Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
File: aaTWkWuTFZqoCYSps3dGg7tVDr0.mft (raw, json)
Hash identifier: 4G/HKR3KgU7RT2A9tIwIIBbRgHjGA2iHEsnV9Cr4V6I=
Subject key identifier: 16:CB:7B:4A:53:DE:0D:72:98:C0:82:81:6B:02:80:6F:A1:8A:3E:D9
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial: 01958FCEEBCBF357FD84311BF61DF944F459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
Manifest number: 11DA
Signing time: Thu 13 Mar 2025 14:00:57 +0000
Manifest this update: Thu 13 Mar 2025 14:00:57 +0000
Manifest next update: Fri 14 Mar 2025 14:00:57 +0000
Files and hashes: 1: 0dT9gx4qOXkpqZlNkbev_-uBl0c.roa (hash: AhSSJUvXXS4MCpfi02OS/Sl/WMScliKSAGKKpGr/omg=)
2: Jqr-CXHYnZmzg_xVdImaXbMmVEI.roa (hash: XvpOhA/u1tpu0r7xTILje32qKTHGeywG7gPta8XZExU=)
3: S7cvUB4j_UAWLlorKkQpKplvSek.roa (hash: BzDMJKCxDcsJF5G/pnwJpmaeHc/VSanQaPg+mRpgeIU=)
4: aaTWkWuTFZqoCYSps3dGg7tVDr0.crl (hash: Rw92Va08APQkrjEgedjo+oJYICz57fwrMy9p4uWKKj0=)
5: p5Pxp-2R2mpxd_TdGf_xD9MyhUg.roa (hash: 8XfSlLN4HMzOCIW1k555GHmyKjvtxd9c3WvZ5/ZNc5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:ce:eb:cb:f3:57:fd:84:31:1b:f6:1d:f9:44:f4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Validity
Not Before: Mar 13 14:00:57 2025 GMT
Not After : Mar 14 14:00:57 2025 GMT
Subject: CN=16cb7b4a53de0d7298c082816b02806fa18a3ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:bb:75:f6:59:03:28:1f:8d:ea:11:8d:21:
32:c1:49:6f:5b:1b:82:bb:05:aa:f8:db:7a:93:9d:
d4:97:da:9c:6b:80:8b:bd:5e:e6:1d:05:44:a0:76:
50:3d:28:e5:a4:4b:b2:26:46:e1:5b:fd:2c:43:39:
07:23:40:b0:bf:b7:1f:0d:ca:c4:53:b6:bb:4f:0d:
93:cc:b6:a3:1c:1b:d6:d1:23:c6:9d:d5:28:cd:bf:
9d:72:82:29:2c:3b:98:30:95:ea:57:f8:d2:68:80:
4d:40:42:39:b7:fd:c0:da:8d:fb:a5:96:8d:98:f8:
56:05:7a:3a:67:f4:0b:ff:12:a1:a6:d2:74:b3:db:
cf:c9:b9:de:3d:08:3a:07:d3:f2:5f:80:be:7a:5d:
bd:58:ca:ce:f7:92:7f:4d:00:e6:7b:82:9e:fc:e5:
8a:e2:22:9b:ab:f9:9a:e3:f9:2b:98:30:62:74:89:
f4:4f:d9:40:53:2f:2d:c0:a0:bb:77:8c:d9:b6:4e:
0d:1b:9c:cf:16:2d:a8:48:44:ac:20:6b:1e:51:c8:
a9:f9:6e:67:c9:9c:6b:84:a9:cc:fc:4f:7f:1c:9b:
64:92:84:dc:c4:5b:85:80:a6:00:05:17:b7:6d:a0:
9d:ed:f4:2c:83:cf:85:07:ce:a7:67:e6:fc:cc:9f:
9c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CB:7B:4A:53:DE:0D:72:98:C0:82:81:6B:02:80:6F:A1:8A:3E:D9
X509v3 Authority Key Identifier:
keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:95:45:0d:17:bb:a1:ac:e4:f5:5a:76:4a:b4:a6:7c:54:77:
79:01:b2:1a:cb:d6:92:9f:83:aa:d3:c0:d0:3d:30:10:fd:b5:
f2:a4:62:60:92:85:1d:d0:c6:54:86:b5:21:aa:0c:8c:17:5d:
e6:32:fa:7f:7e:9e:9d:33:a4:8c:34:a5:44:a6:39:5f:b3:33:
dd:83:26:ce:b0:02:9d:de:09:e8:91:34:da:af:b2:52:a8:99:
62:07:fd:a6:01:69:99:e0:a7:12:ff:41:50:16:d7:c9:fc:15:
a9:89:50:ae:24:28:d3:3d:8b:b3:ca:6a:e2:17:b1:cc:83:c2:
d9:5c:18:22:a4:54:03:df:ff:59:3d:cc:22:2b:bc:6d:e3:f3:
7c:96:7c:2e:aa:df:30:3e:45:53:f9:27:c8:14:2d:ba:4b:ad:
e3:1a:1d:5b:c5:57:eb:b2:ed:94:25:bb:ed:77:c7:46:99:cf:
e3:2a:fd:ef:a8:a1:c9:e5:76:fb:49:f2:b0:bb:df:3a:1d:37:
26:bb:3e:d6:a9:31:4c:17:74:11:f8:fe:85:6f:30:53:07:79:
12:98:e4:d9:9b:39:8e:7e:f6:6c:00:f5:f4:80:bb:0f:2e:72:
37:9b:d6:ef:ce:a8:b3:2f:9f:a3:f8:bd:08:68:ab:cb:e7:9e:
d4:5d:12:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:24 2025 by rpki-client