Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
File: AiyP_FBgnsDYtKcoBciZCmSq5x4.mft (raw, json)
Hash identifier: nRS1mVxVa4qJbcHhWGKEOMVN6vQL9uRlHe6zXYHeAtA=
Subject key identifier: 6C:9F:13:42:E7:6B:81:72:92:D0:5E:34:58:1F:18:12:9C:69:15:B8
Authority key identifier: 02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
Certificate issuer: /CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Certificate serial: 01965A9523EE69F5329BFF2FE72A36BC3D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
Manifest number: 0A75
Signing time: Mon 21 Apr 2025 23:00:45 +0000
Manifest this update: Mon 21 Apr 2025 23:00:45 +0000
Manifest next update: Tue 22 Apr 2025 23:00:45 +0000
Files and hashes: 1: 7TO4e8lijWMlxMa1DByMrXD5jOw.roa (hash: cDwhkc8bh/DTSiy1V4KBQ3fFakHZ/iT/sbs5LQBmNws=)
2: AiyP_FBgnsDYtKcoBciZCmSq5x4.crl (hash: /miiTp72hV7WLiaGjUc3s1zbjUy/I3BGY/eu5VG+fRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:95:23:ee:69:f5:32:9b:ff:2f:e7:2a:36:bc:3d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Validity
Not Before: Apr 21 23:00:45 2025 GMT
Not After : Apr 22 23:00:45 2025 GMT
Subject: CN=6c9f1342e76b817292d05e34581f18129c6915b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:8e:53:60:53:1e:66:be:22:7c:60:a3:25:
1d:74:75:0f:b3:94:34:b2:4a:02:fb:e9:a3:67:0b:
09:5f:1f:21:6a:36:56:4c:a0:20:47:23:83:97:2e:
c1:dc:62:04:4e:69:63:4e:c8:71:2e:60:1a:c9:c4:
14:7e:8e:13:79:eb:61:d8:b3:82:e2:aa:5d:a8:93:
f5:14:6c:15:22:1c:4e:7f:4c:58:5c:e1:27:c0:03:
08:79:34:ed:71:0e:9b:9d:38:a4:01:a3:66:de:3e:
93:3c:56:ed:51:cf:fe:bf:15:c5:7f:b6:3e:38:e0:
d9:2d:99:a8:18:40:cb:d2:e8:60:85:4d:7f:44:00:
0e:a4:d5:41:5b:6b:11:22:74:44:9b:45:5b:15:cf:
f4:5b:a6:75:e6:fd:90:89:37:c6:c0:ce:20:13:a1:
20:07:5b:4a:15:a8:8d:36:c5:c1:80:85:81:7d:b4:
8f:57:b5:c2:21:1a:c3:a7:2b:23:b0:d5:59:c4:58:
e8:19:27:38:c2:cb:29:21:c9:76:d7:a5:e5:17:ab:
e2:21:40:7d:1d:f1:30:92:30:52:da:37:c1:69:01:
2e:b9:f4:ce:88:88:75:5c:91:36:33:dd:46:e8:79:
03:db:b2:ff:d3:6d:80:95:0f:25:76:d7:ad:ff:c5:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9F:13:42:E7:6B:81:72:92:D0:5E:34:58:1F:18:12:9C:69:15:B8
X509v3 Authority Key Identifier:
keyid:02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:7b:47:ae:a2:c3:3f:8e:84:fb:ee:6d:38:44:73:54:dd:c3:
6c:76:b1:15:1b:d4:01:c2:a2:d7:e1:56:b9:36:92:58:06:96:
35:4f:00:02:e6:42:9c:99:14:d8:ad:4b:bb:98:1e:a4:a3:86:
42:29:8d:d6:a6:20:fb:97:69:30:9e:2c:f9:77:7c:e0:a8:89:
e8:d4:3e:c0:15:72:90:36:48:f4:86:e7:7d:9f:3a:00:f5:38:
37:fc:c7:98:4f:15:1f:b7:b3:2e:9b:7a:af:3f:21:5f:69:2e:
85:38:f4:c7:1d:b8:1b:96:21:27:f6:ee:d8:2f:39:7d:e6:c6:
57:99:b9:f3:a0:9c:95:dc:91:d2:b5:47:34:3e:23:39:12:e9:
2f:6f:d5:8c:68:46:32:0b:7e:42:b0:cf:e6:06:bc:09:58:b4:
91:7c:55:df:7e:56:d7:0c:bf:fc:2e:be:a9:7b:c0:be:b2:ce:
67:cc:29:33:17:64:62:47:cd:54:13:1e:43:29:6c:d3:b4:95:
58:ae:6d:e4:62:d5:04:36:fc:6b:3f:bf:ad:2a:42:88:76:a0:
5d:c4:d2:be:a2:78:12:78:37:e0:43:d2:42:9f:10:e8:07:1a:
fa:50:62:f5:8f:a8:15:d4:0d:11:d1:39:e5:52:4e:4a:c0:95:
3d:0a:e7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:36:05 2025 by rpki-client