Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.mft
File: AydVBXxpvXun2iJSAQnkm1sEzAM.mft (raw, json)
Hash identifier: Ra11bU/+c82ICDgCxGIokcVOVqw4d58TqCOagMUYQZI=
Subject key identifier: 67:AE:8E:70:E8:AA:A6:6F:32:63:88:EC:66:06:8C:41:05:73:59:89
Authority key identifier: 03:27:55:05:7C:69:BD:7B:A7:DA:22:52:01:09:E4:9B:5B:04:CC:03
Certificate issuer: /CN=032755057c69bd7ba7da22520109e49b5b04cc03
Certificate serial: 019653B78B1316F1A05C4F769D718B7787CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 15:00:59 +0000
Manifest this update: Sun 20 Apr 2025 15:00:59 +0000
Manifest next update: Mon 21 Apr 2025 15:00:59 +0000
Files and hashes: 1: AydVBXxpvXun2iJSAQnkm1sEzAM.crl (hash: LKhQI5W6W2GeVJjAoJEXJLtYblS/zK1pAHufmUMFGh8=)
2: EJzvV6VT4JO2fNcaeaZDcT8DKYo.roa (hash: bG9n2ritOo8P4pLXuKhyV+b01tNOeWKOB0xqyu4uUe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:8b:13:16:f1:a0:5c:4f:76:9d:71:8b:77:87:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032755057c69bd7ba7da22520109e49b5b04cc03
Validity
Not Before: Apr 20 15:00:59 2025 GMT
Not After : Apr 21 15:00:59 2025 GMT
Subject: CN=67ae8e70e8aaa66f326388ec66068c4105735989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:4b:ed:8d:4a:8d:1c:a0:22:c2:bc:f2:32:
2f:99:cb:66:4a:27:02:4a:a4:e6:07:7b:97:b1:14:
77:46:89:73:71:39:f8:51:89:ff:ea:2d:ca:c5:18:
19:67:bf:66:22:41:da:54:3f:0f:a1:bc:09:0c:7b:
82:7c:80:74:f9:0a:34:3f:c0:03:e3:74:8e:24:73:
d8:a6:a2:1d:fe:50:d9:d4:93:51:12:eb:9e:62:d6:
49:f8:af:22:b9:0f:3d:cc:51:3e:75:1b:8e:cd:33:
f1:bc:72:b9:d3:9f:39:71:19:78:7b:42:13:9d:d4:
34:23:cc:d1:fe:dd:6a:f7:3c:13:fd:45:54:7f:05:
b4:4b:24:13:35:d0:c3:0f:ba:ec:ad:41:a1:45:d1:
6c:55:fd:e1:83:d8:28:eb:89:cb:bd:3b:97:fc:83:
c8:81:93:df:71:56:6f:80:86:32:e9:09:62:43:7f:
88:2b:b9:a7:8c:9c:c7:1e:5c:19:42:ef:c3:91:6c:
df:8f:b1:f8:c0:9b:fd:4f:22:f0:00:c6:6c:71:f4:
5d:68:c8:b5:d6:b1:ae:10:5a:80:55:a6:d2:e7:14:
55:27:4f:2b:bb:ec:a3:56:66:ce:0d:e3:a6:21:2f:
7a:12:81:54:68:d5:bb:b0:09:da:2c:18:ba:0c:c5:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AE:8E:70:E8:AA:A6:6F:32:63:88:EC:66:06:8C:41:05:73:59:89
X509v3 Authority Key Identifier:
keyid:03:27:55:05:7C:69:BD:7B:A7:DA:22:52:01:09:E4:9B:5B:04:CC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AydVBXxpvXun2iJSAQnkm1sEzAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a3deec-dca2-4559-94b8-d9ba096bf5bc/1/AydVBXxpvXun2iJSAQnkm1sEzAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4b:6b:53:21:5d:39:f4:64:0b:8e:58:67:c8:88:99:d6:50:
76:6b:fc:32:8c:c5:53:dc:e0:54:40:27:03:97:93:7b:69:f3:
df:e9:16:21:6f:2a:91:94:9f:43:8c:5c:2a:d5:cf:8d:30:41:
ad:9a:bb:19:68:9e:e8:ee:d0:53:21:5f:e0:56:8b:c7:ea:aa:
8f:d1:b9:87:79:e4:2c:d4:a0:46:70:1f:97:4e:4d:70:c0:66:
a5:21:77:2e:be:56:18:b7:4a:10:21:1c:b5:93:37:82:17:c2:
57:57:0e:a2:ff:f9:37:36:f8:81:4b:50:3a:2f:13:28:05:c3:
0f:e5:ef:e8:65:70:cb:7a:ad:6a:01:54:67:c0:ad:74:68:a9:
fa:f4:16:dc:43:b3:86:02:97:aa:a3:ae:61:72:a6:f6:10:ae:
fa:f7:5e:7a:92:8e:85:7d:4e:a2:f5:b6:b7:0f:c8:8e:4d:16:
b9:ce:2a:3c:2f:57:5e:64:ef:b3:23:ff:5b:60:12:43:2b:f2:
b5:a7:c2:90:9d:6c:a0:ae:62:10:f5:74:d7:29:3d:4f:82:f1:
b8:69:27:e5:90:b6:f1:e9:0f:bc:53:56:dc:49:03:b9:c3:55:
43:38:c8:fc:d1:d0:7c:63:8b:21:ba:07:00:cc:26:45:eb:c6:
21:25:3a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:57 2025 by rpki-client