Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
File: AlAYGVXVQR9QbrpCutueWqXdhEM.mft (raw, json)
Hash identifier: S9ICsInVtQA/qeTioHwi1G+SaXOKN/m7ES0vl4U1A8U=
Subject key identifier: 18:11:65:03:0F:FD:70:DF:8E:81:2A:C3:88:8E:37:CC:F4:B8:71:38
Authority key identifier: 02:50:18:19:55:D5:41:1F:50:6E:BA:42:BA:DB:9E:5A:A5:DD:84:43
Certificate issuer: /CN=0250181955d5411f506eba42badb9e5aa5dd8443
Certificate serial: 01964E233C5F0E170A4126EDC4D7496806F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
Manifest number: 11A6
Signing time: Sat 19 Apr 2025 13:00:54 +0000
Manifest this update: Sat 19 Apr 2025 13:00:54 +0000
Manifest next update: Sun 20 Apr 2025 13:00:54 +0000
Files and hashes: 1: AlAYGVXVQR9QbrpCutueWqXdhEM.crl (hash: 7sf48SHWUBTxMBP9vszjoGMSuqbBhVylQv0vAOW4ZxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:3c:5f:0e:17:0a:41:26:ed:c4:d7:49:68:06:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0250181955d5411f506eba42badb9e5aa5dd8443
Validity
Not Before: Apr 19 13:00:54 2025 GMT
Not After : Apr 20 13:00:54 2025 GMT
Subject: CN=181165030ffd70df8e812ac3888e37ccf4b87138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e7:28:2c:7e:67:d0:62:03:da:29:d4:f7:95:
1f:d6:b1:74:0d:83:8a:65:47:75:1c:cd:5f:ab:5f:
00:8c:bc:93:34:46:1c:c8:2b:a8:99:4c:d6:0d:23:
7c:1d:17:2b:68:bc:89:b1:b4:e9:ae:56:8a:3f:f7:
7d:53:85:06:96:ae:a3:25:7e:7e:8a:1d:47:f5:5c:
a7:3e:fe:fd:29:74:f2:da:10:a5:0c:25:6f:9d:01:
65:29:ef:43:40:72:02:fe:77:6e:33:e5:2c:9f:e6:
63:9a:7b:cb:9e:c5:4a:9f:9b:ca:d1:f5:30:fc:ac:
84:34:ed:a9:2c:8e:4f:2d:1f:f1:db:4d:6e:19:66:
59:a1:75:88:83:0e:cf:b7:a3:07:1b:22:83:18:fa:
b6:83:08:3e:77:1c:06:18:01:cf:6a:97:18:e0:49:
0e:e1:88:da:40:45:5b:75:7c:12:2d:a4:16:4c:4c:
0e:26:76:03:8c:67:98:58:a9:8c:67:42:c7:eb:91:
dd:48:ea:39:60:b1:19:84:9d:4d:fa:cc:d4:65:60:
57:43:e8:7b:99:ec:b7:ed:41:5c:a9:ef:af:7f:b4:
85:b7:9d:89:52:96:d8:a4:a7:75:e7:bd:df:e9:fc:
56:58:11:38:fd:a9:28:e5:34:92:dc:ae:c1:70:6d:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:11:65:03:0F:FD:70:DF:8E:81:2A:C3:88:8E:37:CC:F4:B8:71:38
X509v3 Authority Key Identifier:
keyid:02:50:18:19:55:D5:41:1F:50:6E:BA:42:BA:DB:9E:5A:A5:DD:84:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:bd:8a:ae:53:b8:bd:c5:34:d1:84:57:5c:95:9e:f4:c0:61:
ad:4a:1c:af:44:81:40:ef:94:cb:cb:93:e3:a1:36:f7:e0:48:
56:67:3c:65:be:e4:99:6d:2c:d2:6d:24:14:72:59:15:b3:da:
25:a3:90:d3:ef:2c:92:45:83:6f:1a:de:6a:b4:ee:1e:b8:db:
e2:b2:9c:4b:43:b3:75:ab:55:33:59:ec:3f:16:da:d1:a3:99:
ad:51:bb:09:7d:0c:ed:a5:9d:be:37:92:32:53:89:b2:37:82:
e7:66:52:10:7a:56:1a:3b:ea:d1:45:d6:22:ac:78:24:21:12:
8f:b5:a0:6f:35:c8:5d:a3:df:29:bc:d0:aa:dd:fd:e8:e9:1e:
7c:42:6d:9e:82:b5:c5:3c:b8:25:0e:ed:80:00:6f:08:1b:39:
0b:92:80:b3:12:fc:86:3d:fd:c2:54:f0:cc:97:1b:50:d0:71:
96:8a:0f:31:1a:1b:28:25:f1:d7:d4:83:84:ec:50:89:cf:f4:
b3:46:6f:f0:f1:4b:17:b6:c8:07:16:2b:35:1d:32:23:2b:90:
45:60:80:c4:d6:66:26:7e:d8:a4:bd:a3:d9:7e:67:f5:fc:aa:
93:44:6c:51:8f:07:f5:a8:29:0c:ea:49:b2:0a:25:a0:69:37:
ac:2d:ed:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:06 2025 by rpki-client