Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File: aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier: XAy+LAfc/tXAgOc3eHpsesWchJbXlY0CMtdrFLEFg1A=
Subject key identifier: C5:C8:A9:E5:63:68:A5:36:58:D4:9A:57:86:60:40:CE:F5:D3:D1:79
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 019642557D93763492A69CEF69A7D14B415E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number: 13D9
Signing time: Thu 17 Apr 2025 06:00:20 +0000
Manifest this update: Thu 17 Apr 2025 06:00:20 +0000
Manifest next update: Fri 18 Apr 2025 06:00:20 +0000
Files and hashes: 1: AxMCzGQBfkdUPjF75_FQYgBKyKk.roa (hash: Q4uzKxO1D3wkqVE3S1h7jCMzrLyzlo8Fuw91HVMqqb4=)
2: GBH94I9dnJeJP-cDtrZrjQV60Xo.roa (hash: y6nZi/uewPtAISPvzpzs2QyOXFXhWR2PVFDixGJRcS4=)
3: H2VZSmbjuhR3ac6MIKzeglyIYks.roa (hash: UIjSJcyc/E8JLENuCv3vqPJa+7OOm7xS/YMDmRv22Kw=)
4: HF4WzxoDXgbg5yBxSS03tW9aru8.roa (hash: PWduzoTmZRp313sGCyiMmvYNM3baM7nUGFf5SyjiJn0=)
5: J77jo9bOLCQlRa9jZXP7dkS-vsc.roa (hash: BkSOP5B+rRmnn+pH6eFEIdlnuALStZNG5jHgh2jmArM=)
6: W5nu10iQUnq2WyeNqh0FW5pghzg.roa (hash: ACfKtWV/LqUk5Me2H3s1q6ll6Bv01sLwUkPbncMCuVs=)
7: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: H9oPtLfVnTc79x3ejrDq1Lf1UBAXxqjj0p32UwEKv9k=)
8: udc46mgp-szqkgSRcIGKFCbr4JI.roa (hash: JhRkQnx4Eha9Xs6OT104V9KWisTA96XNNv0iCMA2cQI=)
9: vyegIY_7PWJ_35cJ7FHof10Oetc.roa (hash: WbJ2gjaiGN54VhXMkNaf0rgW5sSEbQ1P8bkrjt4iUcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:55:7d:93:76:34:92:a6:9c:ef:69:a7:d1:4b:41:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Apr 17 06:00:20 2025 GMT
Not After : Apr 18 06:00:20 2025 GMT
Subject: CN=c5c8a9e56368a53658d49a57866040cef5d3d179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:e8:03:42:42:05:3d:dc:93:10:f9:05:30:
af:45:94:b1:b2:79:c3:cc:3e:4e:d1:93:6b:0e:4d:
27:fb:41:53:55:ae:a3:b9:b9:29:f5:8e:37:ce:c8:
f5:99:e6:45:1a:a3:7b:58:62:52:98:78:e2:9a:73:
3c:bf:ce:5e:d4:d2:db:d2:21:3f:fb:cc:70:f6:78:
66:87:6c:a7:b0:be:dd:96:4e:ba:6c:50:9e:10:7f:
68:01:8a:ee:06:d1:0f:23:21:d9:9a:4a:46:dd:06:
1f:37:9b:d6:0c:bd:fe:c7:09:ee:97:05:99:12:5d:
68:1a:d2:76:fa:0c:22:bb:b0:7b:22:64:96:75:c4:
71:6b:fd:2c:66:15:42:05:46:28:86:41:5a:bf:70:
66:51:e7:e7:d6:1c:e5:42:db:28:d4:56:f9:87:f7:
d8:a2:a6:26:e6:e1:80:01:ca:74:ab:4c:14:ce:5f:
44:21:f7:dc:e1:80:b8:ec:f8:ab:f9:f9:57:dd:09:
7b:b0:f7:77:f9:fc:b4:b8:eb:8d:f6:ed:83:9b:62:
84:51:b6:e9:9d:23:45:5d:e7:9a:64:c7:7b:f3:23:
1c:f6:6e:45:af:70:c4:a1:4e:94:d5:a8:b8:4d:27:
f2:a7:b7:02:ba:fd:1f:6f:82:75:2c:7d:cf:9c:a7:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C8:A9:E5:63:68:A5:36:58:D4:9A:57:86:60:40:CE:F5:D3:D1:79
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cc:c8:c0:32:5a:fd:a0:97:54:98:a9:41:46:01:54:0e:08:
6d:06:b9:79:c0:62:1b:48:34:a0:41:8e:00:66:10:47:fb:be:
e9:31:10:04:c5:c2:e7:44:1b:b6:3f:fa:84:c7:75:ec:04:3f:
34:07:c3:34:26:e8:5d:77:c9:5f:6d:13:4b:37:a9:87:ae:5f:
3e:cf:4e:49:06:9a:35:16:27:c3:ca:a3:ef:a7:f2:69:19:67:
0a:c6:4a:68:d5:ff:a6:02:94:e4:84:f9:fd:4c:f2:0b:b4:56:
f0:52:fd:27:f6:d5:c5:7d:73:44:fd:49:08:c1:6e:fa:fd:63:
2c:7b:75:6d:2a:02:85:d0:4d:83:f9:98:94:96:d8:cc:88:aa:
16:ea:32:cd:43:ee:e1:f1:59:0c:c6:f3:8a:27:27:d8:5f:fb:
01:83:37:0a:69:26:23:d9:ce:56:c0:b0:32:a9:6c:26:42:71:
94:8f:7c:c7:48:10:4e:5b:e8:ca:f4:d8:97:f6:ce:e5:92:73:
b5:2f:69:c2:34:e7:cc:b5:fc:90:f8:6d:b1:62:f2:d7:5f:4e:
95:fc:c1:02:13:07:02:87:7d:63:4c:b9:8b:53:f6:04:7b:bf:
36:3a:96:d2:da:26:4a:1f:1d:c4:71:20:ef:c3:0b:e9:22:70:
03:50:1a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:30:35 2025 by rpki-client