Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
File: aP4jOevgl_9pirMOW2PswhoqI6s.mft (raw, json)
Hash identifier: nNOjbSqrwD6ZloPHy5YNusEw7J7MUsixhgTHK8iMAM0=
Subject key identifier: 46:D6:BD:79:B5:2D:BD:53:BF:52:24:08:07:52:2E:35:16:9E:A9:09
Authority key identifier: 68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
Certificate issuer: /CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Certificate serial: 0195903D8E02ABB8B002E8EE049068C4DBF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
Manifest number: 0360
Signing time: Thu 13 Mar 2025 16:01:47 +0000
Manifest this update: Thu 13 Mar 2025 16:01:47 +0000
Manifest next update: Fri 14 Mar 2025 16:01:47 +0000
Files and hashes: 1: 9V1tND3zl52dvTGUP5zkoYgjSzk.roa (hash: ZFwBT8PQBALn0UQygkKFbmysfnKpnWDyHSFsXkqI3os=)
2: aP4jOevgl_9pirMOW2PswhoqI6s.crl (hash: VvcBfJX+lv0yhLTDrnK1WPCbUcugYmasHZmCYSRrtTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:8e:02:ab:b8:b0:02:e8:ee:04:90:68:c4:db:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Validity
Not Before: Mar 13 16:01:47 2025 GMT
Not After : Mar 14 16:01:47 2025 GMT
Subject: CN=46d6bd79b52dbd53bf52240807522e35169ea909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:18:29:ac:07:c1:95:99:36:d7:08:b6:4f:f1:
cd:04:77:1a:c1:a7:e3:74:d9:4b:58:6e:2b:fc:b2:
56:fa:21:9e:50:e9:bd:2c:3c:b3:5f:5a:59:22:4b:
d9:f5:6c:59:46:07:28:0a:82:b7:9f:2e:f0:7a:22:
69:77:d9:21:bd:50:c9:6b:1d:2e:2e:3b:39:da:4c:
d0:c2:30:e7:04:73:c6:3c:a8:38:43:b9:08:97:a2:
78:1f:0b:4c:fc:7d:29:f4:59:95:ce:f3:f2:06:87:
30:33:0a:37:d7:df:23:96:e9:b5:8f:1a:51:4b:8a:
2e:82:dd:37:8d:6e:02:6b:56:59:e4:17:04:e4:e1:
62:f1:da:81:3b:21:b9:ca:37:ca:17:13:80:15:5f:
9e:82:62:11:db:ea:0c:6e:81:1d:0e:1f:38:dc:e2:
f6:36:b9:57:de:61:67:1b:22:de:ba:8b:5c:c0:c4:
32:72:97:39:11:21:8a:94:9f:cc:d7:af:04:96:dd:
87:3c:63:65:95:80:a9:12:f9:f9:a2:20:d2:3e:2a:
4d:f1:92:a5:13:df:eb:60:b1:01:ae:88:b5:a6:af:
41:ea:64:18:75:ff:f2:85:4d:65:c7:7c:4b:3b:e9:
88:4c:ad:39:35:e1:1a:da:af:b7:6e:eb:88:b3:ca:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D6:BD:79:B5:2D:BD:53:BF:52:24:08:07:52:2E:35:16:9E:A9:09
X509v3 Authority Key Identifier:
keyid:68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:64:c5:cd:75:4a:2b:d3:9b:80:56:8b:20:e5:b1:40:15:ea:
2a:73:c4:3d:9b:fd:59:ec:78:5a:49:7f:21:aa:c4:18:24:85:
55:49:45:1f:4b:80:80:b8:c5:bf:b5:d0:a1:cd:39:2e:f0:ab:
7a:1d:c1:ae:8e:e6:86:ce:41:3c:b5:14:b2:7c:7c:73:7a:d3:
c1:4f:2d:4f:64:9d:e8:03:c2:24:a3:5d:e3:e3:e6:ea:0c:18:
8f:d3:5f:38:25:a7:7c:d2:14:05:11:21:f1:6d:e1:94:40:27:
c7:3b:a3:97:39:dd:45:71:3f:71:b8:ea:53:b0:51:7f:be:3d:
0b:8c:35:cd:a3:fe:5b:96:06:1d:43:bd:11:05:95:6b:33:f8:
53:07:25:d3:60:2f:3f:75:78:d8:73:19:a4:43:0d:fc:87:cc:
cc:dc:e0:78:17:d4:24:7a:06:f3:82:e8:ad:f9:8f:c7:a4:c5:
f6:ea:72:a8:7d:66:eb:b5:23:fc:5c:7b:b5:07:82:3b:7b:cc:
2c:ac:46:49:86:3c:8b:78:5d:09:3b:6c:cf:47:63:22:b7:dc:
c3:91:8a:20:fa:fd:e5:e3:03:9b:72:20:7c:e6:11:26:3e:a4:
fa:c9:57:84:65:73:98:03:65:9d:24:77:f1:8d:0a:52:85:f4:
8b:05:ff:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:04:18 2025 by rpki-client