Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
File: aBnbgbSauhKxgQyzopnu5GMt1yA.mft (raw, json)
Hash identifier: gL4+/wU5iCjcODa5jMX8z/pPe2Py43G8APVNwG4QRIU=
Subject key identifier: AE:62:69:36:26:41:8C:B8:36:8D:78:23:6E:58:D8:D5:06:FB:C4:D8
Authority key identifier: 68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
Certificate issuer: /CN=6819db81b49aba12b1810cb3a299eee4632dd720
Certificate serial: 01962D188465B7DD5BE5D8BEEC574B458500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
Manifest number: B9
Signing time: Sun 13 Apr 2025 03:01:43 +0000
Manifest this update: Sun 13 Apr 2025 03:01:43 +0000
Manifest next update: Mon 14 Apr 2025 03:01:43 +0000
Files and hashes: 1: EUMDV_UDCQxt2Q9g7Ql8VQtC-w4.roa (hash: 4NT4MxUUdEci/yqv7me2MCFqkfGu8GvZgQ5eOHEJEB0=)
2: aBnbgbSauhKxgQyzopnu5GMt1yA.crl (hash: cd98RQsglnM6wVM9g/BZa4ZddGPrWw+u1Bqeot/WUok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:18:84:65:b7:dd:5b:e5:d8:be:ec:57:4b:45:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6819db81b49aba12b1810cb3a299eee4632dd720
Validity
Not Before: Apr 13 03:01:43 2025 GMT
Not After : Apr 14 03:01:43 2025 GMT
Subject: CN=ae62693626418cb8368d78236e58d8d506fbc4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:21:f9:d4:8e:01:1f:8c:6d:17:03:93:25:
3a:54:af:ae:b4:65:f7:2a:7d:4e:cf:c6:b0:ab:df:
ab:ca:80:69:c2:50:ec:6e:4c:f6:4a:1f:6d:53:e8:
db:41:56:b5:0e:97:31:be:b2:5b:c4:d4:81:b5:4e:
c7:25:ec:6d:6b:a7:91:cd:b7:ce:31:3a:9c:a3:a6:
37:33:b0:dd:39:5f:97:6d:e6:d1:90:3b:03:a2:f7:
3c:9f:f4:86:bd:2b:ae:32:51:cd:57:08:f0:82:b1:
84:95:c8:29:4b:bf:0d:ee:1f:6b:bb:b9:b3:1c:d6:
b5:e2:95:cc:49:0b:d0:30:1e:f7:d9:8a:2f:7d:0c:
ef:86:6f:91:f2:35:d4:f3:6e:60:25:ee:f4:75:e4:
0f:e8:75:a2:a8:32:b7:f7:5e:c0:69:72:3f:74:18:
1a:2d:ec:40:ad:d8:f4:30:3b:90:8d:d9:be:43:63:
d7:8a:0c:18:33:10:99:44:22:06:77:67:84:73:49:
f8:a4:f2:32:13:99:52:8e:6a:dd:1c:bc:94:fc:84:
67:cd:5e:b9:b4:85:92:92:91:0e:52:66:42:9f:70:
11:7e:b1:2c:2d:2a:15:52:6c:f4:e2:9b:a6:a2:c1:
25:da:ed:2a:24:1e:f0:e4:94:5b:c6:d3:0c:c6:3e:
1f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:62:69:36:26:41:8C:B8:36:8D:78:23:6E:58:D8:D5:06:FB:C4:D8
X509v3 Authority Key Identifier:
keyid:68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f0:81:5b:53:0f:c1:45:19:92:54:c1:7a:3e:b0:b4:4c:c7:
74:ae:e0:97:cb:71:49:8b:89:ae:56:ae:1a:22:2c:d7:fc:d3:
93:70:88:83:41:e8:9d:b0:92:6e:a1:5f:7f:e2:1d:f3:bf:a5:
83:0c:bc:ed:fe:1b:8c:2a:1f:84:e9:67:14:f0:82:21:2a:62:
59:4a:8a:5f:2f:c9:ae:22:a9:d1:bb:83:c9:82:74:05:cc:e9:
14:0b:5b:bf:1d:5f:10:7d:26:bd:73:c6:e0:8e:4e:36:ac:88:
b5:1a:df:e7:14:cc:92:18:30:5e:ad:a3:0c:56:ab:a8:28:e4:
84:1f:34:82:24:df:29:aa:8f:3d:fa:08:96:6f:1f:06:4f:07:
7f:7d:c3:49:a3:f6:32:1f:33:75:90:2f:9d:af:93:db:14:a2:
c2:97:89:22:ae:65:a2:be:19:5c:d7:ee:78:af:9d:8b:ba:0c:
78:b9:05:81:73:9c:47:10:c6:c9:eb:d0:47:65:d3:46:36:de:
e8:84:6a:2a:b5:33:13:df:1f:1e:2f:40:34:a8:60:30:ff:de:
07:5c:1b:77:09:42:30:23:be:cd:09:94:53:41:24:f2:a2:8d:
f7:a5:9f:8c:35:44:37:dc:b6:4b:ec:8e:2a:da:35:7f:39:aa:
21:3e:08:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:14:46 2025 by rpki-client