Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
File: azeN8nvZJgx-sVJz6ZPjawmF2hA.mft (raw, json)
Hash identifier: l0TXCRWMoxZJcdcdZKPoFQoZfzSSh8uttJXK8eaIftc=
Subject key identifier: 1E:C0:22:F5:D3:05:3F:A0:5C:81:58:E8:82:6C:8D:42:6B:61:CE:38
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Certificate issuer: /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial: 01958C6021918B48679A26E20EF961EE76F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
Manifest number: 149C
Signing time: Wed 12 Mar 2025 22:01:05 +0000
Manifest this update: Wed 12 Mar 2025 22:01:05 +0000
Manifest next update: Thu 13 Mar 2025 22:01:05 +0000
Files and hashes: 1: SWKxeLe_GGuPotQH4HKhFwr-_-A.roa (hash: nzRbtMsfHtfSOMu7Pb2PpTkqYw2TVYbIXEMhQXP/4G0=)
2: azeN8nvZJgx-sVJz6ZPjawmF2hA.crl (hash: 6nZ60xl7cSbekMmlr4JfXvWuEo+7NQpn2uTvD9OVgac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:21:91:8b:48:67:9a:26:e2:0e:f9:61:ee:76:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
Validity
Not Before: Mar 12 22:01:05 2025 GMT
Not After : Mar 13 22:01:05 2025 GMT
Subject: CN=1ec022f5d3053fa05c8158e8826c8d426b61ce38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c7:a2:d3:e5:48:5e:a1:8d:83:5d:ea:59:1c:
2f:40:11:ef:b0:bb:2d:cf:2e:cd:b7:96:99:74:2a:
58:66:b3:4b:53:8b:2f:bd:ef:4e:dc:88:38:43:a9:
d3:ff:48:6d:b0:85:37:a1:16:e8:71:a4:ba:d2:fd:
0f:db:2b:17:c4:8b:90:4e:a7:7f:fd:a1:79:35:36:
ff:bd:6e:26:7f:62:98:cd:c5:af:79:c2:8c:74:23:
df:43:cf:21:b3:46:e6:e3:4a:0d:1e:95:83:8f:d0:
e9:a5:ca:cb:48:da:51:44:0c:9b:a0:f9:63:4a:10:
4f:3e:37:c5:0c:b6:bf:cb:b8:da:6e:aa:f2:8a:34:
16:f1:45:2e:f6:bc:25:04:5b:02:8a:67:0f:a4:aa:
c6:b3:58:61:01:06:73:e1:a1:69:45:36:e0:74:2c:
85:8d:18:28:8f:e9:13:ba:36:2d:b3:be:cd:33:89:
c5:2f:de:93:6a:c3:3b:9e:42:35:b1:cf:43:b9:61:
50:93:36:40:7e:fa:18:18:0a:63:81:31:1c:b0:4e:
3f:20:d5:65:77:de:56:82:60:99:76:61:3e:55:77:
bd:d3:ae:3e:d8:a6:42:db:98:21:e7:ac:1d:6a:6f:
80:05:38:b7:08:ef:e8:75:72:46:1d:37:b3:e9:0d:
83:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C0:22:F5:D3:05:3F:A0:5C:81:58:E8:82:6C:8D:42:6B:61:CE:38
X509v3 Authority Key Identifier:
keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:aa:39:6f:60:9f:4d:f9:63:01:14:e2:b3:90:74:17:2a:21:
1d:6a:73:d0:bf:6c:f7:11:39:cc:27:84:23:16:91:16:13:a7:
7d:b9:89:6f:94:b8:86:d8:6b:48:ef:e9:9f:3a:fd:47:1d:94:
b3:ec:61:35:c0:79:c2:c0:c1:07:fc:99:2b:a9:22:59:dc:2b:
fc:a9:cd:71:68:c6:46:37:c9:02:92:f7:83:2d:43:e4:13:97:
41:66:1e:f0:a1:b6:9b:b6:6f:75:5c:c4:93:f7:23:45:80:52:
12:f7:a2:ec:ae:fd:9d:f8:e5:cf:9e:5e:79:9f:ce:fa:7c:77:
48:79:6a:64:1d:a0:0e:53:dd:29:ed:fd:e1:7d:8b:9f:36:7e:
4c:07:12:40:90:10:a8:6e:8f:7f:eb:df:04:1f:85:3e:c9:11:
4f:d1:8e:ca:43:e8:2a:0b:07:9a:68:b5:dd:0d:a5:31:9f:f5:
18:63:4c:80:85:29:ba:a1:71:ea:6b:1c:52:6b:f3:cf:b9:48:
21:97:06:a3:c0:63:28:70:93:2f:4b:0f:ba:31:66:44:ee:95:
7e:3a:50:60:73:27:97:6b:ee:98:2d:49:ec:40:7d:db:bf:91:
3e:2c:ed:6b:fe:71:6f:ac:86:73:cc:e8:fe:ca:11:c7:e6:21:
88:af:0b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:48 2025 by rpki-client