Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
File: aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json)
Hash identifier: CFecFyo/G2dUYIggzi0prDfAR7vuWTMdYms1RZb9ApE=
Subject key identifier: 38:0B:3B:33:74:D5:5A:46:25:3B:74:84:0D:F4:59:1A:9B:F4:9F:68
Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
Certificate issuer: /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Certificate serial: 01964F3549A374CDCE8939B1B82C6C4719F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 18:00:14 +0000
Manifest this update: Sat 19 Apr 2025 18:00:14 +0000
Manifest next update: Sun 20 Apr 2025 18:00:14 +0000
Files and hashes: 1: 9peR5n5QXeylxwcwhSYgLjf27HA.roa (hash: mj+nyCVjal6tZvMkRYNWl96UMmHuvQTDEtFMDTf8UoI=)
2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: z0QSaFgpXj7fCyMfZBkdiMAjVTUjBeST7/XNLxWazGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:49:a3:74:cd:ce:89:39:b1:b8:2c:6c:47:19:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Validity
Not Before: Apr 19 18:00:14 2025 GMT
Not After : Apr 20 18:00:14 2025 GMT
Subject: CN=380b3b3374d55a46253b74840df4591a9bf49f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d0:e0:c7:9f:b3:aa:c3:d2:1a:54:85:19:3f:
5f:d7:29:2d:36:f8:c8:69:79:a2:a4:9d:df:ad:6a:
65:d9:1c:e9:23:07:16:1e:85:4c:dd:99:d5:26:07:
e5:94:f6:0d:13:a2:54:d8:c8:93:c4:1f:cc:8e:4f:
08:d8:a7:28:ef:0a:5a:59:ec:a3:db:fb:47:e6:42:
7b:d6:8c:2f:7b:b8:c3:1c:6d:ad:a3:fc:5a:47:31:
af:de:5b:17:ce:e4:a2:ac:c1:40:fd:8f:d0:1a:70:
29:83:45:d9:f7:49:8c:96:6d:ec:d7:df:ed:b7:3b:
61:ef:ad:23:ab:cc:71:8f:5b:dc:a5:29:3d:3e:2b:
f5:08:41:22:8d:a5:e1:f4:f0:25:33:25:0c:a4:57:
9f:da:ce:02:87:58:16:0c:f6:f1:db:4d:98:21:47:
f1:ed:93:0f:f1:35:07:c4:c0:68:1b:bb:0c:79:b6:
f9:2f:56:9b:35:2f:6d:ca:f8:60:f1:c8:7b:e5:48:
96:d8:3d:bb:eb:10:7b:01:e6:d4:16:22:fb:db:64:
26:0f:28:78:61:36:3e:41:11:3f:ae:c8:5e:16:49:
c2:03:14:53:08:c5:e9:6b:3c:c2:1f:06:8f:d1:51:
86:0a:00:30:a8:9f:ae:9e:2b:ca:08:70:31:b8:e1:
5e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0B:3B:33:74:D5:5A:46:25:3B:74:84:0D:F4:59:1A:9B:F4:9F:68
X509v3 Authority Key Identifier:
keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:fb:40:76:9a:dc:d7:9f:8c:f3:66:7c:d8:1f:d4:19:bb:67:
2b:04:95:4b:32:ae:20:47:2b:7a:dd:85:28:1e:5a:ea:c1:5f:
a9:cb:2a:cc:07:4d:98:52:c5:10:09:6e:95:72:6e:2f:84:4a:
b2:f3:55:9c:fe:e8:10:8e:1e:54:08:46:8f:fe:41:02:62:50:
3c:d1:cb:d6:8d:bc:e7:41:a2:f9:26:47:f8:6e:25:7e:b4:a5:
53:8c:18:ab:9f:1e:95:2b:fe:83:ad:8f:49:7c:e1:84:4e:15:
03:6a:14:19:28:1d:cd:ea:25:c0:27:66:7e:8c:58:ad:30:11:
4a:32:d2:32:f9:a7:8b:05:12:e2:f1:fa:f4:fb:39:16:23:c1:
23:f0:ee:ed:6f:9b:34:41:8e:81:42:ca:61:e8:a3:02:a0:e5:
32:44:81:74:64:47:59:6e:b4:6a:08:3c:91:ff:e3:f5:88:ad:
e4:c8:d9:bb:25:e0:ba:58:49:f6:88:34:02:aa:d7:c4:de:e7:
bf:32:41:ce:31:ae:a4:fb:e5:26:51:63:f1:28:71:04:ed:93:
49:be:29:4d:b6:10:ce:c9:53:5e:46:d8:21:1c:a5:07:fe:68:
65:66:7f:9e:8d:4b:77:a2:67:9c:ed:72:ea:e9:68:dc:42:fc:
7f:aa:92:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:30 2025 by rpki-client