Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
File: aErIoCEnBoJ2XSPvAzjzXHht2zU.mft (raw, json)
Hash identifier: tYUe6TLQDz/RWfURb30kOEkvRRmQ3rQirHZV0m3bEwk=
Subject key identifier: 73:82:AB:70:AF:F3:30:5B:B1:92:55:60:26:48:EE:CF:77:6D:4D:4F
Authority key identifier: 68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
Certificate issuer: /CN=684ac8a021270682765d23ef0338f35c786ddb35
Certificate serial: 01958BF274ED03079271FB6273EF39013736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
Manifest number: 1144
Signing time: Wed 12 Mar 2025 20:01:17 +0000
Manifest this update: Wed 12 Mar 2025 20:01:17 +0000
Manifest next update: Thu 13 Mar 2025 20:01:17 +0000
Files and hashes: 1: aErIoCEnBoJ2XSPvAzjzXHht2zU.crl (hash: vSg1aX3UnTmld3DBEW/0+rKnNZSlBBWRtNxJcB7g+yA=)
2: eEP1VypyuqVxmlLrgaA9LlVwYK4.roa (hash: 5dvQLaqP0vbYafUJXNT7sKTWbRstUgrMUzxGvHU5Rgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:74:ed:03:07:92:71:fb:62:73:ef:39:01:37:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684ac8a021270682765d23ef0338f35c786ddb35
Validity
Not Before: Mar 12 20:01:17 2025 GMT
Not After : Mar 13 20:01:17 2025 GMT
Subject: CN=7382ab70aff3305bb19255602648eecf776d4d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:ac:2c:d6:f0:be:c4:f1:f7:69:f2:bd:a0:
0c:0f:42:99:b6:60:6d:4d:a7:70:3a:4d:e0:98:6d:
be:43:9a:80:19:fb:f6:a2:00:f3:36:b2:b7:ad:2c:
78:11:59:7d:9d:22:12:f4:45:91:e8:b6:68:a6:4a:
f4:91:c4:97:48:d3:26:1b:66:a2:b9:28:b7:30:43:
80:56:c0:14:2a:02:f9:3f:55:01:0c:05:3d:91:ae:
21:44:35:46:e7:c8:df:b8:09:f1:76:08:3d:d5:7a:
57:e6:da:81:67:fd:27:60:0e:80:6e:68:a5:00:ba:
67:62:cd:dd:ce:86:0f:77:37:35:b6:0d:03:f2:ef:
ec:6a:4c:8e:e7:47:35:9c:ed:58:22:87:2b:94:ea:
a6:90:30:19:b9:63:4a:54:51:77:f4:20:aa:0e:d7:
e9:74:9a:72:82:cb:6a:6b:2f:b7:74:8c:90:82:bf:
94:b8:8f:29:8f:a4:f1:3c:c3:9e:99:cc:6b:1b:b4:
ec:b7:02:a2:42:b9:55:22:d4:46:9e:25:3d:ca:17:
5d:e4:77:76:8e:15:8b:76:c7:c8:e3:20:ce:1c:4a:
85:76:4d:48:7f:d8:2e:25:7a:38:f0:d9:e3:ef:4d:
02:31:2a:e8:79:94:0d:c9:35:84:6e:5c:fa:98:86:
ed:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:82:AB:70:AF:F3:30:5B:B1:92:55:60:26:48:EE:CF:77:6D:4D:4F
X509v3 Authority Key Identifier:
keyid:68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0f:56:3c:8e:83:08:7e:93:4c:35:b0:d8:c4:43:63:1d:61:
bc:78:dc:66:25:36:0a:07:9d:31:89:27:a7:3a:37:96:a2:35:
f5:f9:52:09:4a:89:15:67:d9:fb:8e:a5:07:15:0e:f5:77:91:
34:d9:ba:89:70:ef:a3:3e:6e:05:dc:d0:e9:60:a2:09:b4:53:
65:a1:48:33:aa:35:3c:94:ac:ba:76:eb:c6:d8:00:15:6a:8e:
a2:5b:76:31:88:43:f0:73:98:46:00:32:d4:76:27:1c:df:34:
bd:71:e0:33:60:41:ee:31:3c:c8:3f:76:09:41:1a:b3:13:10:
4d:36:43:f1:b9:cb:83:62:88:3c:46:1c:72:b2:3b:ad:35:6f:
c9:f7:b2:23:2f:f6:35:dd:17:17:57:63:2f:a9:2b:e3:62:1e:
d5:f5:7b:e2:ad:b4:05:de:1a:00:f5:26:74:f0:61:96:73:52:
3e:07:6c:ed:1d:5c:39:b0:73:77:56:0f:27:a1:6a:da:99:7f:
f2:c5:52:4a:89:75:73:8d:8e:a9:25:51:65:f0:8f:d2:e1:89:
a3:d3:17:b9:6f:87:b4:40:d0:0e:bb:50:2d:a5:f3:5f:84:bd:
b7:f2:9a:8f:b4:82:12:cb:bc:69:68:f7:85:1d:fb:e1:c7:5d:
f7:9f:68:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:36 2025 by rpki-client