Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
File: AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json)
Hash identifier: dUYC1PxXmDT9C3eIKOq/QEExLKp51ZJd5jwnj0c9PsY=
Subject key identifier: 87:7E:50:FD:E5:D1:CE:15:07:A5:1A:CD:E6:B9:A4:00:34:A4:73:A0
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 0196538029659E20ECDC8FE69D84BF7C5BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 14:00:30 +0000
Manifest this update: Sun 20 Apr 2025 14:00:30 +0000
Manifest next update: Mon 21 Apr 2025 14:00:30 +0000
Files and hashes: 1: 2Zm15nya-qIgvvpfAijKMsgEkJ4.roa (hash: R6UtE66nKKM8V86y41wgOOrSUcLC3hcokGTEuECcZNA=)
2: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: C3OJnJnck4CporUsr3q4BCZE+gzNxh+AhWZq2NC2Mjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:29:65:9e:20:ec:dc:8f:e6:9d:84:bf:7c:5b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Apr 20 14:00:30 2025 GMT
Not After : Apr 21 14:00:30 2025 GMT
Subject: CN=877e50fde5d1ce1507a51acde6b9a40034a473a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:57:f6:c4:0f:03:27:4c:5c:a5:80:ec:ed:9e:
98:e9:3f:32:99:d0:03:30:b4:b8:de:6c:b3:66:95:
cb:d4:02:5b:fe:41:85:31:f7:56:b6:fb:75:e4:4c:
a9:a4:c3:20:bd:9d:99:83:94:9f:9a:5d:ca:7b:a0:
79:2b:74:3a:30:1f:2a:51:61:02:a5:85:7d:46:45:
f4:7f:56:58:53:aa:31:88:5e:c1:66:35:5d:8e:d7:
a3:f3:b7:b0:09:c2:e4:52:95:a1:20:01:8e:f2:ce:
55:3a:d3:a0:ac:80:fd:aa:0d:ef:7c:d1:4d:3c:24:
22:9f:52:21:e8:e0:be:a4:b9:37:e0:f5:f3:41:01:
be:75:b9:0b:1a:09:c7:d2:3b:66:25:49:51:c8:20:
92:67:ae:91:df:dd:ca:44:51:ee:5a:54:68:ee:7e:
81:b0:97:d3:8c:fb:ab:01:04:26:be:78:50:38:ec:
e9:cf:4e:89:25:4f:d5:f0:78:35:b9:68:a1:ea:d9:
88:4d:bc:c2:ba:87:a0:ac:95:0c:5e:67:96:3c:b0:
4c:e8:d8:b4:4c:0a:88:dd:c4:d2:48:d0:8a:ac:b7:
18:e2:e7:42:7c:0a:28:69:27:bb:49:47:57:2d:8c:
49:9c:1a:c8:83:a6:a4:f9:14:5e:27:54:3a:2c:a7:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7E:50:FD:E5:D1:CE:15:07:A5:1A:CD:E6:B9:A4:00:34:A4:73:A0
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:16:7b:ed:2f:ea:4b:be:c3:96:d1:19:40:57:65:12:9c:6c:
79:c1:3e:1a:fc:16:b0:a4:c8:5d:e3:97:ef:ee:53:bc:50:20:
27:f7:46:59:9e:61:59:e4:b0:d1:77:4c:47:33:13:2a:b6:a9:
fe:06:09:39:1f:00:f7:be:ed:a4:c5:c6:9e:9f:49:90:28:66:
ab:c4:b0:b9:39:b3:67:1e:ee:20:ca:3a:76:5e:e0:49:ab:51:
27:0e:49:a2:56:2e:65:c7:87:7c:6c:e0:59:0d:6a:e3:cb:a6:
97:6d:0e:e3:c1:22:11:be:0c:9b:1e:aa:98:54:8e:01:de:4b:
26:97:13:46:fb:67:14:b1:32:5d:ff:e6:21:c0:f6:d7:b8:81:
5c:ec:45:77:2a:65:48:0f:90:67:e5:e7:2e:54:4b:82:8c:64:
ec:07:ee:85:99:0c:ab:90:93:c4:73:4d:00:2f:bc:30:3a:dd:
de:a4:1f:18:08:f0:f5:2f:7a:47:00:1d:c3:20:a7:fe:10:e7:
44:cc:c1:23:23:fe:73:8e:4a:6b:17:fe:c7:e9:53:b7:f8:c9:
d1:2d:1d:e1:d8:92:61:f1:ad:f3:ce:28:4b:07:cf:33:4f:ac:
b1:d1:6e:33:7a:cc:02:a9:7a:c2:06:79:cd:81:3a:72:11:6d:
70:89:c8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:32 2025 by rpki-client