Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
File: A5aaE8t8Nxi9NxdxJijnqxszsKU.mft (raw, json)
Hash identifier: lRNi1+nZ8JHK2Mg+aEPS6sTOg6+XQgbMPCdrlVAsK+k=
Subject key identifier: FE:FC:35:4D:50:7D:95:2D:AF:E7:C3:01:62:46:70:7F:3A:CF:F5:8D
Authority key identifier: 03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
Certificate issuer: /CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Certificate serial: 01965FBB99D5AF63A9CB1B431E6CB1710EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
Manifest number: 0931
Signing time: Tue 22 Apr 2025 23:00:52 +0000
Manifest this update: Tue 22 Apr 2025 23:00:52 +0000
Manifest next update: Wed 23 Apr 2025 23:00:52 +0000
Files and hashes: 1: A5aaE8t8Nxi9NxdxJijnqxszsKU.crl (hash: p4xPY/gdw6R1doBzHnh5LLMhUYSbTdsqCOQ1lQ3sG2E=)
2: MK6Wt26ubZnx8uPGofYFajPlEuM.roa (hash: pNoc6zxMnN0pQF1kB42eiM3UzngOuAJOl2Ggh4EWIBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:bb:99:d5:af:63:a9:cb:1b:43:1e:6c:b1:71:0e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Validity
Not Before: Apr 22 23:00:52 2025 GMT
Not After : Apr 23 23:00:52 2025 GMT
Subject: CN=fefc354d507d952dafe7c3016246707f3acff58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:91:b9:c9:ab:3b:d9:05:b0:40:93:99:1f:9e:
ba:ed:ba:77:1d:3d:a7:20:49:04:b7:1b:7e:d4:90:
b6:a3:87:6d:f0:64:bb:5a:bb:5e:56:ac:36:7f:98:
71:38:29:57:19:61:83:60:70:03:c6:03:4d:69:9b:
73:c9:ee:99:ba:c3:be:17:7d:88:34:9d:7e:3f:b5:
48:ca:63:08:cc:07:90:59:c5:34:7a:fd:3b:5c:2c:
34:38:de:70:57:82:ba:c7:d5:ca:d5:c0:ea:13:06:
ab:db:db:47:e2:e4:45:cc:29:61:9e:21:f3:28:24:
b2:f7:e9:11:e2:5d:c8:f7:bd:1f:f0:7f:23:32:c2:
a2:7e:c7:be:a7:2e:18:2f:74:c3:88:8b:65:35:68:
50:06:85:d5:37:6d:65:ad:68:9c:65:4a:f3:c5:d1:
36:19:1f:5a:99:41:3a:d8:a0:79:95:7f:52:8d:5e:
90:23:a5:f5:6e:ce:70:35:32:05:93:f9:ba:d3:3e:
35:8a:7e:8d:01:8e:54:f7:3b:9e:fc:d8:a9:36:5f:
4a:82:a9:6c:67:f2:bb:35:16:bf:bc:56:a2:e2:17:
95:95:a4:a8:19:62:76:ea:f2:81:5f:a9:9b:4c:4a:
eb:e4:67:db:07:84:16:b9:53:1a:e5:30:b0:29:c4:
61:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FC:35:4D:50:7D:95:2D:AF:E7:C3:01:62:46:70:7F:3A:CF:F5:8D
X509v3 Authority Key Identifier:
keyid:03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:36:de:a8:c2:d7:56:c7:fa:13:a6:b1:ad:29:24:92:29:a0:
47:a7:6e:18:c5:45:28:75:96:b7:52:63:46:86:3b:a4:3d:bb:
61:c6:80:4b:45:8b:37:41:27:f3:b1:18:20:39:fd:3c:ba:c4:
d8:3b:3a:9a:1b:a2:b5:8c:70:8a:48:cd:a3:28:cb:39:ef:93:
ca:8b:f6:dd:e2:4b:2b:bd:54:73:ff:4d:9f:50:79:2f:bd:24:
d7:81:c6:29:65:27:aa:05:b0:4c:75:bb:5b:6a:28:e1:4e:6f:
06:81:f2:5e:3d:61:e3:69:3e:38:02:e6:c2:46:0a:7a:1e:80:
ff:e0:9e:47:b1:ed:ec:d0:42:5b:e3:30:fc:24:06:cf:e6:09:
e3:c4:d5:c2:6b:d2:e1:a9:bc:e0:1b:94:ed:c8:65:2a:c6:c5:
89:a5:eb:0b:f9:22:77:00:a4:e3:97:16:35:ae:5d:1e:2f:ba:
38:41:f2:b6:04:87:d3:ef:89:59:ec:af:37:ea:f5:a9:c9:9f:
9b:d0:e1:22:55:30:12:0a:79:9b:92:0c:9c:f5:5b:c4:66:fb:
af:02:bd:b1:69:68:49:c8:96:01:e3:d2:bd:61:c0:35:2d:05:
86:8b:fc:7f:7e:d2:ea:75:ff:8d:71:bf:87:c2:91:64:bb:cf:
74:c3:0a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:49:54 2025 by rpki-client