Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
File: aeoVk9ahKCtuhMLTMlEeoqmahCA.mft (raw, json)
Hash identifier: Rog8DwTgOlo2EVOuSSls5xMHdH2D6W8nI85bQA5YePs=
Subject key identifier: B4:F9:96:88:3B:95:E2:4A:43:09:2F:18:F0:98:29:BF:86:D1:DB:B9
Authority key identifier: 69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20
Certificate issuer: /CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
Certificate serial: 01965B70EC385C0D4AFE359C765B6DBDE48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
Manifest number: 070A
Signing time: Tue 22 Apr 2025 03:00:49 +0000
Manifest this update: Tue 22 Apr 2025 03:00:49 +0000
Manifest next update: Wed 23 Apr 2025 03:00:49 +0000
Files and hashes: 1: aeoVk9ahKCtuhMLTMlEeoqmahCA.crl (hash: vUUDyz1xNaE6Xz+7JqdLFRgoZerS6OMXtIvDMXtEgpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:ec:38:5c:0d:4a:fe:35:9c:76:5b:6d:bd:e4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
Validity
Not Before: Apr 22 03:00:49 2025 GMT
Not After : Apr 23 03:00:49 2025 GMT
Subject: CN=b4f996883b95e24a43092f18f09829bf86d1dbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:52:f2:c3:85:87:e4:5f:ca:53:e6:55:69:
15:98:b8:c1:91:27:f7:25:6c:a4:f5:86:6b:85:c5:
4f:f7:72:4e:fa:6b:50:5c:e5:7f:02:3d:af:5a:00:
97:12:27:1b:e8:b5:7d:f1:c1:86:56:9e:28:38:d6:
76:1a:f8:8a:5f:b3:1b:d9:44:c6:09:1b:83:2d:2d:
39:08:e9:a1:2a:f4:c2:55:55:a4:f5:64:c0:94:ac:
dd:9c:25:70:90:95:cf:51:9e:65:4a:f8:3b:3d:c1:
44:54:4d:3b:fa:23:77:15:d7:ba:29:75:b4:28:05:
a3:eb:be:e8:2d:f3:a0:04:59:a8:7b:7b:56:41:86:
ed:b0:4f:dd:eb:9c:53:55:74:bd:a7:b6:92:d8:49:
a6:e0:7b:73:4f:96:7b:c9:c8:5f:d6:4e:9e:56:0a:
0d:0f:c7:4a:c8:37:0f:08:8f:23:7f:17:3f:e1:8b:
85:4c:c3:f7:3f:74:ed:e1:07:25:15:84:eb:43:bb:
7a:d3:19:7c:e6:0c:e0:17:ed:42:38:db:a6:a2:b7:
de:f1:dd:a9:b0:68:91:1c:cc:db:b9:26:08:e2:87:
6f:a7:ed:54:d6:28:02:80:ee:07:49:36:c4:63:62:
3b:cb:49:37:d6:66:89:60:a8:56:4c:e2:8e:7f:15:
45:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F9:96:88:3B:95:E2:4A:43:09:2F:18:F0:98:29:BF:86:D1:DB:B9
X509v3 Authority Key Identifier:
keyid:69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:34:4f:96:1f:11:7b:2c:c3:45:d4:ed:5b:ab:8d:03:bc:aa:
9a:94:cc:8e:15:89:d7:32:0c:f5:98:6e:68:76:8e:d0:61:c9:
31:2a:ae:0b:7f:f1:55:e2:e6:05:ad:b5:4b:9c:a3:91:eb:9a:
22:f6:66:d9:c7:62:f1:38:de:81:9f:1f:0e:e8:eb:c4:29:28:
5e:d7:d4:32:2a:bb:49:7d:e6:40:67:1d:ad:e9:d4:52:34:24:
5d:a4:6d:bb:22:c0:af:04:b1:f0:88:d0:6e:97:18:32:87:2f:
3b:10:5b:72:b2:7b:e9:cf:e2:30:4e:1c:8d:db:a7:1c:db:96:
bc:bf:9c:62:56:cc:99:cb:e5:11:35:55:27:eb:0d:b7:fe:0c:
b6:f8:40:38:52:50:fb:5e:be:3e:6b:24:fe:98:a0:c9:3b:fb:
57:3f:23:b2:cd:44:e4:3f:1b:34:a2:75:5b:55:37:5f:80:5f:
9a:c0:52:e3:b3:5b:e4:19:64:32:7f:8b:59:e4:ec:e9:0e:95:
c1:54:25:aa:40:b0:5a:ce:77:de:97:9e:f7:e8:3e:4c:49:b6:
b5:1b:c3:59:26:62:37:5e:c6:9e:62:57:f0:9e:d3:b2:c0:fb:
90:54:8a:29:d1:ad:fe:21:a5:45:74:ef:8e:7c:8e:c5:3f:90:
60:a7:f4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:20:08 2025 by rpki-client