Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
File: aHyL8iKia_HJxmOMw1bSg1UC8tY.mft (raw, json)
Hash identifier: hAzYJV4bx9jfyHrPWMDqSgAEYNZGsOzGiEEnU4D9Kf8=
Subject key identifier: 8A:DE:9A:32:DC:DC:F7:FF:56:3D:4B:7B:9E:55:78:87:F9:7C:01:4A
Authority key identifier: 68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6
Certificate issuer: /CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6
Certificate serial: 0194C38776F6E5DB2DBA3FA8FD4790EBAA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
Manifest number: 056E
Signing time: Sat 01 Feb 2025 22:00:22 +0000
Manifest this update: Sat 01 Feb 2025 22:00:22 +0000
Manifest next update: Sun 02 Feb 2025 22:00:22 +0000
Files and hashes: 1: aHyL8iKia_HJxmOMw1bSg1UC8tY.crl (hash: KO4OIK6bCxzq9fTorTjuZyrCxQGek677MNqXNyP9I20=)
2: szxe0DPYsGTMI_tgKM1yaWgLDtI.roa (hash: fjZgmmGMINi/iYDucRgC4NEVBx45QTUkAnBaw6M5XK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:76:f6:e5:db:2d:ba:3f:a8:fd:47:90:eb:aa:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6
Validity
Not Before: Feb 1 22:00:22 2025 GMT
Not After : Feb 2 22:00:22 2025 GMT
Subject: CN=8ade9a32dcdcf7ff563d4b7b9e557887f97c014a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:e7:f8:6d:a7:7b:95:01:95:c9:50:a7:56:
6c:89:a4:98:24:cf:b8:5a:51:2d:bd:72:bf:c2:e9:
94:be:4e:59:2e:17:c5:d7:3a:bc:fb:ea:d4:2a:b0:
14:c9:9c:96:d1:40:dc:4a:bd:a4:07:56:bf:16:1a:
0b:07:95:34:65:ac:2d:93:15:f6:41:e1:ca:76:78:
20:d8:db:db:05:92:d1:89:d8:b1:82:f6:93:33:07:
bb:d1:27:44:bb:6b:25:a2:36:ea:78:5f:73:16:34:
d5:95:db:2c:c5:7f:59:ce:5d:7b:e5:c4:25:0c:4c:
e5:25:c7:c0:9b:80:6b:88:8a:14:68:2f:98:b3:da:
68:6a:7e:88:f9:90:8c:6a:1f:39:13:e9:3f:89:c6:
58:fe:13:a2:f4:08:47:30:18:34:e5:6c:5e:97:c8:
0d:76:0c:8e:d2:28:f8:e3:bf:91:65:a1:f9:70:cf:
82:5b:de:f7:f1:82:48:a5:73:be:3b:11:1d:13:6a:
14:d6:9f:fc:ea:b6:03:f1:7a:27:f4:c2:0b:55:52:
c8:04:57:20:76:08:5a:1a:7b:7a:49:20:fd:4f:e2:
99:82:d5:90:6a:36:cc:12:c5:d4:54:f4:81:2c:a9:
36:e2:c6:23:60:04:e8:8b:30:96:d4:b2:01:3c:3f:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DE:9A:32:DC:DC:F7:FF:56:3D:4B:7B:9E:55:78:87:F9:7C:01:4A
X509v3 Authority Key Identifier:
keyid:68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d3:b3:2f:c5:69:1e:13:e3:49:92:50:00:05:ea:83:87:12:
54:6b:14:d4:a0:73:95:f8:b5:77:56:69:4a:1b:ee:d6:ce:38:
72:ee:96:2c:73:62:4a:7f:fe:5e:d0:9e:1c:59:a7:78:01:c8:
f7:a6:61:ba:b0:18:2c:20:57:0b:ef:07:f2:10:67:65:da:db:
36:c9:b4:a5:a1:55:a9:f9:77:48:22:8f:91:7f:54:30:32:5d:
d8:15:ef:12:5a:eb:f4:8d:e2:35:78:c0:ea:bf:d8:49:42:a5:
7b:ea:41:0f:af:0b:e9:d7:d2:53:5d:f0:8a:87:9c:73:7b:63:
43:41:e2:90:fa:92:54:12:59:85:d1:48:42:8f:8d:a5:db:4c:
d2:d5:26:03:f4:a9:67:96:a8:7d:54:22:b3:47:04:ff:bd:36:
ff:6a:bd:c2:dd:91:33:60:f4:88:f8:4b:8f:1f:6a:a6:38:66:
e1:4b:24:ea:9f:16:9b:88:7d:d8:c5:75:a6:e6:39:35:37:6b:
76:d7:b1:13:af:c0:8b:af:67:43:08:50:83:08:33:75:7b:a3:
66:24:da:cd:46:24:11:73:ba:04:d4:6e:db:29:c9:c7:43:6f:
ed:61:61:e6:23:af:4e:da:75:c2:e5:b1:ae:be:48:ad:68:91:
09:c2:7a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:52 2025 by rpki-client