Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
File: Af6IJc4pEV7HHNzPw1XYGjX9fow.mft (raw, json)
Hash identifier: by0l5B22m8lHxo4vFeClJl5nwrYTqvSo4w/PuJLDatM=
Subject key identifier: B4:2E:8E:DE:E6:EB:10:EC:E0:35:E4:B5:00:2B:2A:30:4B:EE:82:AC
Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
Certificate issuer: /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Certificate serial: 01965492B0C55DEBDB6117B8999BD5ECDA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
Manifest number: 0276
Signing time: Sun 20 Apr 2025 19:00:21 +0000
Manifest this update: Sun 20 Apr 2025 19:00:21 +0000
Manifest next update: Mon 21 Apr 2025 19:00:21 +0000
Files and hashes: 1: Af6IJc4pEV7HHNzPw1XYGjX9fow.crl (hash: leUfgxJLcdcCRLr83CR1w/yYwgp6tHSU04F/+zouw4c=)
2: Ju6K_k5aEz6SqSZhNuewgFZ6Tpc.roa (hash: eSc+nFa0PsPsCuhZ0NSVf3t+L8KNOuXb5VC0gk1mWnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:b0:c5:5d:eb:db:61:17:b8:99:9b:d5:ec:da:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Validity
Not Before: Apr 20 19:00:21 2025 GMT
Not After : Apr 21 19:00:21 2025 GMT
Subject: CN=b42e8edee6eb10ece035e4b5002b2a304bee82ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:45:2d:06:fb:bb:db:58:23:c1:3b:1e:4d:
de:3f:3b:5f:e5:31:ee:d1:99:ac:66:89:32:cd:0f:
ba:56:88:89:7d:12:b0:1d:c2:b4:72:d7:ec:18:82:
46:75:b4:4f:97:ae:27:cc:d8:d8:80:cd:de:2c:3d:
a1:ca:3b:5b:a7:9b:05:08:50:d2:e8:c1:10:b3:88:
7e:3f:78:e2:ae:2a:f1:61:d4:b9:24:4c:54:40:a3:
95:4f:89:65:44:67:6b:4e:9d:aa:af:05:e8:52:98:
15:99:87:ea:ce:91:04:19:af:11:5c:9d:ba:50:b7:
c3:5d:c6:c0:35:d5:c9:c5:9b:11:0f:1b:0a:4c:b7:
66:31:91:cb:a3:bd:6c:98:e7:2a:6f:2b:4d:31:47:
c4:63:ae:a7:e5:eb:6e:8a:2d:ec:3a:8a:4a:cf:5a:
fd:8c:a8:23:2b:a8:8e:d2:e9:ea:7c:28:db:50:f9:
78:77:e5:05:57:94:33:54:cf:30:b0:0e:37:6e:39:
ca:da:f5:53:aa:b2:76:52:0a:8b:01:1b:23:36:e5:
87:89:3a:37:83:e8:65:01:32:a2:84:d3:fe:b2:b3:
f3:61:f5:8b:ee:cf:14:6a:ed:01:76:d9:9f:08:2d:
cf:8d:ab:1e:16:10:26:37:ae:8b:1e:e8:7d:c1:48:
de:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2E:8E:DE:E6:EB:10:EC:E0:35:E4:B5:00:2B:2A:30:4B:EE:82:AC
X509v3 Authority Key Identifier:
keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:dd:10:b8:5f:b9:3a:31:2c:c7:be:47:fe:ce:cd:ee:82:ac:
be:6f:cf:c8:77:b6:30:88:02:5b:32:e1:3d:c5:c7:30:de:c8:
47:75:a4:e3:5b:1f:43:59:8f:6b:9d:29:24:29:d8:90:f5:1a:
f8:10:0f:3e:cf:78:bb:b8:79:10:6f:de:f9:4e:c0:59:4c:ca:
3a:d2:2e:3e:67:f9:d2:83:84:09:18:3e:56:df:0d:72:3c:2c:
7c:c6:02:b3:5c:28:41:4b:56:ee:b7:5f:bf:0d:79:c1:04:53:
09:17:49:48:20:27:d4:2b:7b:f9:84:21:1f:ab:c7:5d:af:52:
7a:b3:38:8d:1c:63:fa:d3:96:60:5b:af:2c:d8:14:6a:52:1f:
d5:8e:1f:2e:13:34:36:e5:e1:31:51:f7:9e:04:d5:fd:53:64:
e2:c2:45:36:5a:ec:51:4e:81:bb:49:28:2a:32:75:da:66:5b:
56:41:95:60:d4:8d:c4:7c:a5:2a:6a:d9:40:a0:f5:e7:87:fb:
11:4b:06:07:20:a8:0f:a3:2d:d2:c8:29:b0:52:ea:c0:fa:9b:
3b:bd:9e:be:4b:75:d6:69:be:70:9d:19:1b:4f:8a:4f:6e:4b:
a8:48:47:c8:3a:91:a5:92:e5:c5:cf:db:a5:e8:2d:16:3c:b3:
29:a7:2d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:39 2025 by rpki-client