Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: xmISoTLik1unXOkVS9l6stOKT9s41uCoeGfLN2v8dXY=
Subject key identifier: 90:E5:50:08:A0:16:F6:23:BD:0E:41:1A:C6:90:AE:47:90:34:0B:DF
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 019636BF4081EA67982ED168217F7E2284C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 14F1
Signing time: Tue 15 Apr 2025 00:00:25 +0000
Manifest this update: Tue 15 Apr 2025 00:00:25 +0000
Manifest next update: Wed 16 Apr 2025 00:00:25 +0000
Files and hashes: 1: P1en3sohe2DbyNzA71GiPNHyPMA.roa (hash: V8PIuABmlXR/9zmJ4CmVSW6y4BQ+AXThzkLiJ6dRREE=)
2: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: aiwSxoln2UiY6/JJUiwihIzBad5Yrf5dYfd1wW6V3G8=)
3: jXfDa-UQ8MNojbhvL1jcAxZ-2LA.roa (hash: 2Itp3B8O+5dmTKgGLY+BCEZM9Sy2Ho8d4oe+RtL2s4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:bf:40:81:ea:67:98:2e:d1:68:21:7f:7e:22:84:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Apr 15 00:00:25 2025 GMT
Not After : Apr 16 00:00:25 2025 GMT
Subject: CN=90e55008a016f623bd0e411ac690ae4790340bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7f:27:8a:cb:64:f3:16:e8:78:a9:e7:c5:3b:
6d:ed:e2:33:a0:62:c4:4a:25:79:09:e8:37:e6:76:
e3:99:d2:3a:ed:64:e9:18:69:d9:a2:3a:fb:e7:97:
2e:de:c2:f9:eb:89:77:52:56:84:48:d8:61:4f:64:
0f:b2:fc:18:50:b7:cc:f4:b1:28:d9:80:cc:06:4e:
91:d3:92:0d:7b:6a:49:14:4a:03:00:f4:2b:cc:62:
63:30:a7:24:2f:a8:b4:e1:df:73:c1:48:6d:ba:d0:
bc:d4:f1:42:f2:1e:97:e2:14:3b:f1:f0:cb:cc:5d:
79:54:aa:b1:2e:89:e9:45:d0:b6:73:82:8f:1e:79:
5a:c0:fe:48:50:12:34:1d:fa:28:9b:3c:e8:7a:a7:
86:f0:dd:08:fa:b4:00:2d:26:59:6d:17:33:60:86:
95:c1:7e:82:8b:a2:18:34:f2:62:47:e7:eb:a9:75:
11:f1:13:81:bb:20:f2:02:b5:f3:6b:3e:55:2b:2e:
ec:d3:d7:ba:07:b3:08:0c:2f:6d:64:c3:a5:bf:56:
1a:03:0c:42:23:18:32:f8:0f:35:73:a4:6c:b7:d4:
11:10:1d:9a:8d:9d:1c:56:75:0b:e0:3b:1d:76:2d:
8d:21:27:7f:e1:32:08:6c:17:6d:18:f0:b2:cb:14:
9b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E5:50:08:A0:16:F6:23:BD:0E:41:1A:C6:90:AE:47:90:34:0B:DF
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cc:0b:b7:ce:5b:3f:63:70:0c:1a:f7:50:41:db:ec:69:80:
a8:d1:1d:05:4e:5e:a2:4f:aa:fd:e0:4b:46:74:bc:44:d7:3f:
5c:82:5f:91:cc:10:8e:e8:1f:98:7c:ae:3b:a7:5e:c8:d2:96:
13:df:46:e4:2a:86:79:81:3e:89:e7:b7:9d:97:79:e7:3e:f1:
df:a6:53:93:65:ea:e1:11:d2:c4:73:d8:b3:11:49:d4:0d:a7:
f2:d9:ef:b6:f0:a5:66:93:c1:76:94:38:09:c0:22:2c:c7:49:
17:2f:ba:03:39:ae:c1:e8:02:03:bb:94:ce:22:32:7a:f7:79:
ea:17:35:00:ad:24:38:68:91:e6:10:14:ae:18:1c:34:c8:67:
5d:38:9f:67:51:d5:51:a4:e4:db:df:80:b1:d1:e3:bd:1d:18:
40:8c:19:e5:1a:ce:28:22:b5:2c:e8:f1:7d:d2:f8:30:ba:7c:
3c:02:2c:9d:ad:1e:3d:76:4c:ea:02:d4:7c:6c:98:02:0e:3e:
d3:6d:5b:10:c6:03:87:5b:ed:e4:db:8b:f3:1d:c7:0a:3d:0e:
3a:63:12:79:7a:a1:9f:5b:ac:d8:3d:e6:2b:69:de:5d:7f:7b:
db:6c:2e:2a:44:7a:39:54:fb:5e:bf:65:ea:b2:dc:03:7a:98:
f9:6a:08:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:17:52 2025 by rpki-client