Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
File: aA4gzPstWJjCFikA0UaAcKcCSVY.mft (raw, json)
Hash identifier: h4UsQBCVVaWf/R7pBvz9TBfzv1my6GtJZc9OKP29oOk=
Subject key identifier: 42:1A:53:77:5F:04:0D:35:E9:2F:AE:D7:23:44:B1:A1:FD:8C:05:45
Authority key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
Certificate issuer: /CN=680e20ccfb2d5898c2162900d1468070a7024956
Certificate serial: 01962CAB2CF7A9893C232FFB90054349CA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
Manifest number: 08E1
Signing time: Sun 13 Apr 2025 01:02:17 +0000
Manifest this update: Sun 13 Apr 2025 01:02:17 +0000
Manifest next update: Mon 14 Apr 2025 01:02:17 +0000
Files and hashes: 1: aA4gzPstWJjCFikA0UaAcKcCSVY.crl (hash: o7vbpJqeDbIkOMeEMfXQtImDm3CNany2jb45QapXp4g=)
2: eBTbPsjV8Iac9Fj-9vOQH-ERQ2w.roa (hash: iez1H7XNs3tkU5sUoydCWQiAyCLsYR+kgbtLIrffu48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:ab:2c:f7:a9:89:3c:23:2f:fb:90:05:43:49:ca:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680e20ccfb2d5898c2162900d1468070a7024956
Validity
Not Before: Apr 13 01:02:17 2025 GMT
Not After : Apr 14 01:02:17 2025 GMT
Subject: CN=421a53775f040d35e92faed72344b1a1fd8c0545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:a1:ef:de:a2:38:44:0d:36:a5:84:61:80:
4f:8c:fa:38:de:7d:f6:8e:23:5c:49:fe:c5:f0:58:
f2:3e:b2:80:5b:42:62:22:1e:31:9a:a5:3b:4c:1d:
92:77:c5:0c:8c:7a:f5:81:c3:95:57:4f:bc:b0:b9:
d8:d4:bb:e6:05:2a:1f:09:bc:99:08:b3:6e:d5:3e:
5b:89:91:6d:8e:a1:85:1f:11:66:8c:59:1b:98:4b:
9b:f6:45:84:a6:bd:b3:c5:a1:a7:1b:81:56:fd:83:
b1:f7:2e:5b:17:53:b4:ea:89:d6:10:8d:3b:29:61:
f2:47:01:a2:1d:ac:ee:a0:00:09:14:0c:99:b6:82:
3e:d3:40:63:a0:f1:fd:7c:cb:ad:11:79:f3:7c:2a:
7c:e6:58:c5:47:9d:23:0e:ea:80:05:2c:25:cf:3f:
84:ea:a5:cf:41:6a:31:2f:15:24:a4:e3:d9:30:92:
2b:a3:5f:f5:1b:a0:0b:a2:e9:87:20:b1:dd:ae:63:
25:5d:ad:6a:72:59:d5:09:7f:52:a6:7c:13:91:9f:
ad:88:e2:06:9b:95:fd:44:c0:11:96:b3:99:2b:e5:
29:93:88:c9:a4:85:af:aa:eb:36:00:bb:2e:39:65:
13:00:eb:c4:fc:95:75:a1:92:9f:7f:7f:37:75:9f:
27:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1A:53:77:5F:04:0D:35:E9:2F:AE:D7:23:44:B1:A1:FD:8C:05:45
X509v3 Authority Key Identifier:
keyid:68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5b:41:05:0d:68:f7:e7:bb:d5:d7:ef:46:31:7a:dd:74:06:
9d:16:9d:5b:1c:b8:26:73:06:2c:1f:12:e8:99:26:e4:4e:6f:
b8:35:45:a9:41:8e:39:90:9c:da:96:dd:2f:1d:92:bb:2d:5b:
f3:6b:1b:93:ad:f6:c8:e0:7e:28:e2:56:67:c8:ff:76:d3:f8:
9b:25:d0:74:84:7e:c3:ae:8b:f0:b3:39:00:57:d4:15:2a:37:
55:39:c8:74:a7:f8:74:92:e5:1d:13:96:97:a5:de:4f:96:3b:
5f:23:63:53:96:6d:2c:7e:ce:e7:d3:c5:34:23:3a:89:3b:63:
2c:1e:66:67:4e:e4:98:b5:d3:bc:3f:fc:30:56:a1:5f:39:77:
28:4f:4f:fa:d3:be:f9:a6:ef:64:d0:5a:65:b3:22:a2:fe:80:
08:0c:d6:da:09:34:04:05:f9:31:f6:b2:53:4f:f3:cf:d3:12:
76:b5:ac:7f:fb:97:f2:f1:f6:dc:91:6a:2a:c9:18:02:f1:9d:
3f:15:69:08:ed:dc:31:ea:91:ac:b1:d1:c4:93:87:4b:b4:ea:
7d:03:72:de:61:a3:9a:93:48:27:f0:00:c6:9c:2c:a0:97:c8:
45:8f:c1:5a:f1:1c:cd:f9:22:68:d1:29:40:62:c2:33:37:a5:
39:9f:0e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:04:49 2025 by rpki-client