Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
File: AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json)
Hash identifier: ol87RT7TqM0GxTi66c/9KzkjYxzXDINxxKX8C31QIGE=
Subject key identifier: DF:66:28:56:10:3A:3A:5D:BB:39:8F:13:5B:A3:F7:15:C3:85:35:04
Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Certificate issuer: /CN=004cf07c7d059302b56066aaf6cbeec135186a44
Certificate serial: 01965914EF9FADB5102D54610F6CB6F950E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 16:01:06 +0000
Manifest this update: Mon 21 Apr 2025 16:01:06 +0000
Manifest next update: Tue 22 Apr 2025 16:01:06 +0000
Files and hashes: 1: 0JN2vyzDQDc8hqznZuHYx59iVgw.roa (hash: f3XiZFi6nbVWq/4L3lB2rfwMDECeZB1pzVtF3apTcoA=)
2: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: cn0XFu8ZRuHbZleBi6UOzar4jo2uTAHQtn1CLCFMP9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:ef:9f:ad:b5:10:2d:54:61:0f:6c:b6:f9:50:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44
Validity
Not Before: Apr 21 16:01:06 2025 GMT
Not After : Apr 22 16:01:06 2025 GMT
Subject: CN=df662856103a3a5dbb398f135ba3f715c3853504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b8:32:bf:33:c1:ac:a1:3e:f2:41:dd:f1:55:
70:db:08:42:95:c9:fa:0e:46:3e:b8:6a:85:ea:93:
a8:25:eb:3c:ae:99:d1:d6:69:1b:05:fa:3a:49:67:
0f:40:b1:a1:2b:b7:9e:02:99:a7:a7:9c:06:33:bc:
df:e1:03:c3:7a:d5:22:8f:36:a3:7d:6b:40:84:64:
e3:f8:ff:5c:41:87:66:33:38:06:2c:d6:82:a2:5d:
2e:90:e4:27:96:71:5e:3b:8d:c6:3e:2f:45:3c:3d:
d9:3c:28:b3:34:81:64:84:14:5a:4e:d0:a0:60:47:
10:2a:05:0b:74:34:b3:1f:0b:ac:2f:e4:09:8d:a8:
29:ea:29:fc:1c:6a:73:84:15:fc:b7:cc:32:7b:fc:
5d:4e:bf:de:e6:b5:ce:ce:e7:c6:7e:39:16:6d:9c:
09:dc:4a:3e:29:79:4b:66:07:f3:06:df:eb:9c:d0:
0f:65:db:8d:ef:97:40:9b:52:18:16:6c:84:4b:dc:
0f:bf:dd:3d:01:d3:59:84:e4:a6:10:5c:f9:0a:3e:
3d:61:08:d6:89:f3:a3:3f:61:64:30:7e:7b:be:28:
48:33:e8:53:2f:95:5a:52:e1:a5:f0:bb:b0:50:6e:
05:25:87:0e:a3:ed:73:21:d9:16:33:e8:c6:89:be:
0a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:66:28:56:10:3A:3A:5D:BB:39:8F:13:5B:A3:F7:15:C3:85:35:04
X509v3 Authority Key Identifier:
keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2a:4e:af:53:4e:49:1a:3f:51:b9:c6:9b:b8:6b:52:bc:5f:
69:15:05:24:ce:7e:32:d1:e3:be:a2:4c:17:36:5a:30:87:8e:
7f:57:9b:6c:72:1c:e0:70:c7:7e:76:ae:0c:75:52:e8:8d:ef:
0c:f9:87:fa:2c:c6:ae:6d:19:dc:b8:e5:64:29:58:64:51:38:
74:82:e5:ad:e1:49:8b:9f:9e:01:40:fc:e9:1b:23:ed:3b:9b:
d2:1a:83:d4:f5:78:a2:87:28:4d:f3:a8:1e:5a:56:99:32:08:
f3:61:d5:f2:d4:fd:b6:06:af:aa:11:b7:88:e9:da:55:aa:22:
31:b2:b7:05:7f:2d:0e:cc:db:f8:6b:0b:c5:bd:17:06:ca:b7:
b4:b7:e4:51:2b:8f:b4:59:58:54:11:d7:e4:a1:1a:12:19:55:
20:e9:49:17:db:dd:06:e5:11:e6:9d:6a:ba:f6:e1:20:e7:5a:
b0:15:01:41:61:46:9c:b7:09:66:4f:45:bb:da:15:5b:5f:e4:
32:32:7f:9f:fc:1e:9c:66:67:f7:e9:49:f2:cb:6d:6e:d0:1e:
f4:01:d8:e1:31:3d:33:bd:0a:8d:55:b5:5e:84:4f:0f:e2:e0:
9c:35:a6:51:4f:bc:28:ed:83:ed:76:55:9f:1b:72:7d:71:a9:
ff:cc:62:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:43 2025 by rpki-client