Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
File: aaTWkWuTFZqoCYSps3dGg7tVDr0.mft (raw, json)
Hash identifier: /ZkIagsyspCJS12OOIxXSTlC2lk/fbEeJn2O7HR9P5A=
Subject key identifier: 59:FA:E7:3F:B8:B5:5B:DA:11:EF:36:26:55:0F:27:2D:76:4E:74:C7
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial: 019650ECE447D1A97E196065794CB927070C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
Manifest number: 123E
Signing time: Sun 20 Apr 2025 02:00:24 +0000
Manifest this update: Sun 20 Apr 2025 02:00:24 +0000
Manifest next update: Mon 21 Apr 2025 02:00:24 +0000
Files and hashes: 1: 0dT9gx4qOXkpqZlNkbev_-uBl0c.roa (hash: AhSSJUvXXS4MCpfi02OS/Sl/WMScliKSAGKKpGr/omg=)
2: Jqr-CXHYnZmzg_xVdImaXbMmVEI.roa (hash: XvpOhA/u1tpu0r7xTILje32qKTHGeywG7gPta8XZExU=)
3: S7cvUB4j_UAWLlorKkQpKplvSek.roa (hash: BzDMJKCxDcsJF5G/pnwJpmaeHc/VSanQaPg+mRpgeIU=)
4: aaTWkWuTFZqoCYSps3dGg7tVDr0.crl (hash: /gnOZZbbsh7T7AjTrTvkHtePbeJG21EyUfdenTcXcZw=)
5: p5Pxp-2R2mpxd_TdGf_xD9MyhUg.roa (hash: 8XfSlLN4HMzOCIW1k555GHmyKjvtxd9c3WvZ5/ZNc5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:ec:e4:47:d1:a9:7e:19:60:65:79:4c:b9:27:07:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Validity
Not Before: Apr 20 02:00:24 2025 GMT
Not After : Apr 21 02:00:24 2025 GMT
Subject: CN=59fae73fb8b55bda11ef3626550f272d764e74c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:f2:7e:38:f7:37:b3:40:91:53:90:ea:05:
df:13:16:a1:d1:70:e9:50:f3:7b:a8:02:d0:17:aa:
c3:e1:44:50:33:e8:58:fe:f9:30:d9:f3:96:05:88:
97:f0:28:ba:88:e2:0c:8d:d5:7a:53:4d:12:98:90:
1f:b1:2b:e5:64:ae:c9:d3:2f:c4:e6:8c:92:85:9e:
20:82:10:9c:64:8f:30:71:e0:d6:2f:d1:59:59:43:
8d:9e:d5:c6:71:49:71:34:df:c1:ca:de:4a:15:d3:
6e:89:d6:88:a5:c6:9a:08:16:c6:8d:e9:0a:61:ad:
10:f9:80:95:e3:8c:26:5c:3e:99:cf:5e:e6:b4:18:
b4:41:52:1c:f5:19:e4:87:7c:85:89:7b:c5:59:01:
50:b1:6a:69:72:7d:23:e7:95:22:fd:53:3d:d4:6f:
91:a9:e3:28:6b:34:e2:ab:3f:26:27:f9:a3:14:62:
56:09:91:86:fd:ee:00:41:f9:ac:0b:4e:2c:12:cd:
2d:22:3d:c9:36:9e:16:51:b1:5f:03:f0:e6:6b:8b:
c7:a5:aa:4b:39:51:b7:03:88:ed:2a:2f:ab:1a:2a:
21:dc:52:5c:c9:5a:e7:6f:0e:ad:35:79:93:a0:b8:
17:7d:13:ab:06:ca:04:05:23:20:0f:72:0f:9c:ef:
54:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FA:E7:3F:B8:B5:5B:DA:11:EF:36:26:55:0F:27:2D:76:4E:74:C7
X509v3 Authority Key Identifier:
keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:71:d5:b4:b5:8b:ea:05:b2:9c:56:88:9b:9e:6a:4d:c0:65:
db:15:7f:a1:ed:d3:d7:8f:eb:b2:12:05:18:30:bc:55:43:7c:
e6:82:a1:00:a1:d8:9f:5e:08:5a:17:6c:ea:19:84:28:fd:88:
d4:03:f0:92:b8:19:74:c5:c8:13:14:21:cd:6e:03:69:cf:86:
6d:47:3f:e6:8e:5b:f1:1e:aa:1c:e2:01:1e:7c:b3:99:70:60:
91:ee:85:82:b0:97:e4:c1:1d:08:55:61:a7:0d:75:e7:f8:5a:
fa:0d:08:a1:fc:ed:1e:61:d2:65:eb:90:4f:9e:46:df:da:b5:
93:44:46:94:77:2b:6d:28:8f:3f:0e:ff:10:12:33:23:a6:d9:
b2:44:90:a8:11:21:e8:40:93:8e:7a:5b:ca:25:63:61:b4:0f:
9b:b6:78:fc:c5:ad:8d:54:0a:47:1f:e1:b0:da:91:f2:fa:f7:
58:fd:d9:b3:9c:c7:53:3e:1d:f7:d0:bf:9a:d5:1d:53:57:c3:
0b:29:08:07:99:b8:9a:85:90:8e:b7:90:77:9f:ef:58:8c:61:
f2:31:e6:08:c9:39:66:e8:8f:47:ed:46:23:05:2c:1b:30:85:
b5:03:b7:b6:07:ea:79:4f:d4:b9:1e:0c:18:a1:34:37:1e:b5:
34:04:10:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:18:54 2025 by rpki-client