Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
File: aia56N9dpWmFTGGvcU2zA0krYvE.mft (raw, json)
Hash identifier: Jz1APfZYb4mJ0cSt0R2OoTxWBRZv+gxUeysH2hVwhXw=
Subject key identifier: D6:C1:CE:0D:03:75:B4:FC:4C:EB:B9:45:78:C6:63:5D:C8:02:EF:B9
Authority key identifier: 6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
Certificate issuer: /CN=6a26b9e8df5da569854c61af714db303492b62f1
Certificate serial: 019657941AA8E5C2E6BD78B7559A2BEFAD08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
Manifest number: 92
Signing time: Mon 21 Apr 2025 09:00:45 +0000
Manifest this update: Mon 21 Apr 2025 09:00:45 +0000
Manifest next update: Tue 22 Apr 2025 09:00:45 +0000
Files and hashes: 1: OXOnare6dVM-zLYHWOSVEGQTw18.roa (hash: dcwy2HRQRShbBLQYZ7Zn1DYc8vKW+hy7H3ObhuzMkSQ=)
2: aia56N9dpWmFTGGvcU2zA0krYvE.crl (hash: 9hDcVQCFhDZH4XySec4SKHwCWB/LLWta/7elEiAhxSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:1a:a8:e5:c2:e6:bd:78:b7:55:9a:2b:ef:ad:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a26b9e8df5da569854c61af714db303492b62f1
Validity
Not Before: Apr 21 09:00:45 2025 GMT
Not After : Apr 22 09:00:45 2025 GMT
Subject: CN=d6c1ce0d0375b4fc4cebb94578c6635dc802efb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:a5:97:1f:83:98:4f:7b:cd:b8:d4:90:0c:
14:f7:02:2d:97:b8:3f:5e:75:7d:76:45:a8:07:2f:
9f:87:fb:80:c0:95:7c:00:7b:92:44:2a:7a:5a:7f:
af:b0:dd:52:01:b6:54:43:72:35:d4:19:a7:67:32:
5b:ff:c6:26:36:15:55:8b:e5:4c:3c:d5:7e:ba:16:
9f:0e:dd:c3:4c:75:e9:d6:5c:86:c2:19:01:a6:3d:
16:b0:33:75:ee:a7:11:d2:5e:fa:1f:ec:32:b9:4c:
34:5a:96:40:73:97:fc:47:33:a2:a5:19:31:d4:d5:
00:c7:2d:40:89:4f:c2:5a:10:0b:9c:62:38:6d:fa:
9d:12:5b:44:90:b3:75:40:b8:3c:14:e3:e7:8e:55:
d9:8d:4e:5a:10:91:ea:fb:59:12:51:b1:9b:84:be:
dd:35:f5:b1:92:4d:eb:1f:87:57:15:b4:08:3a:bd:
28:81:b5:81:85:81:11:08:8c:f5:88:b7:ca:de:f3:
14:1f:54:33:bf:c8:99:78:50:87:cf:b9:af:66:bd:
64:97:5d:82:9b:64:20:f6:25:26:e2:54:69:26:66:
c4:d2:73:46:0a:e1:fc:ba:7d:da:a6:e6:2c:7b:21:
ab:54:27:a1:78:6c:ea:3f:3c:5f:3b:64:f4:35:02:
bd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C1:CE:0D:03:75:B4:FC:4C:EB:B9:45:78:C6:63:5D:C8:02:EF:B9
X509v3 Authority Key Identifier:
keyid:6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:33:db:a1:29:eb:39:84:ca:5e:24:fe:1a:48:3a:3f:ba:dd:
19:fe:3d:09:0f:a0:9b:77:cf:a4:ce:60:1c:eb:1e:49:79:9a:
1f:34:c4:b2:99:e9:4f:da:e7:72:18:c8:39:06:a6:6c:a4:9f:
8e:41:d3:cd:08:08:e9:0c:6a:4f:c3:1f:f2:a5:e4:43:21:6a:
7b:4d:98:9b:c7:13:e4:27:bb:00:0a:d7:49:fd:c9:94:6d:73:
8d:88:ae:d9:dd:67:d8:db:20:ee:72:74:bd:53:5c:df:9c:40:
a9:c3:33:7c:54:fe:8d:d6:17:d8:45:c2:ea:66:b6:5d:24:77:
14:91:3c:d9:3e:fc:dc:40:0d:7a:c6:31:34:2c:9d:cf:4b:a1:
5e:7b:f6:5e:fb:33:68:c9:a1:bb:b3:59:0a:ab:a3:3c:1d:da:
80:67:37:38:a9:34:ce:ac:09:b5:32:9a:4c:b0:7d:64:77:e3:
09:f7:bc:ca:0c:44:7f:33:0d:8f:95:2b:64:b6:ce:71:54:a6:
48:0c:77:c9:3a:96:80:01:84:12:97:c0:79:f4:c6:60:e8:00:
88:2a:e7:0b:11:a5:70:ed:ba:e9:2c:a7:eb:22:59:fc:dd:7e:
95:a8:93:14:97:e2:24:a0:05:78:04:5b:9e:9e:18:68:a9:77:
3c:86:bd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:31 2025 by rpki-client