Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
File: aQomMkmEfPlzRHQiE2RPkpvqqZc.mft (raw, json)
Hash identifier: A1MERU0BrWBwiYGrUih3efQMi8IqfO7mLbmJn3gL9zg=
Subject key identifier: 00:E9:AA:59:3E:4D:C5:76:F9:3D:35:6B:B2:E7:AD:C5:27:23:58:87
Authority key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
Certificate issuer: /CN=690a263249847cf97344742213644f929beaa997
Certificate serial: 019638403F4BDF2F4DEC0E3498F7BB4F745D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
Manifest number: 074E
Signing time: Tue 15 Apr 2025 07:00:56 +0000
Manifest this update: Tue 15 Apr 2025 07:00:56 +0000
Manifest next update: Wed 16 Apr 2025 07:00:56 +0000
Files and hashes: 1: DY21Bg3oUbtzm77wQkCwRHIkQQk.roa (hash: qZIMcnP47zIIcLpWesPleUJ2XdB9zCYyYyzYWyBj/nk=)
2: aQomMkmEfPlzRHQiE2RPkpvqqZc.crl (hash: HDThMQSQhHig/7epBhB2imjFcILUp4hcRUkCR7FHxCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:40:3f:4b:df:2f:4d:ec:0e:34:98:f7:bb:4f:74:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690a263249847cf97344742213644f929beaa997
Validity
Not Before: Apr 15 07:00:56 2025 GMT
Not After : Apr 16 07:00:56 2025 GMT
Subject: CN=00e9aa593e4dc576f93d356bb2e7adc527235887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:b4:c3:45:8b:8d:61:cd:b3:a1:64:9f:41:
2b:42:5b:78:55:0f:0c:a8:0e:de:48:2c:e9:c2:b0:
df:d4:65:71:93:eb:05:b3:c5:50:07:28:1f:7c:11:
1b:b2:7a:09:a8:2c:02:6e:fc:c6:e9:cc:f3:44:02:
de:7f:35:de:82:9a:51:07:ce:a9:41:18:60:bf:d3:
36:de:dc:b0:b6:e5:92:a4:2f:3b:5b:8f:a4:cb:66:
48:db:45:d6:3b:10:47:cf:3f:c1:91:63:af:a8:e1:
3f:79:f5:57:25:cb:eb:c2:f0:ed:ba:94:fa:f9:73:
e9:bc:73:25:24:e1:ff:b1:76:81:90:2a:de:79:ce:
4d:d0:c1:f5:7c:92:3a:7b:12:99:b3:14:5b:7d:52:
3d:3f:1f:fa:39:01:6a:06:e7:0b:a3:db:42:2a:a4:
5f:93:f6:5b:81:d3:c0:bf:e4:ce:89:44:09:0b:7c:
35:a9:9b:e7:23:d5:95:e9:f6:db:e3:13:3b:49:5a:
72:2a:bd:87:ae:fd:47:69:ad:97:a8:a4:42:ba:2a:
a8:33:5a:b5:d3:3c:fa:ea:04:57:dc:69:51:4a:84:
57:84:64:55:b0:96:85:f2:5e:94:85:b9:9d:11:cf:
d4:69:e5:d5:57:58:36:6b:a7:0f:b5:c9:fa:b1:51:
ad:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E9:AA:59:3E:4D:C5:76:F9:3D:35:6B:B2:E7:AD:C5:27:23:58:87
X509v3 Authority Key Identifier:
keyid:69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3b:0e:94:19:ab:05:ea:f4:52:35:ed:4a:01:fe:90:83:08:
80:30:ae:fc:5a:1f:77:76:33:0b:ee:69:9c:5a:57:82:b1:24:
a6:0e:cf:ab:39:6d:a3:b3:01:62:72:fc:a1:72:50:c7:07:05:
07:d6:bb:81:d6:ad:62:8a:d5:07:0c:4a:24:bd:ee:31:39:ba:
e9:46:89:0f:f7:0c:bd:97:1c:c7:58:7b:9f:df:de:e9:4c:7c:
4e:42:b3:2b:30:ad:f2:b5:72:ca:d7:a0:22:ae:8b:4d:4f:d0:
e9:25:45:39:4e:ce:ba:9e:da:ae:d0:fc:06:8e:c1:ef:51:ba:
f0:28:bb:06:f8:d2:b7:3b:bc:6a:94:de:78:03:cb:17:1d:ce:
94:74:c1:68:0f:ab:7b:34:1b:24:30:13:de:4f:7e:7a:83:a6:
82:fd:7c:b8:45:2c:2c:7a:2a:a5:df:d4:a0:62:dc:e2:bb:29:
7e:b9:6d:71:b4:96:a0:1c:87:4a:63:b6:71:d2:e4:26:89:24:
24:2d:1d:38:b6:97:3e:7b:32:98:32:67:1a:b5:9c:2d:14:21:
80:fa:ed:3f:cb:43:2f:cd:85:25:87:dc:3a:3e:40:9e:80:56:
43:f5:db:73:81:39:c2:55:93:2b:f0:e0:1e:83:f8:33:fa:92:
d5:bc:5f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 15:56:47 2025 by rpki-client