Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
File: a2HpAAl3utWMh3BeOxZbCEg_Czo.mft (raw, json)
Hash identifier: RF1FlN/M01VSWhJ79C5P9Cpx1F5+HrDh8db4LMQiCK8=
Subject key identifier: 1D:B3:FB:6E:AA:2E:B6:97:CA:FB:CD:8A:4E:1C:87:F3:26:B7:F0:05
Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
Certificate issuer: /CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Certificate serial: 01964CD9A6610730587337C93399B657CE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 07:00:54 +0000
Manifest this update: Sat 19 Apr 2025 07:00:54 +0000
Manifest next update: Sun 20 Apr 2025 07:00:54 +0000
Files and hashes: 1: a2HpAAl3utWMh3BeOxZbCEg_Czo.crl (hash: Yu8s5Vrui0fzU9hDSe9BXxtRUNsugSYm7HBygt6cG/c=)
2: movPWb1NWT7RBf22mFzV6ki-niw.roa (hash: pmnGsVyTJDaHQspLVBouBG8RasgSm/+abtktLNR23OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:a6:61:07:30:58:73:37:c9:33:99:b6:57:ce:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Validity
Not Before: Apr 19 07:00:54 2025 GMT
Not After : Apr 20 07:00:54 2025 GMT
Subject: CN=1db3fb6eaa2eb697cafbcd8a4e1c87f326b7f005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:61:ce:25:02:c9:6d:32:e6:a3:f1:35:f6:
02:9b:6a:8e:b6:bc:69:c0:81:1e:92:ff:ee:62:0b:
33:2f:c3:ab:47:ff:c7:c0:52:f4:2c:a1:59:f3:b2:
bb:ea:c4:7f:bf:fc:c4:41:31:78:d0:26:b4:43:31:
cc:1a:19:ee:48:8d:d5:60:57:4a:6c:8a:55:b6:c8:
ee:79:10:55:21:82:8e:be:97:66:24:c6:f1:6d:21:
54:d6:0d:49:91:58:9b:32:a0:8c:f9:13:7c:d1:ee:
be:8a:fa:ca:56:90:c6:e6:0c:29:45:57:8f:fd:d7:
bd:21:fe:0a:d8:63:02:b7:52:45:32:79:47:09:3c:
a7:29:4e:d9:59:55:b4:d8:bc:4f:62:a4:62:97:64:
f8:99:4f:1d:12:79:28:e0:29:ef:76:b8:e4:86:7b:
01:85:71:48:28:ad:fc:47:90:28:bf:78:fc:b9:74:
06:5b:c9:e6:8e:aa:38:1b:f3:fc:fa:30:53:5e:31:
21:61:4b:41:61:27:fa:a9:23:f0:74:0c:97:6f:e6:
49:fa:59:48:dd:3a:63:cc:db:85:30:db:51:02:58:
35:e7:a9:f5:63:40:ac:07:1d:7e:ea:9d:d7:ab:e1:
c2:2c:5a:1e:d7:54:69:8e:da:3a:1b:49:14:fe:0a:
b0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B3:FB:6E:AA:2E:B6:97:CA:FB:CD:8A:4E:1C:87:F3:26:B7:F0:05
X509v3 Authority Key Identifier:
keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ef:26:94:a2:c0:35:42:ee:02:eb:e5:81:30:c3:9d:f2:98:
cd:8f:68:a0:55:e8:cb:31:a4:51:14:56:3e:a7:8e:42:87:bb:
bd:0b:4c:15:0d:9a:d7:cf:1f:a1:51:a3:b3:ae:ab:62:10:db:
7a:ae:e5:a5:0b:b4:2e:d3:20:16:32:2c:47:27:62:e5:c1:82:
41:57:b0:c0:58:52:af:c4:03:6d:67:99:34:5c:43:ff:7f:98:
be:13:6d:ad:22:63:2a:3e:1e:74:67:68:70:06:25:bd:fb:31:
2c:af:42:9c:b2:d2:54:17:40:8a:17:7c:6d:95:36:55:ad:e7:
91:f9:6d:e6:c0:2c:4b:6d:32:e8:6b:71:8b:57:6b:e0:f2:3e:
49:e6:a9:85:4a:22:03:a2:27:6f:e9:18:ca:b1:92:86:67:40:
2b:7c:3e:9a:53:7c:68:62:d2:ca:6e:09:18:fa:0d:8a:2e:25:
74:62:04:6d:a2:16:24:1f:51:f3:18:99:ad:8f:d7:62:35:72:
a6:66:e0:4f:8a:bb:57:e5:bc:a9:6f:b5:8c:f4:49:b0:d9:31:
65:ca:dd:53:b1:7f:7f:b8:3f:79:d3:40:35:0e:8f:fe:2a:7e:
f7:ab:27:3c:b1:80:34:20:8d:d2:ee:92:be:52:0d:0a:8e:39:
4c:8c:5d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:14:45 2025 by rpki-client