Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
File: aWZ-UauBVWetZ8u10biJY4Nfqfc.mft (raw, json)
Hash identifier: z1RJhYnjPharP4g4BmjMArxY4e1FzNk6YOE5qW4goKk=
Subject key identifier: 3B:AE:98:15:D5:3D:E2:22:39:02:09:A9:D0:99:49:D6:0D:91:3A:17
Authority key identifier: 69:66:7E:51:AB:81:55:67:AD:67:CB:B5:D1:B8:89:63:83:5F:A9:F7
Certificate issuer: /CN=69667e51ab815567ad67cbb5d1b88963835fa9f7
Certificate serial: 01965B035E5F67BD4F522659A57FFFBD0904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
Manifest number: 0C61
Signing time: Tue 22 Apr 2025 01:01:09 +0000
Manifest this update: Tue 22 Apr 2025 01:01:09 +0000
Manifest next update: Wed 23 Apr 2025 01:01:09 +0000
Files and hashes: 1: aWZ-UauBVWetZ8u10biJY4Nfqfc.crl (hash: 6XhYADfTORbg86GAg27P6xDhb+cqt3uKOE3mp3DLPiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:5e:5f:67:bd:4f:52:26:59:a5:7f:ff:bd:09:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69667e51ab815567ad67cbb5d1b88963835fa9f7
Validity
Not Before: Apr 22 01:01:09 2025 GMT
Not After : Apr 23 01:01:09 2025 GMT
Subject: CN=3bae9815d53de222390209a9d09949d60d913a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d2:80:9c:5d:bc:40:a4:0f:a8:02:83:2e:17:
a1:d9:c7:18:42:74:07:cd:7d:6e:b6:32:b1:10:54:
6b:1b:f4:ab:31:39:40:7d:a2:40:ee:6a:4f:09:13:
0d:a5:36:a8:57:84:71:b6:fb:34:9e:4e:4c:2d:1d:
60:a2:7c:9d:8f:f5:4e:f8:9f:e1:30:88:e4:16:39:
29:c5:a4:f3:99:fa:02:c2:e5:93:37:56:0e:3b:5f:
42:83:b6:89:ac:49:aa:5b:a9:89:53:ca:54:7d:79:
18:7a:e2:fc:08:94:6a:f8:7c:fb:c3:fe:6b:59:24:
cc:58:fc:c5:3c:9e:8e:c6:70:df:b4:d8:22:cb:d6:
82:e5:90:c9:2a:44:14:8b:b4:fb:45:fb:13:c0:26:
d4:df:cf:47:96:0f:7d:25:1b:37:c5:cb:26:c8:33:
43:5e:b7:40:52:0b:7a:84:04:90:09:df:ac:31:b9:
d9:79:6f:d3:af:c0:b4:47:a1:aa:9a:97:aa:0b:87:
fe:04:51:a7:54:52:ef:69:95:fd:51:60:f0:10:b7:
3c:db:57:3f:c9:fb:10:05:68:ec:b0:96:74:1a:73:
82:0b:c6:3d:2c:ba:ac:37:5d:1a:fd:20:22:df:cc:
a1:6b:a4:f9:15:98:67:ee:ed:69:f7:61:47:47:7b:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AE:98:15:D5:3D:E2:22:39:02:09:A9:D0:99:49:D6:0D:91:3A:17
X509v3 Authority Key Identifier:
keyid:69:66:7E:51:AB:81:55:67:AD:67:CB:B5:D1:B8:89:63:83:5F:A9:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b5:50:ef:15:b9:35:10:ac:3b:55:dd:7b:ef:58:78:b2:dc:
6f:ae:b2:45:fe:20:68:29:69:58:ce:7d:27:a2:17:81:06:61:
ac:d5:ac:96:3d:b7:e7:8d:e2:99:34:b7:5d:8a:07:1b:1a:19:
57:04:9e:35:23:e5:7b:e3:1b:86:3a:ef:93:a2:2c:8e:c0:84:
51:1e:12:7d:de:5a:2c:3d:f2:26:70:6a:80:5b:d4:3a:3e:5f:
5b:6d:26:8b:97:05:4f:59:91:3e:ac:4c:c2:83:b7:70:c0:a5:
0b:e1:0f:9b:7f:26:32:9c:cb:e3:96:70:cf:53:b2:60:b2:ce:
65:28:ba:1d:9a:d9:62:79:89:2b:02:0d:55:36:71:88:be:8c:
b7:86:ae:33:bd:5f:5a:52:35:69:69:a6:46:e5:78:37:17:4a:
02:ea:6d:29:6f:2a:ce:44:13:4d:f9:62:01:ac:be:b4:f7:c5:
f1:f8:c7:8a:a6:bc:09:1b:2e:10:a5:e2:c0:a5:77:e0:7f:45:
23:14:14:3c:2b:bd:26:35:6d:be:e7:59:16:c4:8e:f9:f5:f4:
ab:c2:f9:4a:84:91:e3:84:83:ef:f0:5d:f7:11:79:9c:0c:f6:
97:37:89:02:d1:53:33:ba:06:df:cd:29:cd:bc:e2:70:01:2a:
ad:72:55:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:52 2025 by rpki-client