Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
File: mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft (raw, json)
Hash identifier: 38xhrlqlLIx3gLJF6wIJZ1TxZUk6KQgy4//oSU7PXxo=
Subject key identifier: A2:BA:2C:FC:96:38:94:6B:C0:FE:92:D0:93:1E:8D:3D:C2:37:05:6F
Authority key identifier: 9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8
Certificate issuer: /CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8
Certificate serial: 01965B70603789E760500B574ABB9AF23946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
Manifest number: 3C
Signing time: Tue 22 Apr 2025 03:00:13 +0000
Manifest this update: Tue 22 Apr 2025 03:00:13 +0000
Manifest next update: Wed 23 Apr 2025 03:00:13 +0000
Files and hashes: 1: W8iTYjU2Evc2p5yDOFlKPLpAZr0.roa (hash: +1HDTD3+F6qn6zfwt9WbeLBT9ppZuriPW/cOhjwp96g=)
2: mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl (hash: GC4gK7g9FdjYtLBJTWHjNgs3biWwViIRDG/ymFmVMzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:60:37:89:e7:60:50:0b:57:4a:bb:9a:f2:39:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8
Validity
Not Before: Apr 22 03:00:13 2025 GMT
Not After : Apr 23 03:00:13 2025 GMT
Subject: CN=a2ba2cfc9638946bc0fe92d0931e8d3dc237056f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:c1:b1:0e:79:09:5d:54:73:79:47:2c:69:
23:21:51:39:d5:b6:ac:7e:1b:74:54:bf:93:31:97:
e0:76:08:08:38:c4:21:44:3f:7b:62:0a:1a:b5:c6:
32:e1:6d:f0:c6:d9:fa:98:bb:3b:6e:ea:07:56:df:
ef:10:f8:2e:67:c5:29:1e:ce:10:b8:e1:86:cf:82:
64:fd:52:67:51:b8:f7:f9:f7:63:2b:3b:17:c6:82:
ca:ed:bb:bf:1d:64:cc:29:9c:5a:61:6b:71:cd:f3:
7a:4f:57:94:94:ef:dd:bb:e7:9f:cc:54:e6:b1:b2:
d5:bf:b6:cb:c7:9a:b4:26:81:57:55:2e:8b:be:23:
0e:9c:d4:5d:55:1b:1b:3a:a2:7c:59:a9:b4:53:e5:
c7:64:b4:5f:dc:9a:be:bf:af:6e:c4:98:d5:32:79:
5c:8b:c7:7f:97:2d:20:e6:26:e6:c6:f3:9e:66:d7:
0a:12:e3:c6:67:ba:36:63:2a:80:cc:37:f7:01:a5:
96:82:fb:f2:d8:94:45:8f:3b:2e:10:a5:6b:eb:35:
f7:a6:db:15:16:ff:7c:04:70:e7:83:e3:20:ce:47:
5c:13:f8:6f:53:eb:0d:c7:16:64:28:3b:a9:2c:cf:
89:60:68:69:09:fc:9f:14:8c:a7:d3:49:2d:fb:a4:
33:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BA:2C:FC:96:38:94:6B:C0:FE:92:D0:93:1E:8D:3D:C2:37:05:6F
X509v3 Authority Key Identifier:
keyid:9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:16:7f:e9:fa:f5:66:47:91:4e:4e:a0:06:9a:ae:b8:7d:e0:
78:54:35:5e:b0:da:a9:4a:2a:69:2e:b3:a1:77:41:a3:d9:a2:
cc:4a:59:7f:c0:7e:19:a1:07:c9:8d:5d:c3:22:ed:ab:e9:96:
db:9c:b5:0c:41:c3:15:83:12:44:33:8a:2f:37:e2:61:f8:9d:
ca:e0:d2:96:0c:90:d6:d4:42:6b:fb:d0:10:58:26:71:a1:bf:
4c:e6:4f:a3:d0:2c:37:2d:c7:d4:49:b2:32:aa:6c:be:43:c8:
78:f1:d7:d1:74:39:3e:03:c1:8a:44:ce:35:8d:b0:ba:8f:cf:
56:3d:65:05:e4:64:4d:8d:a7:2e:7f:7b:74:59:df:9b:bb:96:
96:32:bf:29:36:fe:b1:5e:84:fd:6e:40:9c:12:34:8b:4c:f4:
4f:d2:55:27:7b:3a:37:e1:21:b5:2a:76:9a:b6:42:e8:90:38:
e5:80:2a:35:10:2f:61:d0:bf:f9:27:4e:83:d7:1a:fc:78:ee:
1c:6b:5e:bd:48:64:92:70:af:c7:cb:30:ea:38:d4:77:bd:54:
c6:a6:c8:0c:ac:88:f3:60:27:6b:61:1f:8b:93:07:19:e9:b6:
d6:a2:9c:74:74:fd:e6:da:02:47:3d:57:99:76:80:75:8f:a4:
56:21:12:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:05:21 2025 by rpki-client