Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
File: aEZbnPs2jGnssOP-o7VCupxzAfQ.mft (raw, json)
Hash identifier: jSLFaGxzOCsmuUlchBnaMeedaigitWwBON4Zxc7DFB4=
Subject key identifier: 9F:17:E3:2F:D5:F9:34:61:A5:31:59:F5:B4:39:BA:EB:90:76:9A:6F
Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Certificate serial: 0196451FFBB88A595FCC91808B1E183449EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
Manifest number: 120E
Signing time: Thu 17 Apr 2025 19:00:45 +0000
Manifest this update: Thu 17 Apr 2025 19:00:45 +0000
Manifest next update: Fri 18 Apr 2025 19:00:45 +0000
Files and hashes: 1: aEZbnPs2jGnssOP-o7VCupxzAfQ.crl (hash: jtHUhsiLAVuap80m/Ov5egDrWoSM7vrZHAkjyjAvH1Q=)
2: s3MszUL2Sssrqjezj_btDkPTmQg.roa (hash: rgkSdfEiUESbKFQA8EcHOyD2UnXv2kAlPQ3EqnLhSNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:fb:b8:8a:59:5f:cc:91:80:8b:1e:18:34:49:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Validity
Not Before: Apr 17 19:00:45 2025 GMT
Not After : Apr 18 19:00:45 2025 GMT
Subject: CN=9f17e32fd5f93461a53159f5b439baeb90769a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:70:93:4e:f3:f6:a8:36:d6:88:3b:7b:c4:
27:aa:86:75:44:95:d3:a5:6e:71:0e:61:a8:af:df:
02:1f:2b:55:38:9d:5d:17:be:5c:17:d2:37:47:f7:
9b:60:9e:8a:f4:d3:fd:64:1a:c7:25:5f:b5:d8:11:
c1:0f:3b:57:12:86:4c:16:0c:06:78:9e:a4:1f:10:
85:86:2c:e1:2b:09:a6:14:5f:27:05:fa:f3:69:bb:
93:d9:6f:15:76:15:81:ae:90:c4:c5:4a:46:79:c2:
07:05:c3:fb:da:bb:06:34:6d:c3:5f:a3:c0:48:3b:
01:10:2b:cc:73:ac:eb:83:85:dd:fe:7c:c4:12:c0:
8d:21:6a:e8:ce:51:b8:dc:88:cd:3d:4e:8b:51:6f:
01:34:f5:b1:b5:15:de:e5:ad:51:56:87:75:cd:fe:
e0:de:d9:ca:66:b0:b5:4e:b0:eb:0d:cf:66:dc:19:
f1:7a:2c:0d:4a:75:7d:85:b3:d0:90:2e:5b:b0:2d:
93:71:c7:2b:d2:45:15:f5:70:7c:0c:ce:70:f8:64:
d8:50:93:07:2a:93:94:03:7b:6c:a9:d4:0f:8d:22:
fc:0a:31:4e:6c:09:0b:19:2f:9e:a3:e7:ba:a0:42:
58:aa:3b:49:ba:15:ec:28:6e:6d:3d:b1:9c:ad:a2:
f9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:17:E3:2F:D5:F9:34:61:A5:31:59:F5:B4:39:BA:EB:90:76:9A:6F
X509v3 Authority Key Identifier:
keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:30:8a:b4:a6:30:65:cf:f6:8b:c1:c4:d9:1c:d2:c3:55:8e:
00:73:7e:65:97:fc:59:bc:61:2e:e2:13:94:62:53:42:8e:f5:
99:82:e5:18:9b:f0:db:44:99:3c:cc:61:73:ce:93:72:f0:88:
f0:69:59:49:af:7a:46:fa:df:86:7c:b0:db:a9:4a:9f:42:1c:
83:44:14:ef:e1:4f:6f:79:ae:1a:06:5e:af:46:53:6e:44:07:
cb:95:d3:67:7b:9a:aa:2c:36:d9:24:ef:e7:76:39:ed:03:1b:
93:23:40:17:56:88:e5:57:51:7c:fa:95:2d:28:e0:8f:e4:e2:
6e:a7:4a:99:35:99:02:3a:eb:e7:1a:15:ad:f8:e2:61:34:a6:
e5:4b:2b:df:73:c1:fa:1f:65:94:47:0f:31:ef:19:00:12:bf:
27:61:c7:c2:ad:0e:a5:a0:6b:82:75:3a:1a:a6:87:d6:dc:2a:
0a:8e:51:c8:4b:de:27:47:15:e3:74:7a:68:0c:a1:61:19:3e:
c5:32:f9:26:d0:74:92:78:c1:33:01:28:a0:3b:53:3a:5a:ee:
e8:b2:41:80:85:a4:81:6f:b8:18:5f:fa:e8:12:98:bc:37:cf:
59:90:76:1c:7a:1b:95:d8:7f:54:4c:f8:27:44:35:ca:64:c0:
dc:90:23:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:26 2025 by rpki-client