Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
File: AsNyEO2KVs4O3UV0v3NrYyReWCM.mft (raw, json)
Hash identifier: FrTXr6IYxdnZxc/zzIsBVZxY7/OvyB3iEkmsy0kFrso=
Subject key identifier: 1A:90:18:84:DE:E1:4E:AC:44:67:93:E0:53:39:13:B8:44:F4:5E:DA
Authority key identifier: 02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23
Certificate issuer: /CN=02c37210ed8a56ce0edd4574bf736b63245e5823
Certificate serial: 0196526D4C4CAEAE1A40043AB12FC2D6F528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
Manifest number: 148B
Signing time: Sun 20 Apr 2025 09:00:16 +0000
Manifest this update: Sun 20 Apr 2025 09:00:16 +0000
Manifest next update: Mon 21 Apr 2025 09:00:16 +0000
Files and hashes: 1: AsNyEO2KVs4O3UV0v3NrYyReWCM.crl (hash: 2ZVKjsM+pREsA6WA5Nmb26nUA0Bkd0Jla51wvthbh7w=)
2: k_PCDa1MyltAYjWzYMAd9l-Wa5E.roa (hash: lyYvyESDGqkH326dhXSiycM2A323liIWVuNkJINconc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:4c:4c:ae:ae:1a:40:04:3a:b1:2f:c2:d6:f5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c37210ed8a56ce0edd4574bf736b63245e5823
Validity
Not Before: Apr 20 09:00:16 2025 GMT
Not After : Apr 21 09:00:16 2025 GMT
Subject: CN=1a901884dee14eac446793e0533913b844f45eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:9d:41:4f:e6:3d:f3:b2:4c:4b:57:08:75:
08:0a:4d:87:70:53:e6:ff:0a:8c:a1:c2:08:31:04:
27:7d:94:2e:79:f8:4f:5c:9c:e4:a9:f3:8f:ae:1d:
42:77:bf:11:82:3e:2a:15:42:17:09:b2:38:64:b4:
58:1b:eb:da:9b:a4:63:58:9b:9a:37:ba:33:1e:87:
d7:83:25:1b:9d:ed:76:d5:fe:e8:96:9f:ff:73:2b:
c5:d8:8f:30:a2:86:db:81:98:a0:11:c8:2a:22:b4:
bb:a7:67:bb:ba:ba:bd:8f:e4:66:d4:61:a5:d5:28:
8f:66:07:d0:0c:92:d1:97:7e:63:17:ea:1b:ee:3a:
a3:6a:8e:0e:60:fa:02:fb:aa:eb:28:ba:91:a1:d5:
2b:4d:54:3b:2c:cd:43:1b:5c:b3:08:f4:f5:59:36:
29:6e:a7:a3:07:9b:0a:34:a4:bb:65:9d:74:e4:62:
97:d2:0b:80:60:eb:f9:4e:1f:7f:f2:2c:97:29:24:
87:98:a2:14:f8:aa:0e:c4:3b:7c:2e:93:71:14:1d:
44:c8:4b:c8:61:67:da:0d:e8:5f:42:f3:af:4c:f7:
e3:21:6f:b1:aa:d0:d8:08:44:ac:75:c7:b0:35:15:
1b:ec:fa:e7:77:66:9a:fd:81:c0:1b:a1:42:0b:03:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:90:18:84:DE:E1:4E:AC:44:67:93:E0:53:39:13:B8:44:F4:5E:DA
X509v3 Authority Key Identifier:
keyid:02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ad:2e:c5:18:ce:62:85:1c:c9:f5:ef:ef:28:63:93:6e:df:
30:c8:52:91:13:9c:73:96:d6:ce:75:aa:6c:84:4a:fc:3c:c4:
59:4c:14:bc:ad:78:26:6f:74:46:2d:55:9e:c3:70:c4:76:b8:
b3:56:23:6c:bb:7c:22:29:be:67:9c:e8:18:f9:c0:07:4c:90:
0b:20:e4:eb:b0:71:ed:9b:79:be:d5:e8:1d:61:8b:97:a1:8a:
6b:f6:89:1b:07:a7:b5:66:93:21:4b:6b:22:58:d1:f6:10:ac:
cc:e5:38:f8:cb:97:cb:d9:b6:67:99:08:5c:62:ff:f5:ea:10:
6b:07:0c:60:8c:6f:19:9f:03:83:63:d1:d8:60:6f:43:2f:03:
f5:ba:da:7a:c6:9f:9a:96:af:8a:6f:f7:76:7f:75:a9:c0:00:
a2:80:01:bc:9b:bb:c1:1d:46:74:f4:cf:d1:dc:38:1a:8e:f4:
c8:77:15:73:f3:27:ae:6e:bf:3a:04:1b:49:95:16:c4:d5:80:
50:79:8c:ae:b0:77:f2:f5:79:d2:86:bd:f3:32:00:0c:bb:47:
bb:dc:1d:de:20:e9:9a:d5:6c:f2:70:6a:63:e4:5a:20:f6:f1:
01:32:86:02:5f:cd:c3:44:fc:a8:59:e8:62:ce:34:ba:45:65:
bc:71:72:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:18:40 2025 by rpki-client