Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
File: are5zuAEMA6v4JvxL8ttod0wpNc.mft (raw, json)
Hash identifier: w4INT5m3VeVSrxXGzT105TAuEAAwhzyQwj4+gWKkjzE=
Subject key identifier: 83:6B:C8:1A:75:9B:04:E5:D8:08:B0:EB:22:29:15:08:C6:36:26:16
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Certificate issuer: /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial: 01963F549434824E896C8C4B383D24DE7B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
Manifest number: 14F6
Signing time: Wed 16 Apr 2025 16:00:29 +0000
Manifest this update: Wed 16 Apr 2025 16:00:29 +0000
Manifest next update: Thu 17 Apr 2025 16:00:29 +0000
Files and hashes: 1: BFGJmraQBgGavzIeZHO0bfSXFRI.roa (hash: e3IZCe3SbuLp2264XxRVhIYJHbqFuU1UA3gCIN6FJhs=)
2: are5zuAEMA6v4JvxL8ttod0wpNc.crl (hash: 0fSFoYFkOi6HEAhbQZZMeIa2hBSZgjFp42oSFYSlAnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:94:34:82:4e:89:6c:8c:4b:38:3d:24:de:7b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Validity
Not Before: Apr 16 16:00:29 2025 GMT
Not After : Apr 17 16:00:29 2025 GMT
Subject: CN=836bc81a759b04e5d808b0eb22291508c6362616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:54:5a:b3:c9:1b:ed:71:00:9b:eb:dc:06:fa:
d3:b6:95:3b:47:06:f5:95:3c:9f:4b:62:e0:fb:f6:
fa:2d:3f:25:67:13:83:a3:84:c1:91:5e:1f:ed:95:
5d:b8:38:d6:30:03:73:ee:b0:d2:5b:a3:94:98:09:
55:2e:06:cc:19:af:17:aa:67:d1:e3:fd:6f:80:cd:
ef:7d:d1:42:63:82:b8:d6:b6:69:29:9f:1f:08:25:
46:2e:46:e7:66:5c:87:f7:ef:0b:24:27:b5:75:d8:
62:13:87:08:50:40:7e:18:0b:8a:a1:7d:b7:32:da:
37:ea:01:71:10:7c:e9:86:17:20:70:f0:19:16:0e:
89:c7:74:51:02:01:a9:f3:ad:21:20:fd:1f:2e:45:
27:bf:86:90:18:7d:72:84:8b:79:ac:22:d3:88:a7:
2e:4c:57:71:c7:77:8a:92:ec:e2:e9:8a:ec:64:78:
69:59:cb:84:2a:f1:6b:0d:26:60:8a:e3:b4:f7:ca:
08:0c:c0:2c:6f:97:46:ad:f4:de:e9:7a:04:51:55:
3c:cf:6a:0e:bf:0d:e1:82:f4:03:18:3b:53:b1:64:
76:bb:8b:8e:21:5f:49:ba:6e:29:b4:64:90:e8:d2:
94:0e:b0:98:a7:c1:23:0c:92:41:f3:28:ac:cc:3f:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6B:C8:1A:75:9B:04:E5:D8:08:B0:EB:22:29:15:08:C6:36:26:16
X509v3 Authority Key Identifier:
keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:4f:31:c7:2a:37:e3:a3:a7:cb:a1:00:70:98:c3:9f:f7:06:
e0:df:e0:fd:e1:f5:00:03:14:48:06:e0:fb:c3:3e:3c:77:ee:
0b:ba:ec:d6:95:cb:d5:af:3e:af:cb:09:6f:ee:6d:47:c7:a3:
c2:e6:e4:fc:dc:64:16:d7:6c:25:36:b0:eb:a3:d7:1c:4e:f1:
e9:b3:e4:ab:45:d7:68:8b:80:82:a7:df:63:3e:1f:2c:5f:c6:
fa:39:d6:37:3d:35:ac:e7:79:b1:3f:f3:ab:d4:e3:70:26:ee:
48:c5:55:bd:90:cf:80:b1:7c:7d:bd:c7:72:8b:57:58:5b:24:
ba:8d:b1:bb:a8:f1:eb:15:43:48:79:a1:ae:47:c8:e8:6d:28:
7a:29:31:f0:bf:6c:0a:e9:e2:df:f9:57:33:2a:25:7d:4c:8a:
9d:9d:17:11:72:93:e5:d8:e4:ed:14:98:e9:38:20:ec:ac:76:
82:de:81:69:be:57:c2:b3:66:d8:9c:b0:1f:7a:c1:23:47:31:
76:d1:61:47:75:2a:27:d9:44:cb:c1:f7:64:3d:60:4c:19:d9:
cc:8a:bc:e7:6c:71:fe:5a:58:aa:2b:20:c6:b7:46:12:34:d5:
89:20:2d:95:57:28:c3:b6:9d:f6:6b:ce:a0:b3:94:c1:7b:b1:
b9:4f:3f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:06:05 2025 by rpki-client