Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
File: aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json)
Hash identifier: 40VEsCT6IViFov0fTJe2vctnnN7o9G6V1zNE94MDKUs=
Subject key identifier: 1C:E9:9C:42:34:9A:FE:0C:4D:9B:AE:25:A8:21:FA:5C:1F:A8:AE:9B
Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
Certificate issuer: /CN=69159820dd718004fb15c85b270796cb4e84a4ea
Certificate serial: 01965537A3EC53EB93C663563DE6C6E9CC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
Manifest number: 25
Signing time: Sun 20 Apr 2025 22:00:31 +0000
Manifest this update: Sun 20 Apr 2025 22:00:31 +0000
Manifest next update: Mon 21 Apr 2025 22:00:31 +0000
Files and hashes: 1: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: 4w+zVjj41NdRCGFVumBA5DwJG4l/hV0/5oAcH0e4mCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:a3:ec:53:eb:93:c6:63:56:3d:e6:c6:e9:cc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea
Validity
Not Before: Apr 20 22:00:31 2025 GMT
Not After : Apr 21 22:00:31 2025 GMT
Subject: CN=1ce99c42349afe0c4d9bae25a821fa5c1fa8ae9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:4e:d4:e6:53:85:c0:dd:85:f9:f9:94:9c:
14:dd:d3:c6:35:92:29:85:2b:ff:fb:f5:8c:fa:38:
cd:7a:5b:50:56:fc:2f:f1:fc:71:68:de:6a:ab:9f:
14:bc:3b:8e:0f:6b:c8:f8:3e:28:6e:f2:45:39:37:
bb:18:91:fe:e5:61:41:4e:d4:7d:01:9d:3d:d2:9b:
91:96:ae:2f:77:a6:ed:20:21:f0:3d:15:5c:cd:9f:
e3:67:a8:f5:06:df:b3:97:23:78:aa:82:ce:17:84:
35:b1:57:21:97:3c:9a:5e:83:5e:d4:81:7e:2d:b8:
2b:c9:fa:c5:02:32:4d:05:ea:d8:0b:fe:6e:d9:d5:
bb:e1:63:ff:0c:f7:e2:89:a7:2c:92:86:34:46:b1:
7f:80:f2:a7:03:2c:06:4b:f6:5b:68:f9:c3:09:c0:
03:f2:81:34:b4:21:52:7d:cc:3a:22:de:d5:44:cd:
a8:54:d7:65:00:5a:dd:f6:9d:03:4a:41:29:a9:b8:
e6:e5:29:2c:27:08:22:2e:f3:59:e9:76:ad:11:97:
48:60:fe:ba:7b:b1:63:46:2c:13:c2:d7:de:8c:38:
5e:7d:ca:8f:62:01:83:1d:db:15:d7:d3:10:52:67:
b9:b4:9e:a9:c2:a8:26:27:11:43:da:bb:49:20:b7:
f4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E9:9C:42:34:9A:FE:0C:4D:9B:AE:25:A8:21:FA:5C:1F:A8:AE:9B
X509v3 Authority Key Identifier:
keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a9:6e:02:fa:70:69:31:ec:b8:2a:bf:60:57:3f:19:d4:25:
2e:c7:60:30:53:37:46:af:57:2a:56:15:d7:02:a4:2e:87:7f:
5b:43:a9:69:b1:9c:4d:92:e3:9d:b9:4d:d3:21:e5:bf:e9:bd:
a8:24:3f:7c:6b:99:50:e3:4e:da:c4:bc:2c:93:a7:87:32:ce:
2d:b9:aa:62:f0:b4:54:0b:bf:a2:6a:2d:b7:10:b7:85:fc:09:
95:fc:4f:51:ca:f0:fc:37:dc:4e:c6:b9:b3:98:e7:0d:19:c5:
2f:07:23:90:13:ad:e0:26:86:0a:ab:82:b4:a6:20:88:cc:ac:
49:08:1d:47:c5:d8:07:d7:22:23:53:0e:35:21:a1:c5:f0:6f:
2f:10:91:f3:0c:60:42:fc:cf:f4:a0:00:6a:34:83:fa:c0:92:
c6:e7:d9:8f:0e:32:4e:49:aa:cf:f1:3d:ad:e5:de:ee:f8:92:
d7:c0:75:a7:f0:30:32:f8:1a:69:3c:87:92:23:9d:e3:32:54:
3e:05:2e:23:38:1f:de:31:13:e9:c2:87:d7:8c:89:8a:b7:80:
37:d8:e0:75:55:b5:51:0d:16:1f:d1:53:21:55:a5:16:4c:a8:
07:f2:fa:0e:e8:67:08:d4:c4:8f:4e:0b:d1:1f:86:0f:c5:8d:
ab:11:d3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:36:10 2025 by rpki-client