39:55:10:33:44:
11:74:b9:30:1c:62:61:db:07:22:06:6e:df:9f:76:
a4:6f:ec:08:9e:b6:ee:3a:b2:0a:c4:ed:39:3c:33:
cc:8c:82:8a:6d:2a:d8:1b:73:f9:47:69:bd:25:f9:
a7:f8:56:96:b4:e8:70:b6:01:a7:03:12:b4:26:22:
be:38:a4:f4:4c:50:60:37:51:92:5d:e7:5a:cd:09:
ac:e8:29:4a:7c:b1:16:2e:c3:0f:3c:db:b2:09:e8:
7f:06:af:c1:c1:b4:d7:fc:7c:c2:49:20:8e:50:99:
1e:6a:59:9e:73:a4:0b:b1:fa:4e:94:c8:8a:42:ca:
cb:27:0c:b9:bf:8e:f0:dc:bf:67:3f:16:b2:82:a6:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:18:D7:83:66:13:1D:2E:5E:94:75:AA:31:50:9B:27:41:29:88:6E
X509v3 Authority Key Identifier:
keyid:02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:14:89:c2:c1:05:2d:f3:66:0b:b5:c9:0a:2d:20:1d:cc:f6:
4c:34:32:b7:91:16:92:df:59:ff:fe:f9:c8:4b:a1:31:9e:14:
39:92:b5:57:dd:9e:e0:8e:45:c8:a5:ec:bf:93:af:a6:67:bf:
54:33:f4:a2:aa:cb:f6:a8:dd:82:91:0e:7e:fa:85:68:da:ec:
6e:8f:ae:f0:a4:38:9d:7a:18:dd:ad:4a:dd:76:f6:a0:35:ec:
e6:9d:ec:53:98:75:92:f7:3d:38:73:dc:45:1b:fb:5e:d6:13:
1b:5b:23:d2:a6:1c:4a:eb:ed:62:ad:a3:b8:47:9a:97:2a:e6:
6d:36:59:d9:46:d9:d3:28:3e:52:5a:a7:97:a8:9a:f3:97:49:
0c:a7:12:8e:db:13:f3:cb:51:5b:a4:d7:e0:e4:47:21:f7:97:
f9:f2:63:df:b2:45:bc:1d:26:85:71:cb:e4:cd:4d:e7:e8:3e:
7c:2d:c8:e8:19:fc:b8:32:ab:7d:9f:40:88:bf:1e:e0:1a:9d:
f2:e1:06:4a:50:af:95:72:ed:2e:83:b8:40:07:29:cb:cf:15:
92:5e:a4:ff:4e:a4:b6:5e:b8:2d:3b:cb:76:3f:80:f5:c5:b3:
cd:80:75:09:c0:a6:c3:b5:be:01:fd:63:b0:9e:88:1e:6d:c8:
ec:c9:bd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:17:03 2025 by rpki-client