Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
File: aYfUeTXhE31URCbbUojhKpwCWsI.mft (raw, json)
Hash identifier: aPna1ta5p6lLfWchKhmPam8HO//QbH/0j3kJ7MS+h94=
Subject key identifier: FE:D9:93:A8:9A:27:CD:62:A5:20:7F:49:8A:76:A8:C8:11:09:2B:32
Authority key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
Certificate issuer: /CN=6987d47935e1137d544426db5288e12a9c025ac2
Certificate serial: 019613C5DB4D5DBFDF889FDC9958A32719EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
Manifest number: 0CA1
Signing time: Tue 08 Apr 2025 05:00:55 +0000
Manifest this update: Tue 08 Apr 2025 05:00:55 +0000
Manifest next update: Wed 09 Apr 2025 05:00:55 +0000
Files and hashes: 1: aYfUeTXhE31URCbbUojhKpwCWsI.crl (hash: FJ7/xsTKeNgXEqmtj+H9YZB27GXpSlaj6ms1w2hI7GA=)
2: u5cM_QOizpw-qJJPqONMvmbrpo8.roa (hash: GZfhlRyj3hdFyyCNQhpcV7zv1K17zHPhBmiPFi/AntI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:c5:db:4d:5d:bf:df:88:9f:dc:99:58:a3:27:19:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6987d47935e1137d544426db5288e12a9c025ac2
Validity
Not Before: Apr 8 05:00:55 2025 GMT
Not After : Apr 9 05:00:55 2025 GMT
Subject: CN=fed993a89a27cd62a5207f498a76a8c811092b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bd:a5:c8:4f:1f:b0:5d:d7:13:dc:4e:41:58:
00:3d:c0:e0:04:a3:23:0d:33:18:53:1a:71:8a:4c:
23:d9:b2:0f:00:cd:e2:b7:08:75:15:69:ab:19:58:
57:9f:7a:c4:3e:9f:b9:38:58:35:8d:31:1c:8d:cf:
05:b8:4f:f7:aa:6a:3d:32:14:20:6a:cf:91:7e:ef:
4d:69:db:7a:31:37:f6:a5:85:8b:c1:55:83:a5:c8:
3d:a2:49:c8:eb:8c:9a:1f:23:22:9b:d7:5f:22:f5:
e4:49:0b:64:b9:86:05:43:96:97:d3:42:eb:a7:13:
bd:c4:cc:c0:32:a1:b5:9a:ec:0e:21:eb:cf:af:71:
79:7b:10:a2:8f:d3:92:79:cc:69:8b:10:fb:43:69:
ea:6f:b5:98:3b:c2:00:75:5b:40:c9:48:21:19:16:
c5:fc:4f:6d:8b:0b:b6:97:a5:b8:aa:4f:98:53:c2:
f7:d8:cb:79:f8:20:55:be:bf:6d:f5:67:14:01:49:
b3:d7:43:b3:aa:b0:d5:f3:36:ad:cf:24:4f:4d:07:
22:ad:74:05:22:7c:0b:36:53:6c:8b:61:ed:e5:0c:
96:5d:23:a6:0c:50:3d:62:04:3e:50:44:41:48:d0:
86:47:63:72:fe:a2:ac:b2:a4:60:30:7d:0a:bf:d5:
62:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D9:93:A8:9A:27:CD:62:A5:20:7F:49:8A:76:A8:C8:11:09:2B:32
X509v3 Authority Key Identifier:
keyid:69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:49:41:d4:db:78:51:70:98:87:f3:eb:09:01:b6:c5:ae:60:
e9:d5:8d:81:65:6c:b1:8c:f3:db:de:ef:b8:04:44:6d:40:20:
16:97:2f:c7:0a:32:0a:60:10:b7:9f:5f:ff:2c:22:07:42:cc:
5e:b5:03:03:e8:7c:b0:d3:8f:6e:ca:10:0c:05:25:db:c7:99:
7f:68:a1:80:5e:3f:cb:84:74:6a:33:e3:ff:7b:da:68:91:8f:
3a:47:75:ed:7b:65:87:03:19:c4:81:df:5c:a1:f9:ce:c3:34:
f1:6a:99:77:07:92:52:d5:23:ff:f2:9b:79:a5:33:9c:9e:16:
70:16:bd:f3:c0:0a:5f:36:94:7f:a7:c2:1a:61:bb:9c:82:c1:
3a:d6:d2:3e:59:e3:35:83:07:39:b7:6e:a3:eb:1a:ba:7f:87:
5a:6a:98:dd:e5:1f:59:b9:b8:fc:3c:31:95:6d:04:c9:71:b2:
cb:d3:0a:89:fd:a7:dd:93:17:92:3b:2c:cf:8d:0a:94:d5:4c:
04:f1:57:39:ed:53:e7:7b:ae:a2:0e:c9:3f:0f:70:eb:fc:bf:
60:01:95:a6:75:c2:29:28:c8:e2:ab:a1:ae:23:de:91:86:a9:
72:9f:22:8e:b1:7b:1a:73:c8:48:e1:d4:6c:83:26:c8:1f:fb:
14:24:a0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:09:31 2025 by rpki-client