Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File: avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier: qtBwUJOrDKcmf42GRMwlhD6yw+SroaKCuIeaoWJgXQI=
Subject key identifier: 8B:9B:46:56:BE:18:08:39:7D:EF:8F:17:26:47:59:EC:6E:59:25:03
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 019649D890E4EE3B49E95503740F1A79FAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number: 100D
Signing time: Fri 18 Apr 2025 17:00:51 +0000
Manifest this update: Fri 18 Apr 2025 17:00:51 +0000
Manifest next update: Sat 19 Apr 2025 17:00:51 +0000
Files and hashes: 1: Bxk-ljoc2dW8QsY1t6SnljuVzrc.roa (hash: EHFgnxfo9FlNYICjVNDDOGwcGWSFUFvfhL6xXPC9Efc=)
2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: S/BCn2iFA9WXq3O80EiIbvtqxGMtYlA+cp6KhGVWzLg=)
3: hbudJorJpA0LronMbhTnCWltODU.roa (hash: DwgBGICs1kDDEoItVMFSXi6+JkhqgGxyVQsq2CAkyq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:90:e4:ee:3b:49:e9:55:03:74:0f:1a:79:fa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: Apr 18 17:00:51 2025 GMT
Not After : Apr 19 17:00:51 2025 GMT
Subject: CN=8b9b4656be1808397def8f17264759ec6e592503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:be:12:2f:43:17:1f:3e:d6:8b:eb:49:6d:
3b:95:df:58:3b:69:cd:14:96:e6:e7:1d:43:22:72:
25:95:3f:62:e4:ad:fd:ec:53:7f:fd:a2:a9:50:e3:
d6:70:a8:6d:92:6b:9c:67:0f:c0:40:0c:03:3b:aa:
8b:a8:9a:fc:31:54:7c:fc:4f:d6:bc:79:2b:74:d8:
df:4e:37:a5:2f:68:6b:ad:01:1a:61:22:14:46:a3:
ca:50:32:4d:9f:a8:fc:2d:2b:a5:30:cd:25:da:00:
98:2d:4b:fa:42:d8:3c:28:b1:07:3b:13:94:4b:27:
86:8f:9f:c7:0c:89:e5:b8:ab:cb:bc:b0:da:d5:ff:
10:30:0f:79:8c:c1:f0:d5:db:57:04:e2:b9:41:6a:
51:e3:fd:b7:cb:ec:fb:aa:d4:3f:62:00:ce:c0:88:
8e:87:ca:bb:23:df:ba:3a:59:6a:d6:99:9f:ce:c2:
a5:7d:a9:31:77:c5:24:d2:c0:f6:31:fd:6f:38:92:
8c:1b:cf:70:e5:78:a9:2e:f7:8b:be:f5:a0:bc:d7:
a2:d2:1a:1f:33:9a:35:12:5e:13:14:11:de:6d:fc:
45:75:9a:b4:64:fb:cb:50:a3:0e:1c:c7:42:27:12:
d7:3c:4d:91:b1:99:8f:2a:5c:f3:8a:4f:b0:57:f4:
6e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9B:46:56:BE:18:08:39:7D:EF:8F:17:26:47:59:EC:6E:59:25:03
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ac:93:5c:30:88:88:9d:63:85:a0:4c:b7:7b:61:f7:54:aa:
ac:39:c0:af:58:de:1b:31:eb:cb:a5:96:0b:59:a6:3d:25:17:
7f:3c:e9:50:41:e6:f4:88:de:61:0d:fc:d5:c8:a1:17:95:5b:
ab:7a:c8:26:d9:40:df:49:79:7c:a7:5e:2c:20:53:69:2a:4c:
de:47:b1:64:79:3c:e3:a5:8e:f9:b0:b0:c6:c7:bd:63:9f:57:
f0:03:64:ca:40:da:23:8c:d1:cc:0b:3b:a0:1a:ec:68:00:c0:
4a:30:86:ba:f0:51:d3:43:c1:23:71:5c:59:d5:bf:cc:17:11:
3c:df:1e:aa:6b:73:17:f7:3a:d3:93:66:41:9a:2e:9e:11:c7:
0c:32:fe:eb:3f:6f:49:bb:23:b9:19:7b:41:f5:14:a9:c6:b9:
56:db:9d:09:5c:25:d3:2c:7c:94:d1:0b:97:ad:8f:26:c4:60:
39:f9:14:b3:67:3c:76:48:de:70:68:06:5a:12:cc:b3:91:94:
d9:91:53:e9:ac:b4:cf:d2:0b:7c:6a:2f:46:d9:62:43:8b:41:
10:73:71:42:bd:b6:72:1a:30:4d:fe:9d:56:68:82:1c:9a:2d:
d8:1e:b7:df:f7:52:bd:be:be:71:50:8e:00:b8:c7:39:0c:99:
4b:0e:7e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:13:39 2025 by rpki-client