Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
File: aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json)
Hash identifier: R6V/GzmGvCt3dq+Rfdvp+EE4XQ2sDPOBdbrfGPINMa8=
Subject key identifier: 9E:5B:CD:69:6D:6C:F9:FE:42:81:DE:7C:71:97:DB:D2:CC:13:17:51
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 01965492EDC1350A254D254891DAC95957E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
Manifest number: 096A
Signing time: Sun 20 Apr 2025 19:00:37 +0000
Manifest this update: Sun 20 Apr 2025 19:00:37 +0000
Manifest next update: Mon 21 Apr 2025 19:00:37 +0000
Files and hashes: 1: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: 19WG2PRs5jZjuM8IZwcVG9/nvpPHfv8gs2BFotK0S9c=)
2: sO327XoAur1DplfvgQUPrjYRerA.roa (hash: Y49ly/oM+VJ0V39d5VwjbL8ksFq63YJHHzGwktv4Jrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:ed:c1:35:0a:25:4d:25:48:91:da:c9:59:57:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Apr 20 19:00:37 2025 GMT
Not After : Apr 21 19:00:37 2025 GMT
Subject: CN=9e5bcd696d6cf9fe4281de7c7197dbd2cc131751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7d:34:89:ca:9d:74:cb:41:5a:c8:8b:54:9f:
21:d0:51:5d:52:76:f2:d5:f0:95:14:8d:58:f3:5b:
c4:36:94:df:1e:b2:b6:ed:76:48:34:af:43:3e:c8:
80:ba:62:79:f1:8b:45:c3:0a:96:b4:48:1d:ae:03:
14:8d:9f:c2:c4:d0:28:f3:13:c5:38:7e:56:7c:a7:
3d:12:8c:d4:54:c3:75:44:08:2b:d4:c9:71:88:18:
54:38:37:01:3e:e9:36:66:c9:67:65:f0:5e:54:e0:
b4:07:29:a0:da:44:83:cb:c0:c1:e7:4e:ed:2a:d1:
85:5f:e7:86:4b:90:17:b8:de:4a:b9:cf:8f:da:c6:
e4:8f:6a:9a:02:e8:36:1a:e1:fd:2b:ee:73:f6:5d:
4b:69:3e:48:21:93:03:8e:33:4a:3c:e4:52:c3:d3:
f8:3d:dd:e1:4e:f3:f5:a8:5d:e2:c0:ec:b1:cf:26:
c2:be:95:1c:e8:61:4e:18:a0:71:06:5f:a5:0f:89:
44:f9:c1:da:d3:b6:11:a4:a9:6b:d8:62:d8:cd:b1:
9c:e9:50:35:b8:c1:b1:43:8a:43:71:a2:64:03:9e:
ec:02:f4:ac:17:06:ff:a7:5f:f6:13:19:be:dc:7e:
29:bb:e1:7a:c4:94:12:d8:b7:de:97:56:2c:b7:90:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5B:CD:69:6D:6C:F9:FE:42:81:DE:7C:71:97:DB:D2:CC:13:17:51
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:84:b3:10:d9:20:24:97:3a:62:5c:ee:d7:8e:d8:87:0c:7f:
d7:31:0a:f6:f0:74:4f:25:de:be:2d:f9:d1:3c:41:f0:03:89:
6a:5f:a0:de:c5:ae:17:a4:c3:8c:74:e1:6f:c1:8a:67:f6:d5:
40:ea:02:34:4b:c3:7c:a8:37:0b:32:f1:c7:aa:84:63:de:83:
fa:4b:43:a3:59:f3:e0:bb:e6:2c:83:b8:1c:a8:46:6d:95:be:
fe:53:75:57:e7:2c:ba:ff:81:eb:e0:47:20:d4:9d:a6:63:d8:
8e:eb:fa:25:f0:14:52:b2:75:0a:29:3e:59:7c:22:ce:36:e4:
50:c1:58:2b:d9:88:68:17:c8:79:17:b6:3f:e7:c7:1e:96:d8:
99:2e:9c:53:7a:f4:3d:d3:6e:31:3d:3d:45:e5:b9:08:58:8a:
fa:29:1c:4d:3c:08:3d:97:f6:58:d4:f3:77:df:99:9b:35:51:
85:b7:85:fb:df:ac:66:71:b2:eb:22:13:58:7c:67:e1:c1:78:
cb:bc:a8:c4:df:40:82:8b:ce:6e:9a:18:5d:3a:eb:24:a7:24:
0a:7e:6b:97:7d:45:69:21:ea:bc:39:d3:00:64:c8:4f:7d:d6:
f2:0a:1b:5a:e9:f0:e4:3a:68:18:52:42:c7:af:12:9d:07:07:
7a:98:83:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:58:32 2025 by rpki-client