Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: 92gBxrFzfbP7gXquHZrsTCkYLLiKORJvkQc5lhLd/po=
Subject key identifier: 4F:71:AF:B5:BB:F1:AD:CE:46:E8:F2:36:6C:55:2E:57:C0:C9:BF:4C
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 0196120E7BC0E5CD6BDC36DB7E3EC1F9DA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 11D2
Signing time: Mon 07 Apr 2025 21:01:01 +0000
Manifest this update: Mon 07 Apr 2025 21:01:01 +0000
Manifest next update: Tue 08 Apr 2025 21:01:01 +0000
Files and hashes: 1: HZpeO8_57nt_M9qIXInad5VBRmg.roa (hash: nBZAN/bftccBXWEqjcSEhglUjfU5BncjTL3GeIrsER0=)
2: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: I/h8jlYs5h/ZPyBPCAjqNPAES7YKQsstTiZC1AI+Bg4=)
3: u3Gm6l2xEryYp2Hjv5EZHS-8JWs.roa (hash: pFBOXJ7Esc39OQ26JOyW4DMUlulYCetq6fGsY/MF+5Q=)
4: wco6lby84EFuFZVsD3YJ6jjZJjg.roa (hash: OvjwNT1Vaz0Q8soeoNZqB9D75gw6QRvYDSS5yJ4IFyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0e:7b:c0:e5:cd:6b:dc:36:db:7e:3e:c1:f9:da:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Apr 7 21:01:01 2025 GMT
Not After : Apr 8 21:01:01 2025 GMT
Subject: CN=4f71afb5bbf1adce46e8f2366c552e57c0c9bf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:0b:03:7d:84:69:52:35:76:df:64:45:91:
55:cc:ab:12:a9:3f:d6:c1:f4:4b:a4:85:0f:a1:1c:
d4:52:80:4f:a4:c9:0d:96:5c:a6:0f:ee:c5:d1:90:
d8:3f:f9:ca:4b:cd:00:cb:40:08:0a:d1:7f:4b:f2:
7d:c4:15:c9:d5:58:bd:a7:78:21:c2:c2:b9:36:31:
0b:67:4a:a5:eb:14:a2:0c:93:96:f8:87:0e:aa:ce:
cd:8d:3d:da:9f:e1:d5:d1:7e:77:94:e3:99:43:11:
63:a0:64:eb:7d:2a:b9:c3:29:fc:3d:fe:ff:94:ed:
d1:cb:f4:85:86:04:5e:ae:0a:28:4e:1d:81:b1:89:
11:15:d9:8b:2e:37:0f:a4:b6:49:cf:0c:ae:2c:13:
ca:72:71:e8:02:15:0f:bb:2e:2e:cf:9a:61:36:2b:
9f:23:f7:3d:ac:6f:e8:72:7d:82:a5:fd:54:02:9b:
53:40:83:26:9f:92:7e:d3:15:8e:cf:26:35:00:84:
a8:43:c0:74:b8:a6:22:74:ce:3e:3b:14:fa:5c:2a:
99:13:f7:70:0d:96:da:00:f2:fc:44:86:9b:76:59:
b7:ec:ef:ab:97:8a:98:45:9f:69:2c:63:35:05:79:
9a:2f:f8:a3:f4:95:21:ef:0e:16:59:13:a5:e5:7c:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:71:AF:B5:BB:F1:AD:CE:46:E8:F2:36:6C:55:2E:57:C0:C9:BF:4C
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7e:30:3b:02:7d:50:6e:9a:9e:e6:51:6f:a6:0f:e7:6b:99:
77:47:ab:4b:a0:e9:19:85:24:83:9a:55:dc:21:99:38:12:a6:
02:ee:57:d6:a6:bf:84:05:a5:a7:f2:66:c3:45:af:60:d4:b0:
24:9a:2b:ce:72:41:d1:df:bc:97:c9:bc:9c:30:f9:13:e4:9e:
60:a0:de:c2:79:3e:1a:00:a2:75:43:9b:f0:76:12:af:d3:53:
04:7d:fa:cc:c0:dc:ed:70:04:0f:1d:b6:30:94:e8:f4:22:38:
31:d1:e9:be:31:7f:10:f0:b6:54:8e:aa:e9:52:37:f2:44:90:
89:ed:e2:e3:a7:3b:11:d2:c1:9e:73:99:2c:33:2b:0d:a5:6a:
33:af:c7:ae:72:1e:0e:0a:ad:c4:0a:9c:1a:69:a7:4b:26:c5:
8f:ff:a5:16:e8:8b:8f:fa:c2:27:35:9a:d9:6e:a0:7b:c4:59:
c8:b8:47:a1:a6:10:22:05:b7:07:fd:e5:1c:0f:9a:b8:17:2d:
dc:c5:99:1f:e7:64:6d:57:f2:89:2f:5e:cd:bd:cc:78:c6:df:
7a:59:a0:65:d1:3b:7f:80:b0:a2:10:06:1c:e4:d2:0b:95:44:
d1:49:1e:99:fa:2a:db:61:c8:e5:74:56:88:ab:be:8f:96:e8:
e9:ee:ab:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:27:07 2025 by rpki-client