Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
File: AyUDQljydbfIfl9PcHBsDPWI78M.mft (raw, json)
Hash identifier: eUhi4G4kkbM857OMLgFh9rbMvKF6O/lkFD7cmMZ8Ml8=
Subject key identifier: 4B:BF:87:FA:D4:3C:69:94:6F:F7:15:6D:8B:60:E0:9D:4A:A7:6B:F0
Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
Certificate issuer: /CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Certificate serial: 01965424D3709FED7D04536769B2EB999B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
Manifest number: 14B8
Signing time: Sun 20 Apr 2025 17:00:21 +0000
Manifest this update: Sun 20 Apr 2025 17:00:21 +0000
Manifest next update: Mon 21 Apr 2025 17:00:21 +0000
Files and hashes: 1: AyUDQljydbfIfl9PcHBsDPWI78M.crl (hash: TCKpBBv1k0LQck62WeA20wQpGxsNOyTVsG1QGZ4CpZ0=)
2: MOCwLZlblZQoo_YoYCbZ92anb2M.roa (hash: jgAeaLjB49XZgaBhwkQWDfGLFnhl3KHjjoTO22L98Wk=)
3: XMzMrB_8MPuaKVcXQLSpfY45uHg.roa (hash: Kg28zSoDTugIChfPSBvRhPy84bB18/D8eH/rgKbNXTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:d3:70:9f:ed:7d:04:53:67:69:b2:eb:99:9b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Validity
Not Before: Apr 20 17:00:21 2025 GMT
Not After : Apr 21 17:00:21 2025 GMT
Subject: CN=4bbf87fad43c69946ff7156d8b60e09d4aa76bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:69:07:3a:0d:58:04:42:4e:59:32:97:10:
10:ca:c0:e1:b9:42:4b:ad:b0:7e:ab:42:07:6a:77:
4c:65:1f:d8:5e:94:ee:4c:54:06:af:eb:2f:8d:db:
aa:87:69:03:b8:55:49:45:d6:17:c4:7e:6c:fc:c6:
17:ee:84:5e:e6:05:b4:ea:7d:05:e2:84:9c:8f:94:
2e:ae:52:99:e8:87:1f:04:8e:ef:f3:c3:e8:2c:2a:
25:5f:f8:55:91:56:29:81:b1:7a:a2:66:18:03:69:
ba:25:f1:ae:73:d5:b7:3f:e3:45:c1:5c:6d:bf:2c:
ed:90:ac:0b:2e:58:b3:e0:de:e4:e2:71:73:f0:0c:
a8:c7:be:6b:8b:1c:ec:69:d8:b2:d7:5b:80:bc:76:
09:f5:24:8a:e3:3f:a9:7e:e1:11:97:07:8a:a3:f1:
5a:b1:a8:79:2c:e9:fc:c2:6b:30:2d:46:f5:8f:04:
56:f5:f9:80:1c:15:77:48:64:0e:f9:e6:d1:d1:4f:
1e:d9:b0:7e:18:4b:0f:d3:9a:f9:f2:7f:55:39:64:
79:08:21:6e:ac:77:aa:3c:de:5f:7f:2e:7a:b7:2b:
76:1a:9c:e1:49:d5:b8:4b:e5:b6:30:c6:e8:cc:fc:
f7:6f:f1:af:f9:16:2e:0c:89:29:dc:bd:26:9c:00:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BF:87:FA:D4:3C:69:94:6F:F7:15:6D:8B:60:E0:9D:4A:A7:6B:F0
X509v3 Authority Key Identifier:
keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e0:bb:fa:13:86:83:e0:c8:de:05:8d:79:85:2a:ae:15:38:
f0:13:9f:8f:de:55:85:e2:1e:99:60:37:85:da:ff:af:3b:47:
57:2b:fc:1c:3d:9e:f2:9f:a9:9a:7b:d5:ba:ab:a3:0b:30:47:
cb:6e:1b:0d:52:3a:96:27:d3:08:04:18:4f:0b:89:d2:e7:f2:
5b:78:94:c5:85:7c:92:01:39:f2:1e:db:17:b3:84:30:e5:b8:
5a:d2:63:b0:23:6b:7f:06:45:4d:fe:cc:44:b0:48:ad:96:6b:
0d:2e:14:49:de:a9:9b:5c:a4:ec:75:69:e4:fe:ed:e1:14:3b:
b2:fe:c4:84:2d:a1:40:fe:a6:fe:94:4f:5c:a4:a3:ff:e2:2d:
db:56:d2:de:dd:c2:89:5b:da:7e:52:34:7b:b1:38:cc:89:1d:
e3:98:48:7c:4e:29:fb:32:db:79:38:56:b9:93:77:12:5d:11:
53:54:67:f7:dd:37:e0:3e:9f:2e:fc:a2:db:87:60:8a:9d:6b:
b8:11:7c:76:f4:f8:ca:68:21:35:8c:a2:44:52:f3:34:a2:f4:
ce:94:40:d9:63:f0:54:54:13:30:a7:cb:3e:e2:1b:60:c6:75:
29:31:57:57:92:5a:f9:c4:95:04:2d:84:f9:b9:db:80:42:1d:
1c:39:0f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:55 2025 by rpki-client