Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
File: akq-io-jeJUa-mhZc1u-axgUi1c.mft (raw, json)
Hash identifier: WAikr9+DEwVvQ2evBExhqOG+RMW4NQRJD55obC8wWj0=
Subject key identifier: A9:2F:27:A3:FD:29:57:47:C1:DF:E8:5E:72:F8:7C:CC:D5:55:60:EF
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Certificate issuer: /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial: 019654252FF8965DBB7C1392A3410AF3242B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 17:00:45 +0000
Manifest this update: Sun 20 Apr 2025 17:00:45 +0000
Manifest next update: Mon 21 Apr 2025 17:00:45 +0000
Files and hashes: 1: 0n3iQYpF6Ls3-dvq0yk-f6w2ktE.roa (hash: 92er4aRrLmBNUO87OrAGD3iytTTvnMtEKh+SACuDLjI=)
2: akq-io-jeJUa-mhZc1u-axgUi1c.crl (hash: H/NFQAzQHq9kvBz83mqsO0xV14vn/XvR9T/Tx6eNpag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:2f:f8:96:5d:bb:7c:13:92:a3:41:0a:f3:24:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Validity
Not Before: Apr 20 17:00:45 2025 GMT
Not After : Apr 21 17:00:45 2025 GMT
Subject: CN=a92f27a3fd295747c1dfe85e72f87cccd55560ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a4:30:56:58:55:41:df:42:2f:3d:c5:7f:99:
d8:30:b4:d7:9f:7c:c9:1e:09:60:f8:af:b3:12:54:
b4:c2:94:bc:72:ae:66:08:56:4f:dc:74:70:45:69:
14:27:b8:ae:bc:14:de:f0:50:f0:c6:06:eb:ce:e9:
fa:c4:af:f5:87:38:48:e8:ea:74:c9:27:d2:86:83:
6c:1f:02:51:9c:6b:5a:a5:82:f1:96:39:41:ab:39:
84:5e:6a:a0:67:6a:c7:f4:c1:9b:61:93:de:df:93:
48:56:74:f9:0b:1a:74:83:12:6e:75:b5:a6:32:58:
d2:5f:ab:05:f8:e4:d6:7e:2e:75:4d:7a:ed:4a:07:
0a:4c:a2:82:88:8b:a0:f8:b2:b6:6b:b9:ba:6c:df:
3b:9d:8b:a2:66:e6:d2:a8:ee:69:3a:44:23:7c:29:
12:03:ce:1b:6b:d4:3a:9d:b3:a6:d0:f4:44:60:be:
dd:08:b0:f7:45:a9:f6:68:b1:1e:f2:c3:03:17:96:
d7:27:6d:db:36:ae:80:09:89:e3:dd:37:36:17:f9:
a3:d3:40:c1:a4:18:fc:c5:33:30:38:ce:9f:09:84:
88:de:18:69:45:b8:3c:96:65:e5:7c:ab:d8:d7:9e:
23:a9:47:e1:98:98:ca:7e:31:4f:55:88:7e:c3:0d:
e6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2F:27:A3:FD:29:57:47:C1:DF:E8:5E:72:F8:7C:CC:D5:55:60:EF
X509v3 Authority Key Identifier:
keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e1:91:34:14:4a:ec:16:c9:c6:97:5d:f6:b6:89:61:4b:80:
dc:92:66:b3:63:7d:63:d3:2a:2c:aa:bf:3e:be:d4:b1:cd:c5:
14:71:b9:2f:3b:c6:0d:2f:ce:70:2f:2f:72:b6:f0:05:e7:91:
a2:de:ee:af:08:7f:ae:1a:88:68:7c:30:6e:eb:07:f0:ef:68:
78:31:03:10:28:b4:75:2c:7b:cf:ed:59:4c:15:8f:f3:4a:3c:
6c:b5:39:2c:1c:ea:52:96:ff:0a:1f:0f:b6:da:b5:76:82:bb:
e8:af:14:68:d0:26:ec:dc:e0:e7:bb:47:9f:af:99:a7:da:37:
6d:d4:5e:15:8d:a3:99:60:b9:2c:fc:94:98:f7:93:d5:38:da:
81:d6:49:db:e3:c6:d6:68:23:9f:54:01:c6:40:54:81:6a:f5:
c0:60:cd:d1:5a:ab:1e:07:6c:7a:f3:c9:bf:4a:7c:22:eb:1d:
fa:08:08:5d:e2:ae:22:b0:08:d0:70:6e:9c:b7:7a:68:df:a9:
8e:f6:35:46:98:f7:44:5a:23:8b:53:e3:7b:61:61:e0:ef:a8:
90:93:8a:e9:ec:b7:9d:5b:ba:64:5e:3c:65:28:bc:d9:b8:9a:
5e:90:54:50:25:57:7f:e0:70:b6:4d:f2:62:a6:ec:3e:14:f5:
d8:dc:89:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:51 2025 by rpki-client