Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
File: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json)
Hash identifier: BPpgeZYt5Y68pNllUMM2aMR4hsLXOOSY8zZO4UO+HtA=
Subject key identifier: ED:FA:76:D6:D0:D1:A0:BC:77:5D:94:18:09:F9:8A:42:BA:B8:07:DE
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Certificate issuer: /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial: 01964142D008A8D9C4A93940D638ACBAC2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 01:00:19 +0000
Manifest this update: Thu 17 Apr 2025 01:00:19 +0000
Manifest next update: Fri 18 Apr 2025 01:00:19 +0000
Files and hashes: 1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: Wp2dYku9EAb6xmroBw1iNFPk/LVhX6ICAALmVICTYfk=)
2: fwoYr1Kqstn23idquOGuF4OaEDA.roa (hash: 15qdfkfLDueOEzyhhBl0giIuBtBZlXb5NLiGIPdeRgc=)
3: o93VYBco2vvWfQM6y3ieuHQCi9k.roa (hash: MBbxyku746pAaoPUULrkZQLEeLBzRWKy6GYPbFcoyfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:42:d0:08:a8:d9:c4:a9:39:40:d6:38:ac:ba:c2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Validity
Not Before: Apr 17 01:00:19 2025 GMT
Not After : Apr 18 01:00:19 2025 GMT
Subject: CN=edfa76d6d0d1a0bc775d941809f98a42bab807de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:d3:76:f9:ef:02:4f:c9:3c:25:31:6f:19:
28:14:fe:22:66:17:01:21:21:ff:9b:27:c3:9c:52:
fe:10:93:f6:6a:6e:e1:c7:48:6d:c1:77:7f:00:c9:
a2:3d:19:9c:66:88:ca:1c:c5:ce:56:0a:64:02:6f:
5f:fc:a8:4b:6d:ce:1e:e6:57:04:b9:96:54:ca:24:
a0:de:c3:6d:34:61:9a:68:01:41:66:67:41:7b:54:
b4:f4:0b:40:33:31:43:39:34:9e:ae:7b:d4:bc:25:
e5:49:94:4d:86:7a:79:f8:11:87:51:8b:ba:45:4c:
55:f1:e8:bb:3a:62:47:3b:d3:21:3d:ef:28:09:89:
3f:16:88:cd:da:cb:69:5f:bf:4d:d8:d7:0c:a0:a5:
78:ca:06:ae:52:93:63:9d:16:cb:ea:d1:68:39:46:
da:3f:98:fd:3b:58:84:53:eb:d6:fa:50:fb:6b:5e:
4a:37:7b:e5:97:87:f7:2d:5a:a7:5d:fe:64:96:ac:
4a:ef:f5:b5:4c:f6:a3:66:6b:06:bf:40:f2:b1:b0:
d7:64:cb:4a:e9:78:81:e1:7e:4f:be:97:65:cf:c1:
dd:f0:ff:6a:fc:fb:99:be:50:65:ab:21:92:2d:ac:
72:3b:19:56:7f:2a:8e:e3:fb:fb:ff:b6:b9:70:d6:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FA:76:D6:D0:D1:A0:BC:77:5D:94:18:09:F9:8A:42:BA:B8:07:DE
X509v3 Authority Key Identifier:
keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f2:06:c5:08:67:3d:0c:ea:c6:ba:11:c4:75:80:c6:a8:1a:
ad:bc:b9:d2:0a:6a:02:56:02:bf:99:78:89:6f:59:d0:53:68:
4e:f0:ca:ac:0c:02:c7:ab:f7:e8:96:89:ad:70:42:b8:af:d5:
ed:58:e3:ec:40:7d:fd:37:17:a0:88:53:8e:c3:df:b0:98:c8:
d5:61:6a:56:57:0d:15:29:4a:e7:c1:46:bd:b2:89:2a:e4:c3:
43:f4:82:f4:a6:4c:d1:ba:69:5c:7b:74:d4:ca:c8:88:31:01:
22:ce:5b:a2:34:8c:1d:0d:65:24:03:3c:6d:af:c9:35:dc:3f:
55:9c:0a:aa:14:28:73:e0:77:8b:c4:80:c8:11:40:b1:1f:7f:
50:7b:49:53:bf:9d:45:07:0c:bb:76:da:41:0c:52:36:e9:cd:
3a:90:45:81:67:bd:74:31:e0:b7:a2:8d:2a:3c:5f:ad:95:9b:
86:fb:19:c5:e9:95:86:10:85:3e:19:f7:dd:93:bd:e8:70:14:
3d:97:d4:d1:04:e2:bc:e2:e6:71:23:81:7b:79:b9:27:f2:dc:
76:d1:55:df:df:c6:40:8c:26:1f:0b:a7:5c:1e:06:ca:29:dc:
50:06:2f:61:9b:34:8a:4d:90:8b:d1:96:3f:68:e1:c2:9d:f2:
ed:3d:68:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:56:35 2025 by rpki-client