Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
File: AVz-48K26knSnhA-I6Uixi44UxE.mft (raw, json)
Hash identifier: ojiuY8kOm8TZlYSYeUY2gJwxJ8l3VZZrSsRl+k/hmy4=
Subject key identifier: 28:AF:24:8E:48:3C:B8:1B:FB:DC:9B:04:09:83:9F:47:B2:67:3E:E0
Authority key identifier: 01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
Certificate issuer: /CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Certificate serial: 01965492EA42A5A2EF279F55675C088A657F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
Manifest number: 1213
Signing time: Sun 20 Apr 2025 19:00:36 +0000
Manifest this update: Sun 20 Apr 2025 19:00:36 +0000
Manifest next update: Mon 21 Apr 2025 19:00:36 +0000
Files and hashes: 1: AVz-48K26knSnhA-I6Uixi44UxE.crl (hash: 5DhD3/gnaULKbBaSPUhIQ1YSXkiIi+9hE/Q4iHuZB54=)
2: RcE6nYyQF7fwLJ22hRw58pxpEO4.roa (hash: U71UZwrToMoGIgEOhJfqlYI83JHFBKS+bWz/uad49Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:ea:42:a5:a2:ef:27:9f:55:67:5c:08:8a:65:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Validity
Not Before: Apr 20 19:00:36 2025 GMT
Not After : Apr 21 19:00:36 2025 GMT
Subject: CN=28af248e483cb81bfbdc9b0409839f47b2673ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c5:53:f9:63:c5:50:0c:10:44:98:df:31:5f:
bb:88:37:33:7a:26:e4:bc:b6:83:7f:4d:06:c7:2b:
b3:ae:45:1c:8b:ba:f9:e4:70:d0:c0:88:0b:db:99:
c0:9e:ff:12:f9:c2:35:73:5d:93:fa:9e:91:bf:50:
da:4b:57:d5:f1:dc:50:8e:8f:05:22:05:8a:e7:fd:
92:99:71:7e:95:74:8d:23:3f:17:4d:ba:64:a7:7b:
2a:ba:56:a1:2b:be:b7:5e:7e:02:b7:3b:b2:f8:62:
b3:9d:f1:3b:04:03:49:92:59:44:e8:a7:af:0d:51:
a6:37:be:8c:18:37:e0:bb:95:18:4c:4e:6d:12:36:
38:2d:10:c6:fd:a5:5b:fc:8c:2b:78:0c:64:bf:18:
73:c9:27:d6:12:8b:41:09:1b:e1:f7:35:af:bc:e9:
e6:88:ca:73:56:85:52:80:dc:d8:03:83:92:b7:54:
29:d9:96:c4:21:3c:23:b6:13:55:91:18:38:b7:38:
33:b5:dd:e7:c2:d5:0d:84:1e:80:d3:c8:03:5d:af:
ab:c1:ea:61:d9:6b:39:6f:48:e9:63:36:c0:fc:52:
cb:a4:fd:a7:8d:4b:67:93:34:3f:a0:64:b1:7f:a8:
8c:f1:27:5f:3f:46:9a:b7:06:6f:a8:c4:2d:f9:41:
94:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AF:24:8E:48:3C:B8:1B:FB:DC:9B:04:09:83:9F:47:B2:67:3E:E0
X509v3 Authority Key Identifier:
keyid:01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:94:97:d2:a8:5f:e1:a8:92:a3:41:49:6a:fd:b4:24:86:1f:
d4:d2:07:de:92:f8:d2:b3:5c:3f:a7:c0:fd:48:8d:89:e7:97:
4c:d1:6a:d5:9f:c9:33:b4:05:c4:97:ca:3b:ed:de:6f:89:71:
ad:71:b0:bb:35:f1:27:a1:13:7e:a1:08:86:0f:90:61:75:66:
48:8a:6d:f8:f7:6e:b8:12:e8:fb:a1:d5:01:94:29:a5:42:86:
f8:4b:6c:51:2f:45:d6:dd:f5:d8:3b:90:aa:ec:61:4c:86:5f:
c6:f5:69:4c:32:62:11:53:cb:93:30:38:e3:2f:e5:54:c7:2c:
8b:a8:ea:78:13:d8:51:ca:ff:30:e8:42:5c:bc:44:d4:ac:24:
98:02:8e:82:3e:9e:a4:64:41:09:16:e1:02:30:39:97:41:06:
c8:1d:9e:10:1f:7b:d2:80:2f:8c:c1:7a:9c:4c:a5:2d:9f:b4:
96:03:a9:83:be:7e:82:2b:1a:1b:eb:af:d9:a0:d8:91:4a:85:
ce:4a:65:df:18:e0:59:5e:a7:6e:52:50:b9:3e:7d:25:d0:17:
e7:f7:a3:5b:6f:31:55:3a:14:8d:de:b5:79:0f:8c:45:44:17:
6b:87:70:b3:2e:59:82:78:11:09:2f:85:12:01:41:30:cb:a4:
50:25:bb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:31:13 2025 by rpki-client