Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
File: avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json)
Hash identifier: G4DcWmKlPIJyXDnKQZHfCrpXQwNHg4emF9Ziq3fw/sw=
Subject key identifier: D7:7F:54:F1:C2:01:80:E4:2B:40:26:C1:22:CE:C7:EB:12:39:D4:2A
Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Certificate serial: 019659EFE0B19805ADBAB85A20C84BF8E04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 20:00:14 +0000
Manifest this update: Mon 21 Apr 2025 20:00:14 +0000
Manifest next update: Tue 22 Apr 2025 20:00:14 +0000
Files and hashes: 1: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: dy/OUZMGY6T8+Y7F90d7xmsKMP5bYhZ+fheCeHyH+kk=)
2: wXxaxOe5K6VZxO15ijoJArRrzpw.roa (hash: 0cJ6cl/TPUcycuQT5NeDc9VFGfM9ahmi8hzebiujzPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:ef:e0:b1:98:05:ad:ba:b8:5a:20:c8:4b:f8:e0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Validity
Not Before: Apr 21 20:00:14 2025 GMT
Not After : Apr 22 20:00:14 2025 GMT
Subject: CN=d77f54f1c20180e42b4026c122cec7eb1239d42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:5c:d2:21:ab:90:1b:9b:98:29:f0:bc:89:
38:4a:a0:fd:d6:a0:a4:38:7c:8e:95:1d:d2:60:65:
cd:a9:97:93:1d:6a:8c:44:1e:2f:04:17:f0:12:16:
1b:92:56:f7:fe:48:39:48:03:42:d6:bc:dd:d5:ed:
ad:1f:03:9a:7f:4f:72:16:3b:30:49:f6:2d:60:50:
e9:a8:e7:ae:9f:94:e1:da:59:7a:18:09:0d:69:cd:
66:b5:bd:ff:bb:19:94:72:77:ab:2a:eb:26:4b:89:
5f:23:32:8e:a4:a0:c4:c9:bc:2b:75:53:49:93:77:
2b:60:b1:e9:9e:d1:e7:b4:d0:7b:4e:a6:f1:d0:48:
85:51:14:b3:72:50:46:dc:39:1a:d3:56:a9:fd:06:
db:ec:46:60:e6:b8:2d:4c:53:a0:71:c5:26:75:30:
f8:60:af:5e:55:ed:28:e4:b5:5c:a6:8a:c5:7d:29:
03:5b:b0:aa:67:67:2d:a6:c7:29:d5:d7:8f:65:1f:
cb:f7:c4:57:11:2e:61:66:d8:77:f0:d6:a7:79:e6:
46:34:f0:3b:ad:47:ad:d8:b8:db:a8:4c:1d:68:e5:
64:af:46:6d:7b:9a:32:0d:6d:03:21:15:21:32:c0:
05:70:c2:22:06:cb:d7:5a:14:4b:6c:e0:13:25:da:
38:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7F:54:F1:C2:01:80:E4:2B:40:26:C1:22:CE:C7:EB:12:39:D4:2A
X509v3 Authority Key Identifier:
keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:74:d2:9a:f3:b4:e3:f9:5d:f2:91:62:ed:b3:34:0b:8e:2b:
58:81:f7:b1:e9:c6:e1:15:04:a6:4c:88:0e:7c:67:c8:80:ff:
d4:3f:01:c9:a4:b7:63:b4:fb:55:21:55:6f:c3:ee:88:54:28:
75:8c:f3:cc:cd:aa:a7:5b:2e:cc:09:2e:e1:f1:d3:09:79:2a:
37:27:80:a0:30:1a:23:b9:a1:db:42:30:9c:42:7d:2e:25:4b:
a9:f7:62:46:59:f0:9e:c5:fa:ce:68:05:69:1c:ab:46:8a:00:
3c:9b:05:75:43:1b:fe:10:c8:78:11:c5:e5:79:ff:d9:19:f1:
23:fe:7a:df:84:28:b5:42:0e:52:80:48:d8:6e:1f:17:26:f1:
16:59:4e:56:9e:2a:39:d8:47:39:93:d3:66:d2:b5:17:e8:a4:
77:e1:69:8e:39:11:86:71:8c:0d:3e:a3:4f:b4:10:c2:ca:0f:
e4:cf:ce:3f:38:76:9b:85:dd:03:48:70:fc:e9:ce:e6:51:91:
11:0f:48:9b:ec:df:98:b6:ce:77:1b:54:93:9e:8a:a4:43:ec:
5b:3e:d3:37:ac:6d:00:9c:44:fb:58:d9:90:27:03:c2:4b:e9:
a1:ee:1c:cb:de:e4:c3:50:69:e0:92:a7:5b:f4:3c:99:1e:06:
a2:d2:36:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:36:50 2025 by rpki-client