Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
File: A-aapu504w79uBm5yxvyHnhub6M.mft (raw, json)
Hash identifier: y143Fm8Ole+Ju0jD0BO6qkb4zm5vFZUa+3zdCWj/td4=
Subject key identifier: 10:8F:82:12:4D:82:93:3D:19:60:30:BA:27:E5:69:3F:80:7A:13:1B
Authority key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
Certificate issuer: /CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Certificate serial: 019643688A5C8C778061CCD06702BEA35552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
Manifest number: 0391
Signing time: Thu 17 Apr 2025 11:00:46 +0000
Manifest this update: Thu 17 Apr 2025 11:00:46 +0000
Manifest next update: Fri 18 Apr 2025 11:00:46 +0000
Files and hashes: 1: A-aapu504w79uBm5yxvyHnhub6M.crl (hash: FEql/rmZVNW5kIUpt61o9svnC6KdFz4tsgUDzVVEvBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:68:8a:5c:8c:77:80:61:cc:d0:67:02:be:a3:55:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Validity
Not Before: Apr 17 11:00:46 2025 GMT
Not After : Apr 18 11:00:46 2025 GMT
Subject: CN=108f82124d82933d196030ba27e5693f807a131b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:73:c5:44:bc:80:df:98:a9:59:8c:9e:bd:7b:
1a:b6:3f:1d:ce:82:cf:c9:48:e2:ac:e2:08:ad:b4:
32:1a:4a:e2:a7:92:62:60:fa:18:65:e4:91:ad:99:
42:30:68:ee:63:75:b7:b7:3f:a3:77:0e:d3:97:51:
f3:1c:7f:d8:81:54:c0:71:e7:73:ad:21:da:68:62:
97:41:32:fe:e4:cb:a9:79:06:40:c7:90:ef:f8:51:
2a:e0:73:3e:36:e5:af:6b:d0:8e:a9:27:8f:ce:3e:
05:27:da:23:c1:69:a3:79:83:11:66:cd:7d:51:fb:
98:57:c5:c9:1d:9e:ff:46:31:af:c8:b7:5e:ae:cf:
47:52:3d:f1:58:e3:dc:f6:0f:8a:09:e6:d2:b4:b9:
4f:4e:a1:b9:66:a1:7d:fd:f7:3c:61:ca:3d:a7:94:
d7:7a:49:7f:10:6f:bf:24:5f:3e:39:25:5c:08:af:
2d:dd:f8:32:fa:1c:04:a8:19:e2:2c:d9:b8:37:bb:
e8:de:64:f7:43:e7:1f:04:ad:57:61:78:1e:05:15:
de:fc:af:ce:b1:df:47:99:00:b2:aa:90:e5:ba:ae:
9d:8a:bd:f3:41:b2:65:82:00:06:cb:6a:b1:5c:60:
a0:f0:85:42:05:82:e9:76:e8:1d:ba:28:c1:87:eb:
64:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8F:82:12:4D:82:93:3D:19:60:30:BA:27:E5:69:3F:80:7A:13:1B
X509v3 Authority Key Identifier:
keyid:03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:87:9d:de:2c:63:7e:10:ca:34:6e:44:08:d3:3f:6c:dd:bc:
db:98:18:42:6e:34:ec:9b:2e:1a:67:83:6d:ca:05:95:f4:c6:
ff:f0:7b:17:fe:86:f2:9e:e7:01:22:e1:6e:e2:2b:36:f0:77:
ec:e3:f5:b6:df:6e:80:0e:20:73:b1:65:56:34:de:ff:3c:c3:
c4:19:ee:49:38:e0:f4:0d:18:5f:78:14:81:bb:17:cd:dc:1e:
0a:b5:a3:2a:10:c0:f7:b1:c9:66:b5:bd:89:6e:ec:08:a6:10:
2c:cb:30:af:a8:ec:9a:64:ef:32:38:9f:ca:5d:7f:0c:7e:43:
eb:a7:3d:1d:d8:70:15:da:18:1b:1b:dd:09:bb:96:7b:71:a8:
f5:a0:5f:b6:24:3f:f1:a3:5f:c5:4d:a2:12:94:34:3d:cb:d5:
b8:bc:fe:08:bf:89:73:b4:76:55:8d:00:fe:e1:9d:2f:0b:9f:
bd:97:6a:dc:bf:86:88:8b:3e:c2:2c:d8:38:5a:d0:62:8d:12:
ef:3e:84:04:bf:db:13:db:c2:75:83:89:f8:99:d2:ac:5a:9a:
fd:b1:ff:4f:a9:47:cc:e2:c4:56:a1:c3:f7:10:25:4c:7e:0d:
e7:5b:23:b2:15:89:2b:b8:7c:9f:57:f2:00:78:97:c3:fe:7c:
47:4b:af:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:59:34 2025 by rpki-client