Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
File: Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json)
Hash identifier: lNljaVAokIVUuahPBiUOpfJQllDV0foZqDgiEyIyoCg=
Subject key identifier: 9E:48:FC:08:94:6E:40:6B:55:03:B2:21:0C:04:67:54:D7:F2:B3:6E
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Certificate issuer: /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial: 019651FF8FA19C63DAEB13D82818C1F8B892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
Manifest number: 0FDA
Signing time: Sun 20 Apr 2025 07:00:24 +0000
Manifest this update: Sun 20 Apr 2025 07:00:24 +0000
Manifest next update: Mon 21 Apr 2025 07:00:24 +0000
Files and hashes: 1: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: Ia1N8u1pKWA2u9DAMFQ2mMGa5X63KYU+LD/oHLeQCq8=)
2: fVmkukCoNZRcRoc3LS-TXPrqhnE.roa (hash: jN7loYTxoFJMSibKv+JC0+n6QXqAWoukHaK+yW79eHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:8f:a1:9c:63:da:eb:13:d8:28:18:c1:f8:b8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Validity
Not Before: Apr 20 07:00:24 2025 GMT
Not After : Apr 21 07:00:24 2025 GMT
Subject: CN=9e48fc08946e406b5503b2210c046754d7f2b36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:7b:29:9e:b9:6a:d5:bd:fb:9c:18:c6:99:
cb:6c:ec:c1:14:6a:a5:dc:c3:d1:34:fc:7b:f1:e0:
52:a1:56:d4:37:e9:cb:24:36:cd:70:c1:80:b2:2e:
78:be:8d:b1:6f:60:6c:25:7f:12:28:0e:17:2e:66:
c9:56:f4:de:9f:e9:b6:94:2a:df:c0:fc:64:f2:27:
fe:dd:b3:de:01:66:e4:d0:4e:53:83:7a:b8:b5:c0:
7e:5d:a3:83:09:4f:a0:14:3a:89:e9:5b:28:51:5f:
e5:99:34:70:6e:28:41:4d:a4:a3:8b:24:a5:d9:f9:
b6:0c:0d:94:c1:17:bd:15:2f:11:5f:9d:24:e5:e1:
d5:10:c6:04:f7:4b:bc:ad:4c:a8:c3:07:72:79:f5:
c0:cd:60:68:8c:eb:f8:a4:5f:7e:69:d3:ec:29:7a:
be:a6:0c:1e:a8:9a:b2:2f:41:76:3b:9f:2d:10:23:
cd:09:7d:60:a5:9d:08:e8:24:7e:7c:92:17:50:f7:
94:a8:58:b9:ec:85:3d:ac:c0:80:1d:63:e9:60:eb:
2f:e0:8d:44:5e:29:57:1a:42:f3:79:f8:3a:7a:35:
51:53:af:54:b0:c3:85:63:8c:07:a9:12:30:38:f0:
03:8b:4c:af:b9:89:77:e0:a2:a4:42:dd:dd:4c:32:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:48:FC:08:94:6E:40:6B:55:03:B2:21:0C:04:67:54:D7:F2:B3:6E
X509v3 Authority Key Identifier:
keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b3:9b:05:12:11:2d:d2:29:c0:41:a9:7b:92:1e:1b:25:8c:
14:c1:61:36:a0:0d:a7:7d:14:58:79:b4:69:89:0c:d1:d7:3a:
6a:99:1f:e9:ac:2b:9c:8f:50:6d:2d:04:33:e2:a3:2d:67:e4:
3b:07:3b:61:16:92:0d:b7:5a:fa:bc:90:c5:03:e9:67:13:0d:
43:30:16:92:78:61:85:c8:32:d6:00:f7:6e:44:95:f4:26:d1:
7d:97:c2:82:47:1a:97:76:57:62:36:d4:a7:47:b6:94:ae:33:
9b:1f:ea:36:f9:12:3f:22:4c:23:bd:06:66:91:03:2c:59:91:
9d:ed:bb:71:c5:6c:a5:2e:e6:69:ba:32:3d:1d:e1:19:9a:76:
bc:96:e7:9d:d0:4d:62:2f:5f:c0:ae:db:c1:41:ac:e7:b0:85:
c0:95:2d:d1:3f:41:ed:aa:b1:f5:b2:34:97:4c:d4:94:bc:47:
ca:58:fb:2e:32:68:d6:07:a9:74:02:39:8b:56:0a:c5:46:0f:
1e:90:06:40:ad:e6:3e:c9:51:f6:db:dc:f5:ec:7c:bc:4d:4a:
72:13:24:68:37:f8:75:a7:a4:2b:26:b4:7b:ec:48:54:aa:76:
70:9d:05:13:f6:82:f0:c3:bd:dc:1a:d9:0c:2a:70:39:28:31:
53:8f:0e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:28 2025 by rpki-client