Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File: arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier: OwuM7AutTkwcrnzQnyd9+RsiI7PduxpwM8yMyWqi2hA=
Subject key identifier: 16:0A:E5:2A:2B:41:52:0C:A4:F5:A5:B5:61:60:4D:3A:77:0C:A0:87
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 01965EA8680DC233A298CAD30372497F8CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number: 1504
Signing time: Tue 22 Apr 2025 18:00:17 +0000
Manifest this update: Tue 22 Apr 2025 18:00:17 +0000
Manifest next update: Wed 23 Apr 2025 18:00:17 +0000
Files and hashes: 1: Pj_t5CT2l74I7u9IIPT57QIpwtI.roa (hash: injYF0uAAm68pNeJanI0YLVJHbntDpb8a8fhql09/Qo=)
2: Tu-eLvS4BjY6sLbjKclCuHMNcyE.roa (hash: EMlouII+tVGp47ymDY78sfeCzz5ozn1bYR3C76/DHNQ=)
3: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: YZX19pT5RWHftF5HS/6VMfaGC4dpl48ffGRmiFsSJXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:68:0d:c2:33:a2:98:ca:d3:03:72:49:7f:8c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Apr 22 18:00:17 2025 GMT
Not After : Apr 23 18:00:17 2025 GMT
Subject: CN=160ae52a2b41520ca4f5a5b561604d3a770ca087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3c:12:f1:48:64:7c:80:8c:18:3d:b6:b3:44:
2d:2d:82:20:e5:03:b8:37:f2:83:35:87:a4:97:fd:
08:82:19:cd:94:bb:0c:6a:6f:1b:91:7c:20:b0:f0:
e6:d5:e5:0c:de:2e:64:9d:c3:83:03:f5:6f:a1:0e:
8d:60:5c:fc:8d:36:a7:f0:76:36:f6:fe:e6:4c:b5:
f5:72:c0:eb:9c:aa:c3:78:c3:2b:cd:0e:66:bc:e1:
a0:7d:4e:6f:0c:c4:96:56:d9:f5:f2:f6:86:72:52:
a6:0d:26:bd:ae:a6:78:aa:00:63:88:5d:de:b1:0c:
20:32:94:99:05:ea:82:12:a5:ed:d0:6d:02:fc:2b:
b1:20:bb:5c:1d:e4:07:76:19:8f:61:56:40:c9:f3:
7a:4b:27:de:96:94:33:01:36:d9:00:2e:7e:9e:be:
f0:e6:f4:0c:3d:b5:49:29:f4:6d:1d:50:0b:81:29:
c4:fd:9a:61:c6:69:f2:2f:23:49:07:54:08:08:74:
1c:9d:96:23:54:77:fb:fb:04:f4:7a:c5:3f:1c:f9:
f1:56:4d:53:21:97:4f:3c:8e:8c:8a:2c:7a:7d:d0:
01:a9:f9:a4:45:e8:c9:fa:8a:52:d9:17:01:d6:d2:
88:fc:c9:02:f4:8d:4f:c9:32:93:5f:d8:33:a6:6a:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0A:E5:2A:2B:41:52:0C:A4:F5:A5:B5:61:60:4D:3A:77:0C:A0:87
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4d:d1:20:23:74:da:d4:f4:df:3c:df:0d:75:83:1c:e2:4c:
29:43:94:4e:2a:b3:f4:96:c3:42:62:da:61:e1:eb:9f:8e:6a:
48:3f:f7:6a:dd:d0:7f:b1:c1:11:5f:34:b8:3e:73:c2:11:05:
01:60:dd:cc:9f:ef:d9:02:6c:d3:00:34:07:1f:09:7a:64:2e:
09:e2:8a:19:cb:9b:fc:63:41:ef:ef:94:74:6c:78:d0:8a:99:
d2:f6:e5:21:94:0a:cf:89:fe:f8:ae:ab:2a:ae:eb:31:fc:fb:
fe:0a:5b:fc:35:d9:c4:af:11:a7:9f:44:51:cc:fa:5e:d2:5a:
a2:5b:f5:24:b8:ff:be:64:b4:8e:7c:81:b0:a6:52:e8:1c:0f:
f4:03:25:4e:4a:81:ad:7e:cc:cc:11:29:3e:88:87:d1:f7:d2:
1b:1b:b0:36:fc:b7:c6:51:7c:b4:36:69:6d:8c:fe:af:b9:86:
ec:24:46:82:ab:7f:49:5c:39:3a:5e:fc:1b:6b:fd:09:c5:64:
cf:6e:2e:d5:9f:7e:0d:44:d2:c6:11:ca:a3:bb:ad:5d:11:de:
e5:1a:f3:45:81:fb:5d:c6:5d:9e:b9:b6:fe:73:47:f8:fd:10:
01:ba:12:13:02:3c:d4:0b:2a:c9:cc:f4:d5:d7:82:7a:44:60:
5d:06:68:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:16 2025 by rpki-client