Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
File: aVJaNi6HcFoewCLRZWDydtWc7h0.mft (raw, json)
Hash identifier: q+yiTF+HnANUwkrd9xVYTv9yw+VlVfj153fdXMTQmi4=
Subject key identifier: 87:D7:98:D3:1F:F7:AF:80:BA:EF:53:5C:F0:1E:E6:99:D0:80:51:9F
Authority key identifier: 69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
Certificate issuer: /CN=69525a362e87705a1ec022d16560f276d59cee1d
Certificate serial: 0196556ED50984795D43D27397D075C55A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
Manifest number: 06D7
Signing time: Sun 20 Apr 2025 23:00:48 +0000
Manifest this update: Sun 20 Apr 2025 23:00:48 +0000
Manifest next update: Mon 21 Apr 2025 23:00:48 +0000
Files and hashes: 1: aHJU3TtGM9M9L2c33hiqaeAD6-M.roa (hash: Jnk6c3GJ5E4y6b+inckEyRoPVADxMl1TsyYlid/Y0Y0=)
2: aVJaNi6HcFoewCLRZWDydtWc7h0.crl (hash: H/ZYOR4dvoaE1gNMZJIGRODW/s2acoLqW2SKJmA9GZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:d5:09:84:79:5d:43:d2:73:97:d0:75:c5:5a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69525a362e87705a1ec022d16560f276d59cee1d
Validity
Not Before: Apr 20 23:00:48 2025 GMT
Not After : Apr 21 23:00:48 2025 GMT
Subject: CN=87d798d31ff7af80baef535cf01ee699d080519f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:e5:dd:f9:40:6e:06:bf:11:7d:5e:57:c7:
8d:ec:e6:03:9c:db:55:95:f9:e5:90:bc:ab:0c:c4:
32:50:f9:d4:d8:2d:78:fd:44:39:0e:ae:94:b6:38:
52:4c:8c:da:4c:42:7f:00:14:53:22:93:84:f4:3d:
df:a3:78:1a:2e:2e:d1:89:a8:33:c8:41:17:3e:3b:
20:5f:db:3d:75:36:c3:df:d9:0f:d8:9b:46:e7:89:
cc:e9:13:d0:a7:9f:03:88:12:59:4b:4c:ba:61:d6:
08:f9:34:eb:51:9e:70:a5:1a:2f:75:df:57:2f:e5:
f3:2f:01:af:d9:7d:3c:56:cd:1f:0e:e7:a8:60:c7:
79:ac:1d:35:cc:85:c1:b0:62:38:49:aa:f6:02:d1:
a2:d4:0f:12:a5:b8:c1:0c:71:74:de:46:f7:c5:99:
5d:e0:70:c8:cf:ee:95:f7:be:02:66:3f:7c:55:1f:
29:f6:67:db:14:7b:cc:d3:1a:6b:4b:d5:43:3f:bc:
31:fe:1e:10:85:2a:28:06:de:da:91:31:44:bc:e3:
a7:55:67:de:75:bd:31:74:3f:34:f2:aa:dc:19:ae:
cd:2f:6d:9b:18:6f:42:24:22:e0:bf:e1:98:11:ae:
17:43:22:7a:8e:bd:e1:d3:3b:ed:22:ae:ec:92:6c:
a9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D7:98:D3:1F:F7:AF:80:BA:EF:53:5C:F0:1E:E6:99:D0:80:51:9F
X509v3 Authority Key Identifier:
keyid:69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:aa:f0:ec:7f:f5:3e:29:00:84:e6:3d:6e:df:7d:dd:b0:df:
12:d2:0b:80:e3:9b:f0:05:04:39:64:db:55:cc:ee:66:7e:ab:
6f:42:f2:a3:31:7e:2d:33:cb:56:c8:0e:9d:37:ff:b2:d8:78:
a4:3b:3c:c9:25:78:71:57:b8:ee:13:1c:d0:d2:29:aa:66:22:
de:b2:53:4d:3c:48:23:0f:99:80:be:0a:24:48:b5:57:58:3f:
79:d1:c9:cb:2c:89:bd:7c:c0:c3:77:40:15:17:21:1a:6b:a9:
8c:ad:9e:df:a7:91:19:4c:69:38:f7:35:63:5a:28:0b:ef:2c:
bf:09:cd:e3:a4:9e:42:ee:17:ba:03:7e:8c:1f:46:03:68:6b:
3b:21:d5:b4:28:ad:79:d5:58:09:0a:f1:2f:39:09:f0:a9:f3:
3f:06:3d:bd:d6:10:6a:98:42:85:1b:20:08:09:21:44:97:58:
bb:91:e7:70:12:e2:4b:eb:ad:ae:a6:56:ed:72:b8:17:9e:f4:
8d:0f:f8:53:0e:2f:70:4a:ea:e8:7d:94:6d:72:a7:24:7d:27:
ef:83:b7:a7:82:37:e7:de:1b:2c:c3:b2:07:b0:d6:8a:09:70:
08:fd:41:d3:83:a6:c3:05:62:38:a8:a9:04:50:46:6f:9b:ac:
24:e7:bd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:23:33 2025 by rpki-client