Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
File: AK1tg8gINynXqdhXHWXOl-BYuCE.mft (raw, json)
Hash identifier: L+tatSaxOERh/MjtAx/LTig5Vv4m9oQB+nviCm47Rmw=
Subject key identifier: 8D:10:CB:F1:BC:B8:95:6F:11:1E:8C:8C:2C:F1:FC:B8:E2:65:05:23
Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Certificate serial: 01964D1076A277FC1C127C17B2B82C566737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
Manifest number: 098F
Signing time: Sat 19 Apr 2025 08:00:46 +0000
Manifest this update: Sat 19 Apr 2025 08:00:46 +0000
Manifest next update: Sun 20 Apr 2025 08:00:46 +0000
Files and hashes: 1: 0avBUZc0fRe5pdYzvDk9HgX1ajQ.roa (hash: vHaXs0oLz+thOA7Ry4E1jwe2sP/zqNcNu+NOGxEA+rM=)
2: AK1tg8gINynXqdhXHWXOl-BYuCE.crl (hash: P/Hkt7gQnelesNbuUORMVYEGvFpQeIdSj44witTc1c8=)
3: EZwtw6Pq_G1qcUHbmI7-gXnu9Jc.roa (hash: vmy1JQIAxBf7tCsU1XK4dYqZEdqdyJHgDm3eJn2Yp94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:76:a2:77:fc:1c:12:7c:17:b2:b8:2c:56:67:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Validity
Not Before: Apr 19 08:00:46 2025 GMT
Not After : Apr 20 08:00:46 2025 GMT
Subject: CN=8d10cbf1bcb8956f111e8c8c2cf1fcb8e2650523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:4f:c7:2f:57:6b:be:98:4b:35:b5:34:8c:
77:7f:fc:93:96:68:43:13:7e:f2:e9:ad:32:8e:ae:
e4:ab:21:dc:f1:bc:88:87:61:cd:62:ca:46:10:77:
c3:ae:20:97:c9:5c:62:c0:c6:80:a1:45:a8:b1:a5:
6f:24:42:51:51:cd:19:45:88:46:d6:97:2b:12:50:
be:07:32:aa:c3:c3:4d:a6:56:25:ec:92:c3:de:f0:
36:03:8e:81:9e:99:54:37:83:d7:22:86:f2:a9:f1:
60:b2:51:ac:95:bc:e9:c0:be:be:c1:a3:86:b5:f3:
64:0d:74:d8:63:8e:6e:e5:7b:f6:d0:1f:4a:15:74:
62:d8:a6:61:3b:47:dd:b0:d9:e3:5b:77:f6:73:01:
2d:07:90:7c:28:c5:62:22:9c:81:0c:28:b9:ba:c3:
29:2f:a4:8f:93:20:7f:5b:e2:b0:f8:51:7b:95:c4:
7f:8d:6b:41:7d:f8:8b:42:0e:e8:d7:57:8c:96:de:
eb:6a:64:da:a7:e4:1f:18:75:5f:3c:96:fa:9b:32:
f6:d0:5c:ef:17:04:c2:21:9c:77:75:4a:ab:30:06:
4a:d1:fe:ea:d6:bc:5a:5d:fc:3a:a3:f1:57:68:e4:
c0:12:89:1b:fc:f1:0a:1b:ef:70:b5:a3:fa:b8:20:
60:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:10:CB:F1:BC:B8:95:6F:11:1E:8C:8C:2C:F1:FC:B8:E2:65:05:23
X509v3 Authority Key Identifier:
keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:82:03:ef:c9:b5:df:46:f8:fb:df:00:9e:ca:25:09:31:1d:
90:65:bb:7b:5a:dd:dd:2a:c6:0b:f5:dd:ba:82:59:64:39:d9:
53:62:5f:0f:9f:e5:f9:20:44:80:77:65:7f:92:5e:a0:2f:30:
02:ba:ec:1e:1e:d1:f3:18:6a:66:a1:88:f5:63:b0:20:10:5b:
20:b6:7e:c8:01:02:fb:3e:3e:91:45:0b:29:d6:22:c3:f5:bf:
fa:90:9f:9b:54:4c:62:dd:58:ed:1b:f7:5f:4a:24:8a:64:96:
60:72:ef:39:1f:ef:a0:96:1a:1b:82:cf:38:91:c1:4d:37:dc:
5c:50:ac:2b:65:a4:61:dd:60:75:98:c7:c4:28:4f:0c:95:41:
ba:27:b9:7e:1d:d0:dd:93:93:98:a7:b3:19:d1:05:97:78:4a:
36:aa:0e:9a:87:b8:7a:9b:dd:53:9a:7d:02:4f:23:45:af:39:
cf:91:a8:09:6f:ed:6b:a0:aa:ee:bf:88:ff:74:14:9b:d5:f0:
68:75:f3:40:dd:75:7c:a0:c9:c8:05:70:d2:d1:f3:f1:0e:26:
67:e6:fd:a4:6e:9f:8a:4c:e2:89:f4:c9:60:ae:ef:bd:f7:3b:
c1:8d:48:c4:77:8d:7a:1d:e8:3a:45:88:60:72:d4:97:b3:ec:
09:5a:f3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:03:21 2025 by rpki-client