Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft
File: aAImjB8WbJ31GjQgRbsTLw-WyC0.mft (raw, json)
Hash identifier: QBs3LdbgNaq4YVzgSCw+CDJ6eazNRzrcCH7mwAr56w4=
Subject key identifier: 3A:1C:97:6F:0F:82:10:BD:CD:63:36:67:26:AA:FB:8C:A7:7F:E2:59
Authority key identifier: 68:02:26:8C:1F:16:6C:9D:F5:1A:34:20:45:BB:13:2F:0F:96:C8:2D
Certificate issuer: /CN=6802268c1f166c9df51a342045bb132f0f96c82d
Certificate serial: 01964F6C39396C6978BF0A83FF90CBFB55CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft
Manifest number: 0A7D
Signing time: Sat 19 Apr 2025 19:00:14 +0000
Manifest this update: Sat 19 Apr 2025 19:00:14 +0000
Manifest next update: Sun 20 Apr 2025 19:00:14 +0000
Files and hashes: 1: aAImjB8WbJ31GjQgRbsTLw-WyC0.crl (hash: 9XHejkit44JdSGWVTkYeacrorsBtC9wJR4l3XxOwqtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:39:39:6c:69:78:bf:0a:83:ff:90:cb:fb:55:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6802268c1f166c9df51a342045bb132f0f96c82d
Validity
Not Before: Apr 19 19:00:14 2025 GMT
Not After : Apr 20 19:00:14 2025 GMT
Subject: CN=3a1c976f0f8210bdcd63366726aafb8ca77fe259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:89:bb:c4:3a:57:b2:77:2a:5d:f9:bc:e4:
0a:da:24:4a:27:f0:84:f7:41:b2:14:02:2b:d7:26:
7e:3e:55:5f:86:04:a6:60:9f:4b:0f:56:48:d6:df:
b7:69:b9:b5:54:58:2b:2c:a4:d8:d7:a4:6c:e9:a9:
ee:65:80:2c:91:41:f0:53:6e:b1:7e:b9:d0:6c:3a:
79:7f:c3:5c:6f:ca:fb:44:3c:0e:0a:92:d4:7e:69:
c6:a9:dc:3c:b1:7d:ba:b0:24:55:bb:8d:e9:c8:2d:
4b:d4:aa:f2:a0:33:d9:81:d4:b2:00:ef:d7:81:58:
a7:77:ba:64:85:e9:6a:3a:a8:67:f3:3e:fd:ad:59:
a6:8d:5f:f8:c1:8d:18:3e:93:62:41:7e:b7:56:03:
88:2e:ec:7a:f1:64:fc:52:ed:a3:de:f0:62:29:06:
04:ba:a1:35:f3:16:95:de:77:b5:71:04:4f:c6:f9:
be:dc:94:47:fe:9d:32:56:3e:cb:7c:2d:6c:75:82:
f7:cc:1d:cb:ab:51:01:14:33:05:c7:3c:d9:e3:cd:
ca:e5:72:6d:41:99:56:c1:e0:22:21:b3:6a:8c:82:
53:cb:46:22:2c:4a:65:fc:59:15:63:fb:5a:c4:fc:
01:41:fc:93:00:34:a4:e1:f2:03:4d:d9:e1:2c:7d:
cd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1C:97:6F:0F:82:10:BD:CD:63:36:67:26:AA:FB:8C:A7:7F:E2:59
X509v3 Authority Key Identifier:
keyid:68:02:26:8C:1F:16:6C:9D:F5:1A:34:20:45:BB:13:2F:0F:96:C8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:26:2e:28:f4:c0:d0:df:0c:43:19:6a:6d:33:26:71:c2:e1:
9d:31:cb:ba:23:be:22:e6:6e:f4:82:6a:96:51:d4:85:1d:91:
72:db:74:98:c3:83:b2:ff:8b:03:e7:91:27:f9:5a:5b:68:76:
35:75:fb:72:a8:f0:81:b7:6a:63:13:b8:b7:d6:bb:c8:74:fa:
11:ca:ba:d1:6a:1a:4e:3e:db:b0:ed:91:4c:f2:4e:b0:62:f5:
c5:a9:9c:8b:9d:9d:d4:fd:e8:53:72:f6:8d:87:ba:43:5c:b9:
c3:dc:0d:90:26:04:82:c7:3d:0b:0a:34:2d:c4:ca:63:26:06:
6a:85:a8:89:2c:15:ec:71:5d:75:3f:54:b3:57:4c:8f:48:96:
7a:ea:f3:d0:bf:a2:7c:75:58:b4:b3:46:b6:81:3a:5b:9b:d0:
b8:ca:a2:1e:8d:0a:7d:c1:46:80:31:32:2d:4c:1a:1d:42:73:
43:4b:76:b9:0a:d2:86:35:8f:b4:6b:9d:92:e7:5a:44:12:d6:
e4:ac:01:54:49:52:81:1d:f2:4f:c8:c6:06:60:3c:a5:78:24:
23:5f:5b:05:76:65:ba:25:cd:8a:eb:20:7a:f6:67:54:90:a7:
ba:d1:a4:01:43:b9:27:68:89:bc:e5:92:e4:1f:e5:22:4b:c9:
3b:d4:ba:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:19:08 2025 by rpki-client