Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: SVIYSKzFPTeve1gUpKqlB0fCQpt2gx6HXIBkIftZk2k=
Subject key identifier: 01:67:24:9A:F0:D1:A7:6E:DE:DE:17:3C:5B:CB:44:C9:5A:90:BA:99
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 01960FB28E18224EB5ABB558EDF73BDADEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 14DB
Signing time: Mon 07 Apr 2025 10:01:21 +0000
Manifest this update: Mon 07 Apr 2025 10:01:21 +0000
Manifest next update: Tue 08 Apr 2025 10:01:21 +0000
Files and hashes: 1: 0bhoJ8-ddvBioZtRzgKy-myfB6s.roa (hash: BzGw1+qOUMY/+nu/XThUq8VubujtNGZA+HvkvUvIYPc=)
2: FoYoEZG4yQ-zmia58D3kbXTMFyI.roa (hash: VDgVe2Q/qFZmB+xrtdC5B5lAUUngOslsx2GFlKLDYrg=)
3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: Go3M/v+9tuOnP3i2Am3JFffyFda8o2FJdWa7n2BlUfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:b2:8e:18:22:4e:b5:ab:b5:58:ed:f7:3b:da:de:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Apr 7 10:01:21 2025 GMT
Not After : Apr 8 10:01:21 2025 GMT
Subject: CN=0167249af0d1a76edede173c5bcb44c95a90ba99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7d:73:d8:2c:64:8c:8d:88:b3:e9:55:d8:8a:
b9:de:15:03:b2:da:1b:bc:7b:1e:fc:93:65:96:0b:
36:c8:b2:02:f9:44:01:35:8f:6d:08:ca:f4:24:57:
98:af:2e:6b:92:90:5c:e5:ed:9f:2e:1a:8b:9a:7c:
41:6f:59:0d:bc:43:00:00:08:77:cf:70:8a:47:7a:
ec:7d:cd:7a:c0:71:1f:31:2e:2e:56:de:aa:69:15:
7e:1d:02:2e:f3:59:8e:1d:17:4b:a1:5c:95:37:0c:
8c:10:11:5a:61:d8:ad:47:89:24:dd:dc:8c:9c:7e:
36:ac:18:17:ca:e1:06:3d:81:11:06:38:0e:05:32:
f8:b1:49:bc:1b:5a:4a:37:4d:52:53:2e:0d:4d:93:
66:1d:73:12:bc:cb:d1:5e:1c:68:9e:a2:d6:20:0a:
e8:1b:fb:bb:1b:d6:16:c8:fe:e6:c4:18:bd:90:50:
f1:e1:e9:83:f8:59:c4:b9:67:f4:3f:f3:bb:cd:50:
f6:05:11:bb:b6:a2:42:a9:61:e0:70:a1:cc:83:8b:
e5:62:4c:41:f6:02:04:22:a8:11:7e:30:61:84:89:
25:40:9e:94:20:a6:95:9a:47:52:5a:ae:33:0c:a2:
2d:f7:64:0d:b3:bd:42:b6:cf:c0:0b:3a:2f:47:38:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:67:24:9A:F0:D1:A7:6E:DE:DE:17:3C:5B:CB:44:C9:5A:90:BA:99
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:70:75:ab:3c:2f:25:37:99:b7:ef:db:9d:91:3f:27:45:1d:
aa:5f:75:81:8b:8a:e9:9a:e9:73:68:22:35:8f:c7:cc:3e:30:
64:f5:ca:ee:fe:21:57:47:9e:77:dd:98:24:0c:4b:92:66:4e:
07:29:61:48:3a:a1:3f:f8:f4:7c:8d:73:e0:0f:21:ee:b8:40:
fb:c3:4d:37:00:a5:f3:cd:74:79:e1:1f:e1:d2:db:3b:8d:2a:
23:69:cf:eb:c4:80:a0:ac:1c:d4:95:f1:59:4b:ad:6d:00:b9:
c2:7d:04:fd:70:de:8f:00:d5:18:fd:35:fe:61:68:12:4f:75:
06:74:fe:c4:0a:00:24:76:94:0a:f4:53:58:bb:0c:ce:1e:47:
92:8e:4e:19:83:80:63:f1:76:ee:6f:64:e8:b2:93:2d:99:e2:
cd:1f:f7:8c:f3:3d:38:8f:90:8b:c5:99:cc:7e:9b:31:57:c2:
b3:87:1b:87:3b:80:f2:22:26:23:14:84:17:bd:44:99:32:e9:
b6:ba:b3:d2:86:4f:62:85:1e:6c:2e:b8:74:fd:d8:ac:88:bd:
a8:d4:37:a7:a4:1d:f0:40:a0:e1:05:c4:eb:07:04:25:9a:07:
85:42:6d:6e:c6:57:14:1a:e8:e5:d8:91:52:90:48:ae:25:4b:
8e:62:2f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:51:56 2025 by rpki-client