Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.mft
File: aqNKS6w794E80qZrT0W5x4bdNUI.mft (raw, json)
Hash identifier: m5b0/WQJ6DWHF4NkpPJEkU2rYa2SvPTEWsdoqoJxrqQ=
Subject key identifier: 38:2A:E0:5F:C2:66:89:46:1A:33:41:41:21:C3:CC:28:32:F0:26:A2
Authority key identifier: 6A:A3:4A:4B:AC:3B:F7:81:3C:D2:A6:6B:4F:45:B9:C7:86:DD:35:42
Certificate issuer: /CN=6aa34a4bac3bf7813cd2a66b4f45b9c786dd3542
Certificate serial: 01964A4665CE16FB3C16EFB2F1777AA7550A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqNKS6w794E80qZrT0W5x4bdNUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.mft
Manifest number: 0747
Signing time: Fri 18 Apr 2025 19:00:49 +0000
Manifest this update: Fri 18 Apr 2025 19:00:49 +0000
Manifest next update: Sat 19 Apr 2025 19:00:49 +0000
Files and hashes: 1: aqNKS6w794E80qZrT0W5x4bdNUI.crl (hash: 5dvRney4ERt2NM8H3pprUSfdbI6efVRjEsI6nuTyB/E=)
2: b9B102wOebSEH0EiAU4o7haSTNE.roa (hash: w8TiYlYrrX0BopJEemJvanYXKIEW88KrCZAniAUGX7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqNKS6w794E80qZrT0W5x4bdNUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:65:ce:16:fb:3c:16:ef:b2:f1:77:7a:a7:55:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa34a4bac3bf7813cd2a66b4f45b9c786dd3542
Validity
Not Before: Apr 18 19:00:49 2025 GMT
Not After : Apr 19 19:00:49 2025 GMT
Subject: CN=382ae05fc26689461a33414121c3cc2832f026a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:05:b5:32:ea:84:06:0c:54:fc:5e:22:e8:6b:
fd:32:a0:e5:bb:82:c2:16:de:ab:02:0d:4f:08:88:
77:75:d4:19:73:e2:71:10:fc:8b:93:7c:df:02:64:
2c:da:d5:aa:7d:27:9c:be:0f:9b:5e:ad:45:90:aa:
99:70:5e:ee:49:5a:20:d7:cc:db:12:95:5d:7f:b6:
85:f5:dd:88:54:12:42:5e:0d:2d:05:1e:e4:c9:09:
f9:27:bd:46:21:3e:da:8c:19:7a:1a:4a:49:e6:f5:
82:c8:b8:34:56:4f:0c:b1:ee:f6:cb:de:c0:61:a9:
56:35:ef:90:ea:a9:5c:e5:bb:9b:e0:1c:37:60:87:
6e:2d:b7:82:05:d9:54:bb:c1:47:8c:1e:5f:a6:69:
ac:0a:c1:fe:06:2b:18:ac:25:c6:95:c1:40:96:7c:
cd:e6:a4:a2:7e:93:6c:52:48:36:9c:1e:11:90:46:
e7:87:92:58:9b:77:cc:7f:a7:6c:27:af:f8:ad:13:
ef:51:b2:d9:f7:5d:7c:f6:ef:b6:b3:3e:39:93:a3:
a9:42:18:be:89:cd:92:73:2f:66:3c:84:01:45:33:
04:a6:2f:01:9d:89:a1:a6:00:9a:da:cd:79:6d:d5:
cf:fc:29:ca:7b:e7:db:eb:74:06:a0:d8:0c:dc:de:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2A:E0:5F:C2:66:89:46:1A:33:41:41:21:C3:CC:28:32:F0:26:A2
X509v3 Authority Key Identifier:
keyid:6A:A3:4A:4B:AC:3B:F7:81:3C:D2:A6:6B:4F:45:B9:C7:86:DD:35:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqNKS6w794E80qZrT0W5x4bdNUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:32:83:d9:2d:88:49:9b:17:ff:d8:a0:17:5f:fb:de:ae:55:
5a:84:6e:79:e0:eb:61:c0:2a:51:85:94:35:42:3c:9a:b8:9d:
2d:93:bc:12:50:f8:dc:37:53:b9:ad:e2:61:ac:fa:2e:91:31:
bc:cb:f7:f1:a7:f7:01:0e:54:ee:9a:3f:d4:18:c7:28:a2:4b:
05:0c:0f:da:38:cb:00:41:10:66:45:8c:a1:d6:63:52:1b:62:
5f:29:f8:3b:ee:49:a1:a4:e2:74:a8:71:66:56:0e:2d:d5:3c:
0d:b8:00:35:43:49:82:41:30:a8:16:23:a6:61:f3:0d:5c:6f:
bb:46:5e:67:25:cd:60:f9:d2:9c:ff:61:8a:8c:90:03:01:1f:
2a:69:46:4d:ce:c0:43:3d:3e:15:2b:2a:a4:fb:7f:30:b6:46:
9f:87:91:cb:7e:59:21:d8:59:45:2a:ed:c3:b1:8c:8a:31:00:
c8:4c:95:03:4c:1a:55:4c:d0:50:cc:f8:2f:25:12:70:00:fe:
8c:8f:2c:58:85:a1:d2:56:02:55:38:a6:83:57:df:18:97:7e:
69:ef:f7:cf:f2:28:b0:c7:7b:9c:95:36:92:1d:1e:13:10:1a:
1f:aa:d2:60:9c:53:57:4d:66:ee:3e:a9:57:a7:d8:86:58:fd:
35:f5:74:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:07:46 2025 by rpki-client