Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
File: aXJqlhM2--eCCz10joEvSVyHLTU.mft (raw, json)
Hash identifier: Ni5k64GaP2sHWSmbiIiYMQi386mdte0s3hCMw1TPNG4=
Subject key identifier: 46:8D:1E:DB:4A:34:EF:23:DA:0F:68:B9:A3:DB:C4:70:49:3A:BB:C7
Authority key identifier: 69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
Certificate issuer: /CN=69726a961336fbe7820b3d748e812f495c872d35
Certificate serial: 0194C4D1004EC3C915A82CFC6335A2A75773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
Manifest number: 0C1E
Signing time: Sun 02 Feb 2025 04:00:18 +0000
Manifest this update: Sun 02 Feb 2025 04:00:18 +0000
Manifest next update: Mon 03 Feb 2025 04:00:18 +0000
Files and hashes: 1: TPjf70pa6qBZmpfYB0iX9CcL4Y4.roa (hash: swAbvLbVBmlLATlL/hX7o87L+INYtKkOcONzc8lraTI=)
2: aXJqlhM2--eCCz10joEvSVyHLTU.crl (hash: kdnJpDwFQT6GlDzz1p+mICsV82wi+UsLRrlGK1Ny/gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:00:4e:c3:c9:15:a8:2c:fc:63:35:a2:a7:57:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69726a961336fbe7820b3d748e812f495c872d35
Validity
Not Before: Feb 2 04:00:18 2025 GMT
Not After : Feb 3 04:00:18 2025 GMT
Subject: CN=468d1edb4a34ef23da0f68b9a3dbc470493abbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:9a:b1:f0:a7:38:f0:27:56:2c:16:4d:9a:
b3:22:b4:dc:29:a5:d0:7e:cc:05:52:c0:db:06:a1:
f4:c1:73:4d:8b:36:32:bb:13:43:3d:f2:aa:7e:b9:
3b:54:22:94:3a:71:32:2a:ab:a1:b3:49:db:66:e3:
49:18:b4:89:c6:a6:eb:a1:a8:03:ab:85:d0:9a:25:
4a:7b:29:ef:8d:59:e5:c1:36:07:0f:07:22:0b:e1:
3c:95:b9:3c:d7:44:f3:0b:e1:be:f0:e0:86:38:5e:
74:ed:52:3d:7c:13:42:c4:af:ce:7b:22:f4:4a:6d:
98:9d:cb:c5:fb:ed:79:b1:73:06:5c:c0:24:05:54:
bf:b5:da:3c:3d:1e:4c:30:b0:85:74:2c:26:14:b9:
1a:ef:af:0f:40:dd:86:49:df:29:b5:f4:1b:37:4e:
f6:6d:22:9b:48:aa:b3:d8:99:5b:a2:4f:2a:b9:b9:
5e:af:ce:34:83:62:d8:39:99:86:5b:93:47:39:21:
c0:95:10:e3:60:df:dc:72:0a:01:c6:7d:d6:62:f7:
1d:7e:5d:51:bf:bd:c3:8e:a5:76:ad:c1:72:18:1f:
fa:e0:b9:57:32:bd:6e:bc:3f:d5:b6:7c:a4:59:09:
7d:9f:8c:b1:56:2d:3f:fd:71:b3:35:2f:f5:d8:78:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8D:1E:DB:4A:34:EF:23:DA:0F:68:B9:A3:DB:C4:70:49:3A:BB:C7
X509v3 Authority Key Identifier:
keyid:69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:38:a2:1b:f5:18:13:92:4f:43:66:47:4a:4c:f8:88:75:2c:
30:79:15:d4:6d:bb:37:08:65:35:04:55:69:f0:5f:22:8d:31:
6f:4d:57:6e:da:28:01:1f:1e:03:1c:73:5e:20:9a:33:52:17:
6e:86:fa:0f:cc:cb:50:b9:af:42:ce:b7:a2:a2:a6:40:a3:b6:
96:fa:96:ad:fb:de:86:de:0f:09:12:b1:83:12:4d:ff:53:84:
f4:47:05:7a:d0:6a:42:eb:86:82:18:bd:67:33:77:1b:5c:3f:
93:33:b1:41:c8:3f:1d:5e:8c:4b:51:8c:f3:09:60:d5:55:e2:
a9:d3:68:8f:68:34:25:47:a0:09:6b:c9:9d:78:5d:03:05:a0:
6e:ce:4a:29:1d:c3:ca:be:eb:4c:09:8e:e1:5f:4d:cf:b6:04:
fa:9d:c3:82:7b:98:a4:d5:5c:eb:53:66:20:06:08:e4:0b:28:
b7:6b:6d:e0:14:fe:02:76:57:56:f1:7f:cb:e9:25:5f:b0:d0:
83:f3:6d:6c:c2:02:95:42:e1:49:0b:1a:7b:0f:aa:e9:e9:fa:
57:34:1d:e4:ff:07:1c:61:44:ca:65:c2:c5:13:af:47:0c:45:
3d:e9:de:2d:2b:e7:6a:81:7c:94:ae:40:3b:2b:77:7c:07:e0:
1c:d1:ab:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:48:26 2025 by rpki-client