Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier: 8zgzzySqymEImMY6UiS6t0+ZDg7xqHhiLzZiwlzH8vc=
Subject key identifier: 40:6F:C4:D2:18:05:AC:CC:2E:2F:0E:06:68:7B:47:3D:E5:69:55:42
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer: /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial: 01964067C1002638E58AADA35FCB13ECC21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number: 14F5
Signing time: Wed 16 Apr 2025 21:01:03 +0000
Manifest this update: Wed 16 Apr 2025 21:01:03 +0000
Manifest next update: Thu 17 Apr 2025 21:01:03 +0000
Files and hashes: 1: 0hbCuxhGBbcq1BE_SuUs0Qoi-Vg.roa (hash: MAtioDj4t6UaO211UFLR8yqYOPNcNMxWi5lPTtRkcJ4=)
2: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: 8fpT6ZRva3oGrWsSg2YywDblk4Sr/fnP/7RKmDoiYZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:c1:00:26:38:e5:8a:ad:a3:5f:cb:13:ec:c2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
Validity
Not Before: Apr 16 21:01:03 2025 GMT
Not After : Apr 17 21:01:03 2025 GMT
Subject: CN=406fc4d21805accc2e2f0e06687b473de5695542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:f4:ea:fa:e6:76:3f:64:d3:2e:c2:33:4e:
02:af:fc:90:b5:7f:bd:09:d4:08:d6:0e:e8:13:bb:
37:1a:6b:a6:dd:eb:c9:59:68:61:ba:95:ac:99:6a:
10:f2:43:2b:9e:77:fa:69:da:09:9c:3d:9a:8c:ff:
84:80:08:61:d7:76:1c:15:a4:35:74:4f:a8:24:d1:
1a:da:6c:bb:8a:29:ce:df:a6:1b:0c:8a:10:c5:43:
23:16:f1:ea:cf:53:fa:cb:90:55:8e:0e:74:43:bf:
d7:ef:95:1d:c7:97:bf:06:6a:01:8c:44:99:61:1a:
4c:73:bd:54:6a:ea:e2:97:18:2b:70:4f:0f:ca:23:
a5:cb:68:99:a5:73:00:49:5b:7b:ef:62:6d:f8:f0:
41:98:88:db:d8:66:9a:42:24:08:00:fb:f5:73:fe:
4b:f0:4c:75:be:8b:68:f6:fa:a8:b9:95:06:81:59:
00:04:91:1b:16:f8:a8:db:87:91:c4:b8:2a:63:1f:
64:5f:84:b2:83:f7:0b:52:ee:f2:95:d4:28:d1:aa:
7c:bb:bd:a6:38:0c:2a:28:d2:20:8b:2c:7d:d1:d0:
6c:21:21:f1:dd:6d:c0:ef:42:95:85:2a:ea:92:8a:
ac:0a:c3:c8:7a:07:37:d0:3d:97:15:e3:55:f6:8f:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6F:C4:D2:18:05:AC:CC:2E:2F:0E:06:68:7B:47:3D:E5:69:55:42
X509v3 Authority Key Identifier:
keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3a:00:17:6d:ca:bb:b8:30:12:b9:57:28:a8:7a:7b:52:3a:
be:8c:09:5f:b6:0f:e0:1f:41:00:17:35:d5:f6:74:6b:74:81:
d1:67:9d:fb:1e:27:77:c3:8c:85:6a:4d:c2:67:5e:27:48:e6:
cf:dd:26:a2:a6:b9:1c:da:ec:62:01:04:95:5f:97:ca:60:d5:
52:d9:bb:c2:e8:be:cc:35:80:16:fd:a7:dc:a7:7c:2e:2b:6b:
2e:cc:5a:e8:b4:0c:fd:2a:7d:f4:0d:96:de:2b:4e:3a:e8:d7:
5f:d6:02:d7:cf:e2:98:7a:27:b0:a6:fd:56:46:8e:4c:0a:25:
47:37:7d:d2:aa:19:33:be:7f:b7:35:d1:f5:96:d5:54:ca:99:
a6:80:0b:3b:2b:17:29:80:0e:5f:a5:89:75:a0:79:3e:f4:a0:
9e:ff:47:b2:89:0c:e4:19:c3:05:0a:c6:3a:b0:b7:48:3c:ad:
8c:17:3c:52:23:c2:8f:12:5e:8b:d0:e1:79:b5:c8:69:27:3b:
e6:70:09:b5:20:c1:66:e9:40:41:a3:7e:f3:67:a4:16:4f:e1:
00:27:b9:a1:c7:a1:39:d4:42:53:47:4a:38:2b:12:af:8a:7a:
dc:a4:e9:2d:71:08:cc:6b:ff:64:35:56:e4:c4:ce:16:f9:63:
2d:78:6b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:32:41 2025 by rpki-client