Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
File: AwWB6qlpA2wz-S68SETcIsVedRM.mft (raw, json)
Hash identifier: Hk9/gG2jUDAoG8XRZ0JibP5yrE9aRZq22B2gs7+j/sM=
Subject key identifier: BE:59:E4:61:9F:94:5C:CA:96:77:60:E3:DC:74:92:B3:20:30:6D:59
Authority key identifier: 03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13
Certificate issuer: /CN=030581eaa969036c33f92ebc4844dc22c55e7513
Certificate serial: 01964FDB08A100E4C0EA8F1CC50A1B589A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
Manifest number: 1391
Signing time: Sat 19 Apr 2025 21:01:16 +0000
Manifest this update: Sat 19 Apr 2025 21:01:16 +0000
Manifest next update: Sun 20 Apr 2025 21:01:16 +0000
Files and hashes: 1: AwWB6qlpA2wz-S68SETcIsVedRM.crl (hash: 6nxYmi0Yo7cu7cBbEQwdv4Yquw8tLOmkHtRO1NIRU60=)
2: VFGMzpMj8ZJeti9Ll27ab4FJTVY.roa (hash: WhbI727KX3OCfH4pg3jssZ4731JjR3VKbBebVtWZXgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:db:08:a1:00:e4:c0:ea:8f:1c:c5:0a:1b:58:9a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030581eaa969036c33f92ebc4844dc22c55e7513
Validity
Not Before: Apr 19 21:01:16 2025 GMT
Not After : Apr 20 21:01:16 2025 GMT
Subject: CN=be59e4619f945cca967760e3dc7492b320306d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:86:c3:cf:3e:10:6d:ec:89:59:b7:ac:e5:
fb:d2:6b:7e:82:8d:17:17:e8:b5:2b:fb:2c:1a:64:
62:9f:ce:cb:e3:b5:5d:15:4e:1f:f4:18:ac:7c:ee:
cd:6d:b0:70:21:31:bd:78:b0:b4:82:4c:ae:c1:18:
78:7e:a5:8a:d5:3b:74:42:3d:8f:ef:1e:98:f9:bb:
aa:f9:74:6f:b6:27:93:2a:41:dc:62:45:39:10:d9:
9f:40:31:22:17:0a:8e:c4:b7:4f:a4:e4:92:1a:95:
cb:32:14:df:47:90:79:f1:d2:13:2e:87:f9:95:3b:
53:c2:84:08:ba:17:17:20:1b:69:6d:51:31:54:27:
c5:33:58:1f:71:ff:c9:f5:67:e6:5b:ea:85:53:81:
4a:59:b9:53:3a:f8:a6:ec:8e:7f:32:9d:a3:5d:7f:
f8:d2:a3:39:a3:2b:5c:e6:d3:a3:f3:81:61:ad:6c:
90:66:e0:fa:ea:2d:02:18:dd:d9:8d:98:ee:31:33:
6d:2f:a0:2b:91:4d:2e:0e:35:e7:a4:b4:fc:cf:64:
17:37:75:c2:4b:e4:15:27:7d:26:49:41:c2:51:6d:
78:36:e4:3f:16:38:1e:3a:bf:a5:b0:df:b6:1c:35:
81:14:22:14:58:d0:78:5a:0a:34:50:29:cb:ef:a3:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:59:E4:61:9F:94:5C:CA:96:77:60:E3:DC:74:92:B3:20:30:6D:59
X509v3 Authority Key Identifier:
keyid:03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7a:c5:f3:25:41:27:d2:3a:94:ce:23:d3:c7:39:7c:1b:0f:
af:27:1d:57:05:2d:49:50:00:63:f9:0c:bf:15:38:c6:cf:1b:
2e:29:e8:58:c8:b0:06:37:a0:20:74:2a:a0:b5:62:87:8e:43:
34:2d:ba:c1:24:48:ff:ff:9c:90:bf:77:19:45:2b:47:f6:89:
44:bb:44:5b:c6:90:f6:a2:5b:45:d1:68:55:d8:f7:ed:d1:c4:
18:39:a7:0a:2a:ee:f5:44:a3:59:19:13:cf:66:d7:8f:3f:08:
62:a8:9b:fe:bc:92:b7:02:6c:7c:20:a6:c7:45:e0:17:41:63:
d8:12:8e:5c:b0:5f:00:47:2c:c2:3b:84:96:d4:10:35:61:ba:
9b:7a:ae:f0:92:3e:7c:68:12:60:5c:3a:9a:c2:cb:3d:b8:9f:
2d:53:6a:39:56:73:2e:aa:3e:52:9b:2d:a2:e4:ef:5a:05:42:
32:c9:51:ae:ec:42:64:be:81:0d:25:80:f4:8e:88:81:0d:21:
3b:8d:7e:74:c6:1d:1a:4e:78:03:e1:d1:ef:df:f8:73:6a:2b:
3e:70:4a:c4:be:54:a6:70:5f:9d:7c:b2:1a:80:aa:ea:74:97:
4e:5a:f3:eb:95:85:c9:c3:0d:3d:a5:d2:b4:43:45:7f:5e:2d:
39:be:af:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:47 2025 by rpki-client