Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft
File: aUSJSM9NjazkdxjA9yWe3usJPns.mft (raw, json)
Hash identifier: txVW844XGSoz4IY6HEwJ/ms56toJU9K9Lf0spfMNyfw=
Subject key identifier: E2:48:44:26:E8:42:AA:74:F3:66:C5:95:CF:96:F1:40:71:2B:47:06
Authority key identifier: 69:44:89:48:CF:4D:8D:AC:E4:77:18:C0:F7:25:9E:DE:EB:09:3E:7B
Certificate issuer: /CN=69448948cf4d8dace47718c0f7259edeeb093e7b
Certificate serial: 01965492B50C2D457DF959092893035EF14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUSJSM9NjazkdxjA9yWe3usJPns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 19:00:22 +0000
Manifest this update: Sun 20 Apr 2025 19:00:22 +0000
Manifest next update: Mon 21 Apr 2025 19:00:22 +0000
Files and hashes: 1: aUSJSM9NjazkdxjA9yWe3usJPns.crl (hash: 6g66hwwHe+iETIB50tUJxWW6h/XwLX14pLee6hNkXpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUSJSM9NjazkdxjA9yWe3usJPns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:b5:0c:2d:45:7d:f9:59:09:28:93:03:5e:f1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69448948cf4d8dace47718c0f7259edeeb093e7b
Validity
Not Before: Apr 20 19:00:22 2025 GMT
Not After : Apr 21 19:00:22 2025 GMT
Subject: CN=e2484426e842aa74f366c595cf96f140712b4706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2e:4e:91:7d:6d:7e:c1:0a:1b:f3:36:c5:58:
6d:76:c0:28:e8:84:c8:64:9d:22:b5:d7:4b:b6:c2:
e0:1c:b2:6b:48:0c:dd:ac:00:a2:76:99:6c:ed:dd:
a6:bd:93:75:65:0a:3c:06:52:51:16:12:a3:8f:ff:
a0:b4:60:21:74:56:00:0e:19:4d:1f:82:83:39:b9:
78:16:ec:74:4e:d9:83:42:cd:94:81:40:25:ca:aa:
ad:9a:7d:5b:e6:53:81:8a:2a:9a:c4:f7:b7:89:e0:
8e:9c:53:2c:50:06:d6:6e:db:4c:2a:30:71:08:91:
c6:47:b9:b0:c4:02:43:0f:34:61:28:34:1b:c2:9b:
d9:99:93:9f:ec:97:3d:6b:a3:69:e1:06:41:b1:8f:
e3:a3:da:f8:55:ca:1c:44:02:7c:cd:3a:2f:15:f7:
df:75:c2:b2:59:75:ac:0d:c2:25:ea:e1:b9:c0:ca:
04:0f:bb:82:7f:cc:f6:a7:ea:a9:ef:aa:f3:9f:db:
a8:b4:17:b9:7b:b2:7e:5a:90:18:ca:0a:f3:3c:72:
f2:bc:3d:60:24:54:04:3d:6f:0b:0e:66:b1:b9:4b:
e9:51:af:2c:9c:15:b4:b4:46:19:89:d0:cb:bd:97:
8c:e9:58:3b:16:c7:e7:ff:63:8a:25:e8:db:64:78:
ad:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:48:44:26:E8:42:AA:74:F3:66:C5:95:CF:96:F1:40:71:2B:47:06
X509v3 Authority Key Identifier:
keyid:69:44:89:48:CF:4D:8D:AC:E4:77:18:C0:F7:25:9E:DE:EB:09:3E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUSJSM9NjazkdxjA9yWe3usJPns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:70:ab:29:ff:8d:28:0f:85:fa:ac:80:7a:69:61:ef:47:22:
3d:81:62:30:d3:20:ea:55:24:ef:01:46:35:95:d5:22:ec:3e:
5f:ea:3b:b8:ef:3e:01:d7:fc:74:3c:64:fe:bb:77:5d:ae:02:
42:ee:5e:c1:59:ec:96:e3:58:b7:28:72:66:69:b9:5b:89:75:
86:d9:28:9b:ec:0e:fc:9d:b6:d8:38:00:cd:e8:9d:ac:fc:42:
12:58:1d:12:20:97:7c:93:89:ab:bd:d2:0e:8a:a1:7b:05:c4:
6a:fb:45:01:22:bb:d4:be:4f:11:a2:14:f9:54:9b:41:9c:f2:
59:7e:b1:cd:a6:c4:1e:c3:e5:c0:65:30:83:51:f5:96:d6:71:
b0:c6:f5:05:37:02:e2:8d:7a:53:bd:36:b2:60:e8:2a:5e:ea:
4c:39:b5:40:53:c4:49:55:02:80:c0:6b:04:aa:df:f8:3e:79:
ee:ee:b4:e3:26:a0:fb:35:17:76:15:4f:f2:fb:91:34:99:11:
d5:2e:a8:c2:91:d5:4c:43:fb:61:54:82:b1:45:ec:28:35:76:
0d:87:34:b7:58:14:9e:87:3a:63:05:c3:32:53:c3:7a:84:47:
51:4a:de:7d:85:6c:72:68:85:62:80:20:f9:0e:97:49:95:38:
07:74:75:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:04 2025 by rpki-client