Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json)
Hash identifier: vVH0nIDeJU3LrB7r/4m7luupC6LjqKvBNs5S1DIOiUg=
Subject key identifier: FB:30:C1:ED:DC:36:1E:98:39:7A:78:6A:17:E2:B6:A5:05:19:A9:24
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 01958B4DA0E0D6983C7CDE81F854B3952535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
Manifest number: 1497
Signing time: Wed 12 Mar 2025 17:01:14 +0000
Manifest this update: Wed 12 Mar 2025 17:01:14 +0000
Manifest next update: Thu 13 Mar 2025 17:01:14 +0000
Files and hashes: 1: Mk6bMg9yn912dvqA2bZ2UEvYkBY.roa (hash: KxEzTRFfoJeG7lkUxdhEUvS8hrtrGhN9+8KxA+43syM=)
2: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: 8dsJ+zgO2XGb0wJDUM6qvM94sRXxKM/rJnl+RaH1zyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:a0:e0:d6:98:3c:7c:de:81:f8:54:b3:95:25:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: Mar 12 17:01:14 2025 GMT
Not After : Mar 13 17:01:14 2025 GMT
Subject: CN=fb30c1eddc361e98397a786a17e2b6a50519a924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:43:48:41:61:16:a7:d4:08:c2:a8:32:f6:
8b:21:05:5b:ee:57:02:fb:82:10:15:c4:25:2d:23:
4e:0e:84:3f:41:32:03:87:e5:29:f4:29:80:2d:32:
7d:85:24:44:da:27:1c:57:be:4d:24:d8:11:02:03:
e4:3c:e2:19:1e:92:08:0c:88:95:88:07:67:ab:d7:
f5:f1:2c:da:fb:d6:ad:13:98:27:a4:17:93:96:67:
ff:14:b5:32:09:82:b1:74:9c:a1:69:c4:24:99:9e:
77:ed:cc:5e:a1:0d:1c:30:7d:b5:ca:ce:10:26:51:
20:20:6b:27:db:a3:f8:ed:3c:dd:eb:41:22:78:e4:
81:55:15:b9:b3:46:b8:be:3d:59:a8:f0:95:3f:46:
ac:74:d4:8b:b1:ef:c6:9f:a7:dd:7d:89:eb:fe:62:
dc:90:64:49:a8:68:67:8c:94:b9:31:1a:e9:1b:2b:
af:e8:f6:ed:61:c3:27:63:4e:97:f2:fe:86:d6:07:
2a:90:35:b3:8b:d9:09:9f:09:1c:dd:f0:a7:bb:f4:
13:19:84:a8:aa:ba:71:04:79:2c:68:39:8f:ba:31:
ba:3a:cd:26:a8:cd:09:ac:a5:ca:50:20:51:7b:9d:
c8:1b:e5:03:23:cd:b5:5f:33:b2:c4:8d:08:60:2f:
98:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:30:C1:ED:DC:36:1E:98:39:7A:78:6A:17:E2:B6:A5:05:19:A9:24
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2a:4f:1a:df:03:7f:7e:49:d5:52:69:2b:7f:29:91:9e:fb:
7b:bc:30:57:3a:8a:06:6b:dc:49:a7:d6:2f:37:7e:05:10:fa:
22:48:3a:42:6c:e5:a9:b8:55:18:2b:84:b2:19:3b:c0:1d:ef:
97:97:3c:9f:66:2d:f7:a5:32:51:8f:ab:e2:56:1a:d5:20:72:
f2:25:6b:b9:62:95:96:66:a6:47:d9:7c:34:65:f7:d0:fd:11:
d5:66:e7:2e:95:2a:6d:00:ed:3e:7b:b2:1b:28:8c:53:67:ed:
3b:e2:89:c6:8f:22:3b:d6:b3:b8:31:7b:9b:ae:63:9f:b2:b7:
70:71:f2:41:83:f7:d0:32:95:c1:c8:3a:ea:e8:b2:09:df:9a:
21:02:e7:70:b9:da:c3:2b:a0:e1:c4:8a:84:c0:70:9b:bb:74:
42:7c:cd:c6:53:cd:a6:af:50:74:ea:b3:92:e3:15:6c:a4:94:
c5:90:69:03:7d:af:fb:19:03:c3:5f:b5:d9:ef:a6:60:4d:cb:
a7:2e:86:d1:23:e9:46:15:09:b4:87:83:8b:ba:70:44:7e:75:
68:04:96:85:c4:cb:b8:09:b7:67:81:f2:74:9f:38:f9:59:a5:
2e:10:94:b6:9e:dd:c3:ef:6b:a5:82:a5:fd:b3:fc:47:cb:02:
a4:9f:23:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:26 2025 by rpki-client