Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
File: _AY2gjog5gJjQv6MiOpyqPj3p0k.mft (raw, json)
Hash identifier: 3gjiIDbaBXagbigAWyvgjlAZ4TV1TEsS4bXpovhmtCs=
Subject key identifier: 3F:B8:C6:13:BD:9E:A7:C1:E0:B1:28:7B:92:06:78:C4:AD:F8:54:A9
Authority key identifier: FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
Certificate issuer: /CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Certificate serial: 0196594B9557D540D7BC9BDA7409BCA0CF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
Manifest number: 1123
Signing time: Mon 21 Apr 2025 17:00:47 +0000
Manifest this update: Mon 21 Apr 2025 17:00:47 +0000
Manifest next update: Tue 22 Apr 2025 17:00:47 +0000
Files and hashes: 1: _AY2gjog5gJjQv6MiOpyqPj3p0k.crl (hash: Ste/D+s6SziGiW2IQZzLmrP8gqYckk6RXIGSZTGTjS8=)
2: hIlU1ledlK0WoRmp-tL_K_qi2N0.roa (hash: ZI6M6O4nwpCFukoO/yVoA24rabSe9nnOSdxH4aDpFEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:95:57:d5:40:d7:bc:9b:da:74:09:bc:a0:cf:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Validity
Not Before: Apr 21 17:00:47 2025 GMT
Not After : Apr 22 17:00:47 2025 GMT
Subject: CN=3fb8c613bd9ea7c1e0b1287b920678c4adf854a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:7d:cb:6a:18:b5:89:40:5e:a5:51:2e:e4:
e4:72:b0:b2:98:3c:60:1b:6e:11:5d:a7:fd:9a:27:
d5:c3:d0:71:97:41:a2:6d:2a:ea:ef:0d:31:b4:e9:
a1:cd:d5:fc:5e:6d:12:81:83:3f:25:7f:1c:69:22:
12:9d:6d:88:c4:fc:cc:53:d7:fd:f3:43:28:ad:4c:
1a:5f:66:49:24:de:4a:ac:07:8a:cd:f8:a3:48:8c:
29:08:c5:c7:d6:7a:05:f9:05:d4:c8:a2:84:62:4b:
91:0a:1f:38:74:99:ad:2a:3c:a1:f1:b8:84:da:9f:
9b:3b:f2:5e:f7:6b:1c:fc:cd:5f:1a:4b:a4:bc:db:
71:70:4f:2f:86:99:89:6a:aa:bf:30:c7:e8:88:69:
b8:03:ea:b3:25:f8:be:c8:88:c8:87:89:77:a8:46:
bd:58:58:b8:fa:3c:64:5a:4c:86:30:71:18:6f:8b:
a7:13:2c:9c:c0:f4:96:3a:3a:1d:23:bd:a1:08:d7:
ec:58:22:49:fa:2a:d5:54:54:8f:0c:93:1a:36:c4:
9f:66:ee:a5:b2:45:92:5b:7c:9a:a0:d6:c9:71:61:
94:db:e2:e5:7f:86:ce:5a:59:74:35:84:07:a3:b3:
2b:e8:be:cd:9d:ef:5f:d9:25:18:22:45:8d:ab:9a:
b8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B8:C6:13:BD:9E:A7:C1:E0:B1:28:7B:92:06:78:C4:AD:F8:54:A9
X509v3 Authority Key Identifier:
keyid:FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:97:98:73:27:30:1a:e4:0b:af:8b:e6:9f:bd:5b:6e:4b:80:
78:4b:2e:70:d2:6f:d9:18:75:63:69:ec:46:b3:a7:b8:6b:e7:
b7:5a:24:05:b6:2a:fb:48:2e:10:4a:69:1c:80:73:47:aa:22:
f4:e4:09:e5:48:ee:49:10:fa:56:66:35:5c:35:54:f0:c1:42:
f9:31:8d:e6:0d:19:bf:3f:33:22:d0:9f:d3:f4:8c:97:d8:13:
e1:4a:50:64:33:a4:d7:39:97:24:ee:76:c7:e4:3d:83:91:ff:
66:30:1a:ea:f0:a9:f9:10:e2:26:0c:50:17:1c:99:19:06:85:
f0:f7:47:6d:ce:5b:8c:da:cf:60:8f:f9:34:5e:bf:9f:60:42:
b0:9a:7e:21:3a:78:1f:d5:00:98:d8:5a:23:11:e8:39:09:48:
6b:51:31:ed:ac:b6:20:33:f9:ca:f7:d5:9e:4e:ae:d6:0c:71:
ba:28:a8:39:1c:75:78:66:b8:44:99:d4:e9:c6:05:50:31:e2:
16:11:35:a1:f9:3e:2b:12:e5:76:a9:df:20:10:60:97:6d:d3:
5b:ff:1b:96:e1:28:8f:ac:1d:81:a3:90:df:e1:0e:8b:30:e3:
52:a8:df:be:84:6a:15:72:05:55:47:0f:49:6c:49:a4:30:6d:
ad:90:f3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:26:33 2025 by rpki-client