Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
File: aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft (raw, json)
Hash identifier: 8WsW3ONcvM2GECqDwezNKn+5MSr8oMBgZzzXzLyVk7g=
Subject key identifier: C2:11:1A:37:33:7B:00:63:6B:47:23:10:7C:C7:CF:D8:C1:C4:1E:3F
Authority key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
Certificate issuer: /CN=699710a1693710ac835f0b6745f90d2d680a1200
Certificate serial: 01965CB9FD9DD533C8735792033F18335283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
Manifest number: 1494
Signing time: Tue 22 Apr 2025 09:00:15 +0000
Manifest this update: Tue 22 Apr 2025 09:00:15 +0000
Manifest next update: Wed 23 Apr 2025 09:00:15 +0000
Files and hashes: 1: aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl (hash: MCzh0pp2MHC4tMqc4ej0TXaAEew0mVNHdtkeaCgfo/U=)
2: koGXGlmTeestynS-D79F1iRgKe8.roa (hash: t/wGg6Ba4t68swMex8wPDhVXcBtDTQUAFrp4xf0H+oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:b9:fd:9d:d5:33:c8:73:57:92:03:3f:18:33:52:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699710a1693710ac835f0b6745f90d2d680a1200
Validity
Not Before: Apr 22 09:00:15 2025 GMT
Not After : Apr 23 09:00:15 2025 GMT
Subject: CN=c2111a37337b00636b4723107cc7cfd8c1c41e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fc:10:2e:dd:57:cc:ea:38:75:31:a6:7f:b4:
31:13:24:3e:7c:9c:39:01:31:71:55:4a:0a:64:f3:
99:3f:e6:0a:30:f7:67:85:7f:2a:bf:79:99:78:85:
c7:d9:27:9c:c2:ba:84:de:2f:83:91:6e:0e:c6:16:
84:c2:af:6e:0f:9e:4e:7d:c7:c3:8d:bf:c9:7c:c2:
d6:16:98:a3:5f:29:c9:5b:c4:0f:e3:fe:8d:b6:8e:
b5:13:d1:66:ee:f0:e8:27:59:23:18:23:6f:87:12:
c9:8e:7c:00:1d:3e:f4:c0:b8:26:87:c7:08:ad:96:
90:db:1c:93:ba:05:97:ba:88:55:9f:26:68:1d:79:
a3:11:eb:5f:75:5d:91:33:87:27:57:56:a8:e2:3d:
8d:b0:e2:5a:d5:68:01:14:6f:3f:5a:91:f9:d8:d1:
2d:76:25:74:fb:e6:26:0e:a2:a6:11:41:d7:49:d8:
9f:9b:d4:7b:bb:ae:31:74:30:9b:90:7d:95:f0:71:
c6:5b:1d:cd:ad:33:28:29:d4:e1:51:89:f1:98:9c:
72:fd:88:20:d7:09:bf:40:dc:25:48:af:5e:89:dc:
1c:c2:76:83:07:50:de:3b:54:8b:f8:02:25:5c:d6:
25:13:26:15:89:d7:78:04:a3:cb:c8:79:9c:b3:a0:
bb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:11:1A:37:33:7B:00:63:6B:47:23:10:7C:C7:CF:D8:C1:C4:1E:3F
X509v3 Authority Key Identifier:
keyid:69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:24:62:4d:8d:e5:97:83:62:c8:53:0e:fb:a4:66:4d:47:44:
6f:c5:e6:67:d5:78:0d:8a:b9:89:7e:74:8a:ea:28:73:af:cd:
cf:bf:47:2f:81:3f:d1:a9:f9:93:3e:ae:90:b6:d0:a5:5c:51:
8d:c0:2b:34:62:e6:87:6a:5e:3d:8d:8f:6e:1f:9c:aa:a1:3a:
75:a9:38:11:94:2e:c5:54:9e:07:bd:6f:cb:70:5d:b7:30:d0:
4d:13:8a:f7:b9:7d:ad:89:ac:49:76:2c:4b:3d:ec:7e:86:61:
78:94:88:35:1c:68:88:32:8e:8f:ed:34:57:53:c3:40:c8:4b:
cc:48:58:99:e1:45:3c:de:e6:ae:d8:28:77:aa:2c:69:96:c7:
60:1d:da:27:fe:27:4e:d8:27:44:ae:e8:8a:5d:49:94:ca:cb:
f2:8d:eb:4b:42:60:06:e9:18:ea:4f:51:22:20:f5:61:21:15:
99:ce:85:15:d1:d9:00:10:1c:d0:f8:d0:4b:42:91:21:59:2e:
0f:dc:ef:b3:07:c2:46:ea:f5:58:01:af:42:54:8a:5a:99:87:
24:04:ef:cc:19:8d:6d:48:d1:1c:7f:a4:a8:c2:90:25:46:99:
b5:a3:8a:45:ce:83:a6:4a:60:45:3b:dc:9c:fc:4c:8c:a5:03:
86:ca:9c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:24:20 2025 by rpki-client