Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
File: aaEKEpVYyDgLwT2axFQB0h2rnfA.mft (raw, json)
Hash identifier: EXh92/3KdWq9gRSpQtDc9xU/YU8v79u76UEqZFVr2ic=
Subject key identifier: 7B:BB:2A:63:DD:13:97:C6:7D:47:89:09:2C:D2:7D:4A:75:7C:1B:5A
Authority key identifier: 69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0
Certificate issuer: /CN=69a10a129558c8380bc13d9ac45401d21dab9df0
Certificate serial: 01965726CFE3F40B6BC88E17E4FDB4DAD975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 07:01:23 +0000
Manifest this update: Mon 21 Apr 2025 07:01:23 +0000
Manifest next update: Tue 22 Apr 2025 07:01:23 +0000
Files and hashes: 1: aaEKEpVYyDgLwT2axFQB0h2rnfA.crl (hash: 3mxf3rVklHbcOXarS7xE84Dx8LD6SjMLmYBTtFB3WOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:cf:e3:f4:0b:6b:c8:8e:17:e4:fd:b4:da:d9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a10a129558c8380bc13d9ac45401d21dab9df0
Validity
Not Before: Apr 21 07:01:23 2025 GMT
Not After : Apr 22 07:01:23 2025 GMT
Subject: CN=7bbb2a63dd1397c67d4789092cd27d4a757c1b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e8:7f:61:b1:87:91:8b:cc:34:a7:c3:54:51:
8b:97:dd:24:7d:9a:77:54:93:8d:c7:de:3c:1f:3e:
ad:7c:d6:db:1e:74:93:d4:3f:2f:6a:22:f7:03:f7:
0a:8a:18:e0:ec:22:87:84:60:06:df:84:bc:e2:32:
44:f0:b1:79:81:6f:94:e4:22:e2:6e:d8:b9:ec:34:
04:84:45:e0:16:b3:3a:3e:ab:1a:77:7b:38:19:91:
ba:2c:26:6a:47:ee:2a:8c:0d:7f:e9:73:99:35:2d:
15:4a:f6:7a:99:3a:62:16:b6:b2:fa:1d:0e:45:29:
25:63:f4:23:53:d1:17:84:02:bd:8a:ca:ef:2e:1f:
b1:af:e4:33:d8:ab:f7:a5:21:e1:28:18:e3:00:71:
b1:02:4b:3c:3b:33:ff:c5:07:1b:b2:8e:43:0d:9d:
dd:21:85:5c:0c:22:3d:49:4e:12:17:cc:45:90:21:
60:ff:1a:69:41:15:2b:6d:90:85:cc:74:ad:60:a1:
86:47:f1:6c:35:1f:d2:75:bf:b8:14:cf:33:e2:57:
c1:65:82:5c:e4:71:26:6b:96:77:99:40:f5:d9:1a:
e8:a0:6e:dd:34:00:e1:a1:ee:10:28:a3:84:20:18:
bf:bc:e9:86:e8:ac:b9:68:fd:b4:61:6a:17:fa:c4:
df:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BB:2A:63:DD:13:97:C6:7D:47:89:09:2C:D2:7D:4A:75:7C:1B:5A
X509v3 Authority Key Identifier:
keyid:69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:cd:de:2e:b3:18:57:7a:f1:bd:c1:86:0a:ab:83:29:5f:30:
0a:ce:45:6d:24:d8:e3:9b:04:38:83:ec:85:a6:00:17:fb:a8:
a3:8f:ff:46:76:2f:1b:27:b7:2b:b2:ec:90:08:49:91:9c:a2:
da:7a:b2:6d:1c:b9:2d:52:b5:12:8f:cc:e3:4b:fd:cb:c7:f7:
20:91:96:6b:e6:1f:c2:f2:37:40:f2:21:af:3f:2f:c2:1c:4d:
a4:3e:11:ed:11:5c:31:f0:67:45:22:5f:02:ea:70:d7:27:da:
79:26:7a:5e:c9:99:22:37:d4:f3:16:9d:1f:12:7c:3f:95:42:
6e:8c:33:e2:b0:09:71:74:36:dd:b7:47:9f:4b:8e:24:4e:54:
b7:78:e2:05:7b:07:cb:c6:f8:7e:80:05:ef:aa:05:87:82:d1:
57:20:1b:4a:f6:cf:f1:d8:7c:44:b6:d1:c7:3a:f6:f6:76:09:
a0:c0:26:ae:3e:b4:46:ea:37:68:ee:96:39:ae:f2:4f:c2:53:
19:8e:9a:ce:5b:00:fc:33:d2:1f:ac:ff:fb:a4:17:9a:cf:90:
39:66:a8:a6:9c:31:cd:f0:cf:f2:c9:c6:5f:8e:b4:ab:8d:8d:
99:b1:25:40:4b:a4:2a:84:fd:87:1e:47:ae:b8:5e:86:51:f7:
06:a0:bc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:48 2025 by rpki-client