Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
File: AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft (raw, json)
Hash identifier: DCHWfTXUSrjKN1dSC1Ho7zy2K/X+n9y5k0c9VrZFAso=
Subject key identifier: 88:10:EB:63:B8:03:A4:DF:21:24:5B:D5:17:3F:BE:41:2C:C1:80:FA
Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
Certificate issuer: /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Certificate serial: 019652A4FE5C65208BF2344DEB2BA70D2306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
Manifest number: 13C3
Signing time: Sun 20 Apr 2025 10:01:06 +0000
Manifest this update: Sun 20 Apr 2025 10:01:06 +0000
Manifest next update: Mon 21 Apr 2025 10:01:06 +0000
Files and hashes: 1: AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl (hash: M1rIAnMDoFPxMiVLi6aHuROFZ6MygWdp5OG3g3CpyAk=)
2: fBCAQQunUbIFnsnY_Z2NiT-IFh0.roa (hash: ctYinvsmftRWQTXHwlWnEmWM2W9y6/GDBjzyDD3IcGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:fe:5c:65:20:8b:f2:34:4d:eb:2b:a7:0d:23:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Validity
Not Before: Apr 20 10:01:06 2025 GMT
Not After : Apr 21 10:01:06 2025 GMT
Subject: CN=8810eb63b803a4df21245bd5173fbe412cc180fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:ef:77:d3:32:fc:d9:84:2d:6a:cb:c2:a7:
1e:26:ee:42:0b:95:65:f0:11:95:3d:a4:8d:60:60:
10:79:00:88:14:d1:6a:5f:27:2f:e7:86:56:50:91:
76:79:ab:30:26:c5:1b:0e:6b:f5:5f:45:b5:20:bf:
b0:57:01:21:df:5e:9e:89:0d:be:b7:82:e2:11:82:
34:94:52:c7:c5:58:6a:14:68:38:9a:ee:b1:d2:2c:
42:61:10:1d:e5:10:2a:9f:1e:33:a7:a6:38:75:e9:
27:e3:78:8d:19:82:5e:b3:13:af:0c:00:36:43:82:
2f:77:62:44:df:7e:fe:ef:13:e7:5c:dc:19:37:26:
50:ff:9f:f6:92:90:4c:5e:7c:24:56:0d:09:39:d8:
44:25:a1:bc:8b:4b:f5:f6:7f:a2:19:c5:fe:9b:1c:
6e:12:aa:92:5d:a9:2a:fb:7e:3c:cc:73:3a:ce:a5:
c9:f6:b9:41:bc:8e:4e:53:51:9f:fa:0b:bf:06:64:
43:29:89:3b:5c:00:b1:b9:37:c6:43:9e:c3:e0:7e:
82:95:a4:02:02:a9:c5:80:29:ac:98:80:46:2d:9b:
a1:ab:d1:6c:05:7a:84:35:1f:1d:53:ed:75:ae:63:
0a:d7:8e:df:d6:8a:aa:ac:21:e0:56:7c:e4:7c:78:
ec:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:10:EB:63:B8:03:A4:DF:21:24:5B:D5:17:3F:BE:41:2C:C1:80:FA
X509v3 Authority Key Identifier:
keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3e:b1:c7:03:31:0a:a5:4e:f7:e7:d8:c6:f4:48:1c:be:e7:
87:e3:27:c9:a3:e9:23:69:3e:28:59:4e:d9:f0:f4:81:75:45:
42:33:66:cc:50:e2:68:56:3a:2b:a9:2f:c8:e9:e7:c8:13:4f:
cc:7c:53:b0:aa:fd:a7:07:33:49:83:15:06:fa:c2:93:a0:65:
b7:88:22:5a:cb:69:ae:a7:6c:6f:dc:c9:19:d5:2e:df:85:2c:
33:21:13:f5:3a:04:f1:e3:f0:af:6e:81:e3:b7:9f:c6:26:31:
59:bc:a9:a6:4e:eb:b4:a1:0c:b7:39:79:eb:3a:b0:89:6c:fb:
42:a3:24:2d:5b:84:e1:ea:eb:3c:55:5e:32:24:80:74:9f:fd:
aa:b1:38:1c:d1:50:1d:20:e3:8a:ab:a5:f6:96:d7:c9:ba:a9:
88:1d:d4:fb:31:25:80:7a:98:8f:f3:d4:92:19:c5:7b:b5:d9:
eb:51:d7:fa:b2:ab:67:de:bf:5b:80:ef:74:b3:aa:20:9a:da:
c9:1a:82:ba:6c:4c:dd:30:55:93:5b:54:46:b3:a3:04:aa:31:
f2:4f:5e:f3:fb:c7:86:c9:93:c7:16:48:a5:2c:90:da:f3:89:
3a:74:6c:a7:f3:6d:d6:70:01:8d:cb:56:fa:ad:2d:1c:b2:39:
f0:83:34:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:21:15 2025 by rpki-client