
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
File: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft (raw, json)
Hash identifier: eBQi64h5OYNXdDJtHLW8N/L2FhwYpUuyuHr/gUE+C2Q=
Subject key identifier: 90:96:66:3E:20:C4:DE:1F:C4:44:F2:91:50:93:EA:5E:5C:2B:1D:F3
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 01964DEBA750BDE6C8835480DB4C7C12350D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
Manifest number: 1504
Signing time: Sat 19 Apr 2025 12:00:11 +0000
Manifest this update: Sat 19 Apr 2025 12:00:11 +0000
Manifest next update: Sun 20 Apr 2025 12:00:11 +0000
Files and hashes: 1: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl (hash: bDZSK8O+llT51/9dEwc0iQM6BJQxEk/XmrfsHgskRI0=)
2: oPeQLPX6uGsTa0wO6DH1EULp4f4.roa (hash: KrmKJHT/mJohWjDeVABcWMG4FCh9RJOamHor38/dr+U=)
3: paZxOmMKFpQKe-8Kne9bRfBeDj4.roa (hash: Ht8nkuSK3tnDGTAuNZ2+oouOY3eOWnt0ge3I9SzF5BY=)
4: tQhpXUNnvGff6XvuqvOKpCTzYwY.roa (hash: Hc4QZ0VrOY7vtGnelWFhq1jyckc5D//hAbmROwzCFcg=)
5: xs4Lhq2dtoSR5NylGdQYpzYAJFY.roa (hash: BY/PFQ7JiAuNhQeV/tshKqWnXgR5ng/nvPLH2dMAqLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:a7:50:bd:e6:c8:83:54:80:db:4c:7c:12:35:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Apr 19 12:00:11 2025 GMT
Not After : Apr 20 12:00:11 2025 GMT
Subject: CN=9096663e20c4de1fc444f2915093ea5e5c2b1df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:70:e2:70:de:3d:82:3f:1c:bf:f3:22:d3:
08:27:54:eb:a6:b4:de:2f:0e:f3:a9:e3:81:1d:53:
ec:26:82:eb:49:1a:90:89:b9:14:4f:74:aa:be:81:
d1:c9:69:86:58:13:63:83:20:39:5c:2d:74:09:8f:
f0:a7:e0:89:81:a0:50:cb:64:9f:e1:74:ae:c7:ee:
7b:9a:99:c8:fc:be:65:50:53:21:b9:be:4b:ca:94:
2f:dd:4a:5e:2e:62:57:35:7c:d4:85:58:bc:22:d8:
bb:b2:94:8d:2b:12:9b:16:69:75:5b:b8:e9:22:3c:
0f:31:70:95:53:04:2a:d9:96:31:57:c3:e4:98:6c:
7e:35:0d:23:fe:e8:6d:7e:41:69:69:7d:95:e8:2b:
98:f4:a2:be:73:52:62:05:d9:fa:a6:7f:a2:2a:51:
c6:de:10:2f:38:73:60:b7:32:bd:b6:8f:0e:6b:fe:
9d:86:cc:ff:f3:7f:43:3a:2a:fd:e9:55:64:f0:f2:
b4:d3:07:d9:80:23:15:4b:60:e2:51:b9:a9:a0:f0:
3d:f5:e0:09:06:26:3a:6e:e7:02:a6:a4:34:0f:8c:
68:c7:db:6c:23:d5:f6:1a:99:70:f0:a5:b7:e7:1c:
27:37:d5:96:06:f5:84:31:88:0f:95:70:5b:b4:14:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:96:66:3E:20:C4:DE:1F:C4:44:F2:91:50:93:EA:5E:5C:2B:1D:F3
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4c:7b:76:a0:ff:f7:a9:7b:51:40:f2:30:4a:a2:65:d3:b8:
92:79:51:19:12:6d:78:c5:51:ee:25:0b:e5:e5:20:aa:34:c9:
99:ee:d5:02:f5:f6:fb:a0:3e:d1:7d:55:12:f0:b2:d8:02:74:
33:64:10:82:99:32:c5:ed:0e:07:55:28:84:2a:1a:e2:4e:b5:
b5:6a:ee:ce:33:c4:70:23:33:9d:de:77:72:64:08:cf:91:5a:
d7:15:ca:f0:e3:14:c0:49:26:53:44:de:1d:02:03:35:41:fb:
cf:ea:0b:03:75:d5:f8:8d:28:57:b1:2f:29:9c:39:46:05:c9:
a3:b3:6c:56:d8:3d:66:4f:ba:cb:d4:67:f2:dd:cc:6d:7f:bf:
3f:8e:90:29:a8:0d:b2:b4:ca:76:d4:a9:01:c1:28:21:ae:47:
e1:cd:4f:1a:69:14:65:c4:34:09:b6:c4:88:19:c3:95:c9:d8:
80:c1:0c:b3:c7:18:d4:7a:88:9d:c0:65:f4:9b:17:46:bf:51:
0d:56:88:06:2e:f3:67:52:c6:2a:1f:60:59:a0:f6:02:8b:1e:
da:f0:92:6d:76:46:e7:a4:bd:58:ee:cb:39:57:45:68:87:10:
9e:02:ed:c8:ee:49:39:24:2a:3a:39:7d:fe:02:5c:bb:ad:a6:
1a:8e:74:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 13:58:56 2025 by rpki-client