Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
File: aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft (raw, json)
Hash identifier: BmWr2pA5sMXtkW+YC20AKcJ5Zdkp2298YSWMkTwbLW0=
Subject key identifier: BA:5A:E1:0B:BA:2A:39:E0:44:A7:13:7C:ED:A9:DB:07:A6:2D:25:E0
Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
Certificate issuer: /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Certificate serial: 019612EA5957819C35B743D69B161FACE5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
Manifest number: 0202
Signing time: Tue 08 Apr 2025 01:01:10 +0000
Manifest this update: Tue 08 Apr 2025 01:01:10 +0000
Manifest next update: Wed 09 Apr 2025 01:01:10 +0000
Files and hashes: 1: aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl (hash: DK0PABTFj0PqIx2RDJgofLg/ffdRcHa/Piuuf3ReZEc=)
2: hYYmw5fVDAR1P_MMb_9KXEfTATs.roa (hash: 094S5zaCMwQU0QTJCaSJoP16OB3rfJsQF3J8+250u5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:ea:59:57:81:9c:35:b7:43:d6:9b:16:1f:ac:e5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Validity
Not Before: Apr 8 01:01:10 2025 GMT
Not After : Apr 9 01:01:10 2025 GMT
Subject: CN=ba5ae10bba2a39e044a7137ceda9db07a62d25e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:55:e7:4b:eb:37:7f:74:ee:60:81:69:9b:
e9:86:56:ae:2a:24:7d:f1:ad:6b:b7:af:4d:50:dd:
c2:27:c8:bd:16:2a:5c:b5:8d:5e:58:29:88:8e:41:
10:ba:ee:5a:c3:f3:f7:b1:14:2f:86:a1:22:d0:dd:
1f:63:be:e0:db:eb:7f:4e:8d:b7:39:6f:69:ff:63:
ba:7f:cf:e6:e4:12:e6:dd:e7:aa:e4:38:e8:91:9a:
77:af:ca:6d:b6:57:e9:03:87:ce:44:22:2e:bc:08:
5e:c8:4a:c6:78:3e:cd:2c:65:79:26:21:6e:e7:78:
4e:0f:34:b9:b8:db:41:77:57:a4:7b:0c:60:c3:53:
ec:29:fd:76:0c:63:84:cb:54:b7:3e:84:0f:15:76:
7a:49:ee:48:00:02:d4:d4:52:53:0f:8a:3f:b2:f3:
23:05:f1:50:54:9a:6d:67:e3:20:05:2b:3e:ef:27:
8b:0c:af:73:02:9c:06:28:d2:7d:ec:6c:cd:2d:f6:
ca:64:ae:b5:77:c6:ec:e0:c8:a2:07:ea:d5:df:d1:
3b:ce:d5:47:28:6c:67:54:0a:f8:75:ac:e9:2c:dc:
93:5c:e4:ce:2c:46:d0:99:c4:7a:98:3b:85:bf:b1:
bb:f1:c5:3f:51:91:45:65:cd:41:de:1c:09:37:47:
ea:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5A:E1:0B:BA:2A:39:E0:44:A7:13:7C:ED:A9:DB:07:A6:2D:25:E0
X509v3 Authority Key Identifier:
keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1f:eb:53:0c:3e:d9:49:d2:08:c7:07:cb:e4:76:f3:94:e2:
e1:bc:ef:f3:b7:a0:28:7d:74:81:56:a4:0e:e0:e5:cd:99:7b:
d1:8a:bb:2f:ed:33:e7:8e:16:bf:7c:29:12:52:fb:62:85:f5:
2f:06:1f:00:74:99:7d:b4:cc:bb:ec:7b:39:a8:46:8a:8d:d7:
80:29:52:3a:59:11:bf:ce:30:a8:ed:cc:b1:e4:f1:84:dc:5a:
4a:1b:4e:76:bb:71:06:90:d7:ca:3c:53:fd:6a:21:a8:d5:be:
82:6d:8c:0d:99:1c:05:e2:98:21:ab:c9:57:e9:40:f1:62:36:
b3:95:14:5e:52:67:d8:83:97:8c:2c:9d:d3:b1:11:6c:e0:5b:
f0:19:55:ca:cd:3f:b1:dc:f1:dc:8c:66:a3:33:b3:7a:e6:9e:
88:d1:1d:41:62:9b:43:a7:07:b1:3f:ee:17:f3:c5:fb:d6:5b:
6e:69:8f:00:99:52:3d:9c:7d:03:51:d4:4f:c1:0c:f9:72:23:
11:40:65:f9:ca:aa:cd:03:88:0f:f8:28:c6:2f:8c:68:35:2f:
cd:cb:6b:5d:ce:d6:4d:ea:51:e3:dc:ec:3f:49:9e:73:c6:e3:
8d:d7:dc:e2:01:4c:fd:f8:33:6b:67:27:ca:da:60:15:0b:ea:
55:fb:13:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:33:23 2025 by rpki-client