Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
File: aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft (raw, json)
Hash identifier: P6ZvGeyVrrDLBVf9eLS8FRxJ5ARFEgteM/saL6Cs2t4=
Subject key identifier: 85:3E:98:60:F3:5C:23:D7:6F:EA:60:65:00:2A:C6:F0:6F:74:63:A8
Authority key identifier: 69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
Certificate issuer: /CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Certificate serial: 01964A0EEECC7EEDD7E7AFD23D5015A68909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
Manifest number: 0C0C
Signing time: Fri 18 Apr 2025 18:00:14 +0000
Manifest this update: Fri 18 Apr 2025 18:00:14 +0000
Manifest next update: Sat 19 Apr 2025 18:00:14 +0000
Files and hashes: 1: aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl (hash: t6CQ6mjMtamMFHAK5g7Gku1h6u9pEF1uVICNTtlYcwU=)
2: jT8P4HyIvKh8r7FQFBaidUndh0Q.roa (hash: Wroxjw87hFNcZdv8/bJmsCuX0IjtBBcn8Xp1138BSK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0e:ee:cc:7e:ed:d7:e7:af:d2:3d:50:15:a6:89:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Validity
Not Before: Apr 18 18:00:14 2025 GMT
Not After : Apr 19 18:00:14 2025 GMT
Subject: CN=853e9860f35c23d76fea6065002ac6f06f7463a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:1a:d2:dc:a2:3a:02:d2:1e:03:51:3c:5d:
f9:bd:97:a6:71:98:d4:26:00:a8:f9:5f:52:f2:24:
f6:93:d9:8d:15:e2:6d:da:93:7a:af:25:47:c8:c5:
9c:89:a6:bd:5b:1f:fb:b0:20:fc:59:6f:af:27:9e:
02:82:5c:36:10:e2:e3:d1:2a:9b:fc:2e:c4:c9:e1:
a9:4c:77:b8:8f:a0:77:74:0c:f5:69:ef:6d:a6:cf:
30:7d:3b:d3:18:42:49:c7:f7:85:e6:c5:fa:43:ff:
a7:6e:e8:3a:da:d6:cf:fc:fe:84:55:28:2e:d7:c6:
3e:4a:30:a3:e2:95:35:dc:77:40:50:e1:97:63:18:
60:9b:3e:4a:8a:e6:14:f8:b6:c7:0a:29:48:ba:78:
60:2a:04:5a:fc:63:49:a6:3c:76:56:70:47:c8:e8:
9f:49:34:b0:20:c3:95:15:05:ff:9f:54:08:c1:9a:
66:c1:5c:7c:24:07:6d:80:07:95:0f:59:f8:5b:20:
36:04:41:fc:7c:1b:a2:1f:ca:ca:0e:cd:ec:90:09:
c7:66:a6:98:3f:18:ef:ab:17:a9:f7:12:de:b6:72:
e4:a6:da:e4:92:9d:a9:5d:dc:63:37:78:89:04:82:
97:ef:59:b9:d4:79:50:3a:01:da:96:81:ea:54:f6:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3E:98:60:F3:5C:23:D7:6F:EA:60:65:00:2A:C6:F0:6F:74:63:A8
X509v3 Authority Key Identifier:
keyid:69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:77:70:3b:b6:f9:76:2b:4d:a7:fe:aa:8d:36:59:9c:21:ef:
39:54:d5:eb:43:58:0d:88:3d:3c:7c:df:d1:e3:d9:6d:b0:63:
ea:aa:76:e0:88:d3:56:23:3e:20:5a:78:fb:00:56:93:ad:2e:
03:f9:46:3a:b5:56:34:dc:d4:44:20:8c:ef:87:9a:55:44:c8:
2b:20:b7:0f:72:57:16:4c:f9:7d:8b:03:88:20:29:87:3b:25:
19:e4:d2:2f:50:6b:b8:4d:71:38:f5:a7:54:df:1f:de:b8:75:
10:ba:05:bb:90:d4:b4:dd:40:b2:2b:64:d9:8f:61:b6:83:a2:
75:b9:c1:f3:d0:fc:b4:3d:59:5f:9c:ee:8e:bb:dc:a9:72:9d:
3f:90:2a:bc:d5:d0:43:f2:d6:6f:f9:03:3e:97:3c:6a:4d:84:
e7:4b:2e:86:b3:e8:37:21:34:89:e9:c9:d0:7e:c0:df:91:d5:
1e:c5:bd:93:e0:cf:d2:c0:5f:9f:ac:14:43:6c:c9:55:ef:4a:
5e:26:aa:27:f4:25:c4:72:19:cd:93:f4:d4:ff:e3:76:b4:e4:
91:13:a7:6a:a7:0b:96:0c:90:8f:ab:1d:b7:ac:41:f8:c9:e5:
ed:bd:dc:98:bf:97:c3:5e:9a:4e:47:31:63:09:77:8c:14:78:
80:1a:7c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:17:45 2025 by rpki-client