Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
File: AyHqOVCODhemUf6SrCnqOIMtC_8.mft (raw, json)
Hash identifier: MUrqcufVBk548FDOHxNbc43LU/Luw9iB4f1aWe8LfVw=
Subject key identifier: 0E:DA:5D:7B:5B:B5:71:D4:86:E9:7F:08:2B:B3:81:3C:19:27:28:7C
Authority key identifier: 03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
Certificate issuer: /CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Certificate serial: 0196425587B1F6A85E739FEBF3CC9CA09911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
Manifest number: 1392
Signing time: Thu 17 Apr 2025 06:00:23 +0000
Manifest this update: Thu 17 Apr 2025 06:00:23 +0000
Manifest next update: Fri 18 Apr 2025 06:00:23 +0000
Files and hashes: 1: AyHqOVCODhemUf6SrCnqOIMtC_8.crl (hash: km6k7yjZTONHhKXDoD1EN0IeTxD0QVEl5KeF+THvPrI=)
2: bOONrlZHdROoIahZ7NmIjgIdExM.roa (hash: 1aT2l6/v3aO2MOldiF+P6gsdMx47ItIcMI7fEC/C0L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:55:87:b1:f6:a8:5e:73:9f:eb:f3:cc:9c:a0:99:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Validity
Not Before: Apr 17 06:00:23 2025 GMT
Not After : Apr 18 06:00:23 2025 GMT
Subject: CN=0eda5d7b5bb571d486e97f082bb3813c1927287c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:9c:8e:f9:c2:ef:b1:de:4a:ae:9b:85:73:
04:c5:4b:d4:78:ef:1b:63:5b:ff:49:0a:1a:e9:29:
51:95:74:30:06:4f:80:2c:3d:ec:d8:bd:a7:32:f7:
75:d1:92:21:35:e8:68:ba:95:07:c1:99:66:44:aa:
fa:61:97:2a:3c:f7:99:58:dd:c5:50:64:f3:97:9e:
f8:fd:ae:08:80:f7:3b:ee:7f:1e:b1:0c:8d:ba:f3:
6a:34:1d:aa:ac:45:5d:1f:d0:d2:43:2f:d4:de:47:
d8:66:a4:72:7a:9d:21:9b:1d:6f:52:76:79:3d:e4:
df:3f:22:89:48:3c:a6:e0:e7:8f:14:e7:27:43:10:
25:8c:a5:9a:21:06:1e:00:e9:2c:dc:be:b4:c8:b2:
93:8d:a7:0c:91:03:e3:de:8f:0c:ab:df:d4:0f:39:
98:d4:d5:80:9a:a9:88:5a:b3:00:c6:c8:34:ab:89:
ca:12:92:83:91:c3:b9:0f:a3:49:ba:9b:fd:4d:6c:
34:05:65:06:05:eb:46:3f:11:f9:30:2d:e9:30:c2:
3e:a2:65:d5:e2:e2:0e:d3:4c:62:db:51:b0:4a:00:
ee:a8:2d:c7:0b:71:41:06:14:76:39:d9:ae:52:86:
a9:f0:8c:ac:c0:26:1b:cc:71:37:36:f3:31:2f:fa:
e6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DA:5D:7B:5B:B5:71:D4:86:E9:7F:08:2B:B3:81:3C:19:27:28:7C
X509v3 Authority Key Identifier:
keyid:03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:72:f9:6e:d1:11:a4:51:e3:bc:91:89:54:14:e0:c2:40:4c:
01:56:85:70:83:a1:0b:35:52:08:87:21:69:b0:cf:fd:d3:1a:
78:a5:ba:6f:10:f4:29:56:ce:07:45:50:4b:49:df:d1:21:58:
21:bf:5c:17:57:db:a1:86:6d:4c:7b:ef:a5:5a:32:92:dc:99:
c4:ad:89:1b:18:3c:52:93:a7:19:1e:22:57:11:b1:26:bb:37:
66:6f:26:b9:33:a4:bb:f1:3c:07:41:ff:f8:94:d2:d2:3a:11:
0e:0c:30:e2:8b:20:61:9a:9b:c8:4d:9e:aa:0c:ac:d7:2e:46:
c1:88:75:69:12:b9:03:b4:32:82:d0:dd:53:9b:8f:6e:f9:73:
fd:57:8d:2f:31:d9:ea:2f:25:6c:ce:26:a7:b1:56:06:72:ee:
cb:89:e2:6b:a7:8e:9c:d9:7c:c3:8a:dd:82:7f:51:ba:51:b9:
72:1a:42:5a:79:aa:b4:ee:d1:5a:5d:0d:82:a8:7b:79:a6:3d:
1e:97:82:54:d2:a9:5d:29:17:e9:2e:91:49:fa:ed:1c:73:17:
3c:82:fa:72:8f:2e:c1:bd:47:69:f3:f1:bd:1a:a1:7f:d8:ee:
26:24:c7:d0:4c:e9:9b:27:f2:6c:05:39:0a:4b:0d:80:2c:b1:
c2:04:d8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:51:46 2025 by rpki-client