Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
File: aQvbGIma-yf-H_eAUW_MC5PIuA0.mft (raw, json)
Hash identifier: XNEDv/p/4YyzPqjI4CTIDpeve/v5ZlUmYn6aV6Vd70s=
Subject key identifier: 38:29:79:86:F6:F9:8C:AC:2B:F5:B6:29:06:5A:52:91:8A:E5:16:4A
Authority key identifier: 69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
Certificate issuer: /CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Certificate serial: 01963CC1683C64DC4BE98982372A999ADC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
Manifest number: 0679
Signing time: Wed 16 Apr 2025 04:00:30 +0000
Manifest this update: Wed 16 Apr 2025 04:00:30 +0000
Manifest next update: Thu 17 Apr 2025 04:00:30 +0000
Files and hashes: 1: 5qlyqHqHN9fm7YIJbWQAFC8mvBE.roa (hash: i7ncddTAht6A90LZTtfDRpJSDX/ZI6t1vgckOHtmIjg=)
2: aQvbGIma-yf-H_eAUW_MC5PIuA0.crl (hash: 7Q6UWjYBVcW7bNQpOMZr5HddjpVMQfK1IvEfN4Uqg/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:c1:68:3c:64:dc:4b:e9:89:82:37:2a:99:9a:dc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Validity
Not Before: Apr 16 04:00:30 2025 GMT
Not After : Apr 17 04:00:30 2025 GMT
Subject: CN=38297986f6f98cac2bf5b629065a52918ae5164a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3f:c7:30:d1:ab:a2:dd:23:52:e2:60:10:20:
da:48:c4:d0:6e:9d:24:50:64:2c:40:52:df:b9:9a:
ef:8f:d8:31:a9:33:75:03:10:9b:d0:0a:6f:30:4c:
f7:2f:4e:57:cf:fa:7b:76:84:b9:ea:cd:b6:49:08:
13:80:c3:65:5c:9f:21:93:23:a0:e4:1e:fa:46:c9:
53:97:f9:da:54:9c:03:c5:ee:3e:9e:87:47:0d:a5:
32:0b:2e:04:36:77:a6:91:ae:41:6e:28:66:c0:37:
36:22:9a:6d:16:f4:84:a4:c0:2f:8a:29:9c:3f:2d:
20:e5:5f:03:17:c7:64:48:35:1d:f4:85:ad:7d:1c:
45:83:fc:eb:96:3c:e9:8b:e4:6b:6a:5f:38:df:bb:
70:f7:fd:9b:d4:08:4b:40:da:66:65:62:66:b9:41:
44:d9:19:f2:01:41:2e:19:ec:bf:32:48:06:aa:5a:
51:3c:7d:17:e5:02:9e:58:e1:30:44:04:8d:a9:ad:
df:88:aa:b5:ac:20:2e:cc:75:2a:19:0f:4f:9f:6d:
27:25:a5:68:c5:fb:b6:b5:9c:25:99:8c:97:d5:dc:
66:cb:19:20:a2:5e:5b:c3:8f:88:4f:50:3f:38:68:
34:a7:20:b1:6f:c8:85:00:08:46:80:8b:03:ac:79:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:29:79:86:F6:F9:8C:AC:2B:F5:B6:29:06:5A:52:91:8A:E5:16:4A
X509v3 Authority Key Identifier:
keyid:69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:aa:c8:e1:f2:9d:6f:30:2b:50:14:b1:9c:b6:68:0d:1c:65:
a9:51:4e:07:8e:ba:b0:cf:c1:1a:89:2c:f7:2c:66:85:e7:c6:
2e:74:99:49:65:ed:09:7f:0d:95:3b:9a:85:2b:be:a3:55:5b:
44:ca:2a:3f:b7:23:34:35:83:51:cc:24:ff:a0:00:73:ef:8d:
eb:e9:28:f9:0f:bc:5a:f7:e9:8b:e2:d0:5f:84:a7:13:e8:65:
1a:5a:b6:7d:6c:a7:99:d8:f1:9b:11:bc:11:c9:61:81:2f:5d:
9d:7b:f8:34:a5:6a:30:15:62:2b:aa:c2:b4:f7:5c:c3:0e:61:
ff:e4:54:33:a9:0e:c0:a9:0c:c4:9b:41:50:20:1e:7f:af:0a:
95:6e:1a:ca:4b:b2:4b:8e:b9:84:b4:76:69:99:78:80:56:d4:
42:33:bb:28:c7:8c:8d:f5:cd:07:0c:32:ec:ee:16:f1:87:b5:
09:bb:9d:25:6a:53:41:56:75:d6:f3:44:2f:13:16:f7:c9:ef:
bf:57:0b:69:4d:d6:ec:32:dc:7a:00:87:b0:33:c8:b3:68:91:
1d:5f:ed:74:ec:68:b2:e5:45:fd:70:81:db:e4:42:1e:1e:d7:
17:55:58:72:96:4f:23:10:5f:84:27:f7:ad:ea:ec:67:10:18:
6d:46:52:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:19:40 2025 by rpki-client