Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
File: aLReYLH18sssYUoANB6BmW2U0TQ.mft (raw, json)
Hash identifier: r6Qe1Kj8HIaF/9xaPqBc4hqkeyqkP8SDqFLiigWpNmA=
Subject key identifier: 42:4D:5E:87:59:D4:62:74:9B:7C:B9:F9:BE:14:A6:14:E0:46:DB:F7
Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Certificate serial: 0196534942A276D7F543C255F0CB65185FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
Manifest number: 01DD
Signing time: Sun 20 Apr 2025 13:00:32 +0000
Manifest this update: Sun 20 Apr 2025 13:00:32 +0000
Manifest next update: Mon 21 Apr 2025 13:00:32 +0000
Files and hashes: 1: aLReYLH18sssYUoANB6BmW2U0TQ.crl (hash: 3a/jPNGQulhLmTPl4bvWBLF+WAG9S6wEMH2x/oqTOBg=)
2: gKbl_ApJpltlQyfFare3nEvnPsU.roa (hash: tYvNM/6GmJahHZcQYjEfM07RPZ9Md8r3F+k+Tp4UUys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:42:a2:76:d7:f5:43:c2:55:f0:cb:65:18:5f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Validity
Not Before: Apr 20 13:00:32 2025 GMT
Not After : Apr 21 13:00:32 2025 GMT
Subject: CN=424d5e8759d462749b7cb9f9be14a614e046dbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b2:d1:98:38:54:29:c7:eb:fc:06:c6:24:23:
86:29:59:ee:4d:29:bc:67:3b:f1:c9:b2:af:5f:a2:
eb:cd:b7:11:4c:c1:6f:4d:6b:52:16:1c:31:5b:4f:
12:66:99:7d:3d:89:72:30:b1:57:41:93:cd:9f:12:
e9:a6:ea:12:11:d3:3f:e5:21:ec:fc:f9:0d:d7:bb:
7e:28:5f:16:05:46:87:a3:b5:35:04:e5:9e:0d:3e:
14:e0:33:bb:23:4f:be:48:da:c6:67:94:62:ae:12:
9a:ec:76:c8:95:87:81:ec:8c:06:82:2b:bb:96:a7:
68:69:d6:22:17:84:55:e2:6a:ce:d5:8f:e5:e1:71:
8d:e6:95:b3:f2:c6:3f:92:65:57:f2:3a:8d:aa:e6:
be:47:48:46:46:e9:72:98:71:9b:d5:43:8d:00:34:
f0:94:fa:8a:63:67:a8:5c:e6:e6:0c:62:28:76:59:
d6:7f:96:6d:26:1b:8c:60:27:ce:fe:fe:86:23:df:
06:af:3c:eb:e2:35:bb:29:47:f9:5d:52:2e:1b:ed:
81:b0:98:22:e3:99:9f:f1:00:e4:68:23:1f:91:7a:
93:b9:4e:c9:be:30:b5:82:a7:e8:db:7d:b2:d8:99:
28:22:24:ac:b8:62:aa:b8:77:8d:03:0d:86:a4:ef:
f9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4D:5E:87:59:D4:62:74:9B:7C:B9:F9:BE:14:A6:14:E0:46:DB:F7
X509v3 Authority Key Identifier:
keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c4:18:7d:69:59:96:9c:de:71:cd:1b:b7:5a:ea:49:96:98:
ed:10:97:41:8a:19:3a:4b:9e:3f:ce:18:d9:42:b7:56:6e:33:
59:47:18:09:69:43:91:63:37:0c:ce:8e:39:d7:e1:e7:83:43:
83:56:b2:0a:51:ba:ed:ae:6e:02:ab:a3:f0:a4:ed:c2:55:1e:
92:c8:4f:ba:38:f4:1d:f1:e1:91:04:85:f4:1f:83:3e:34:77:
7b:f7:8d:5e:e7:81:78:10:a2:3d:a6:4a:41:fb:e0:fe:14:05:
95:ee:d0:54:c8:e2:0c:bc:df:45:e2:cf:91:96:06:4f:e6:d3:
58:d7:31:ff:af:09:5f:14:8e:f6:27:14:22:b6:a4:8f:b5:a6:
9b:23:3c:fd:14:53:8d:25:f5:33:6a:75:aa:3a:03:a8:a4:a9:
ea:da:3e:de:42:51:7d:2f:1c:d2:ed:4a:4b:c3:4f:52:90:54:
fa:1f:cc:3e:ae:21:72:23:a6:31:21:e9:3e:6e:8c:55:c0:a9:
b9:d2:d6:ba:ca:f1:83:c0:9e:df:6e:f8:c1:b4:f2:ec:55:da:
ae:4c:11:40:ae:dc:17:3f:65:50:ee:b6:12:9f:d5:1e:8d:bb:
59:44:a3:e2:45:72:a3:25:c0:d5:8b:dc:60:82:88:c5:1d:13:
c9:e6:ea:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:40:21 2025 by rpki-client