Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
File: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json)
Hash identifier: 3k7o/1skDYJoMNRCH5cbuGte3DUU1AwY+9Q9CA6nonk=
Subject key identifier: 0F:47:62:4E:03:0C:72:B2:0C:BC:55:B7:45:2F:B4:DC:E9:9F:2A:7C
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial: 019590AB0960918C7F90DF6CE6B526A669AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
Manifest number: 10DD
Signing time: Thu 13 Mar 2025 18:01:22 +0000
Manifest this update: Thu 13 Mar 2025 18:01:22 +0000
Manifest next update: Fri 14 Mar 2025 18:01:22 +0000
Files and hashes: 1: PzCzJjGgoPXtrlh76B1G7PxDa5w.roa (hash: 0mC70+WY3sICObRriEKv1EjaSi7E87FOmh2jLXs4uxs=)
2: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: F0YCZcnGg1TblbVXp/tgCG6A00ASLayUse2nvqDsOyI=)
3: xkqO4aVLIZUckL31oh3PJoWcGDw.roa (hash: U3ieRFwqG7N/E8wCUCYGjMDFUjBJb6rB66D0tY2rBtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:ab:09:60:91:8c:7f:90:df:6c:e6:b5:26:a6:69:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Validity
Not Before: Mar 13 18:01:22 2025 GMT
Not After : Mar 14 18:01:22 2025 GMT
Subject: CN=0f47624e030c72b20cbc55b7452fb4dce99f2a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8e:f0:d1:9f:a1:d4:c5:22:11:95:71:e1:5c:
29:6a:82:af:8c:cf:37:90:ab:09:4f:4f:f8:fe:26:
aa:29:ca:d4:20:09:81:5d:3d:eb:62:b1:ab:a4:83:
6e:8c:a8:cb:88:3e:35:59:f4:f5:a2:16:26:d4:aa:
6c:55:f2:a0:cf:cd:e0:54:fc:03:07:e4:f9:0d:21:
34:ae:a5:f2:04:9e:91:c0:64:9e:c7:b7:aa:e6:df:
eb:4b:9e:0d:f3:79:a1:a7:8d:ac:8b:a0:e4:39:2a:
f7:f8:e5:27:3c:76:7c:35:70:3a:ff:4d:b8:f1:06:
4c:f3:91:ad:82:c3:05:99:e1:64:51:45:df:32:86:
99:0a:2c:95:e7:8c:cb:c1:b3:2e:c3:ee:e4:f0:0c:
65:4b:a0:cf:01:ea:a4:87:95:84:9a:b8:0f:50:58:
1a:47:7b:e1:7d:e6:8c:0e:93:a7:5b:1d:db:df:7b:
85:db:c9:a0:7e:b6:5f:4d:22:7b:89:58:55:fd:9a:
9f:43:98:29:94:88:1b:f4:2d:12:7d:66:60:0e:40:
45:20:34:73:67:26:65:1c:2d:94:16:b4:86:a6:3d:
b9:f9:c5:d6:81:9e:96:06:08:b4:80:1e:79:34:ea:
f6:c9:3e:d9:44:6c:ff:4f:d3:fc:c1:27:64:c4:3d:
b7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:47:62:4E:03:0C:72:B2:0C:BC:55:B7:45:2F:B4:DC:E9:9F:2A:7C
X509v3 Authority Key Identifier:
keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e9:b2:6b:dd:99:54:f3:6b:c2:2c:7b:d8:4d:30:f0:6a:fd:
73:2a:2a:ea:75:23:ed:d2:4f:37:da:b0:5a:4e:6d:a2:e4:e1:
6d:30:0c:e4:7b:45:86:f2:56:30:a3:dc:13:34:a5:91:41:93:
3c:b4:1e:27:1f:ee:d7:75:97:f0:6c:82:08:f5:96:e5:84:19:
80:26:3b:e0:ca:f6:4b:39:e2:a4:74:41:c0:c0:82:7e:f3:7b:
dd:9e:d9:48:18:75:9f:ec:1a:46:5c:57:a2:6d:53:be:e0:24:
89:4d:0b:9a:c8:90:53:3c:29:21:2a:c8:66:10:5e:33:cb:55:
f1:e8:22:b9:ff:96:2d:2d:5c:80:a1:bd:f6:9c:c5:d9:d8:49:
fe:30:08:c1:c6:47:63:c0:70:cb:b3:1a:7d:f8:5a:e2:5a:6d:
69:5b:1f:0a:9f:9b:24:93:73:28:1d:71:4e:ba:24:9b:a5:e9:
70:eb:dc:d0:e1:97:1a:c8:ba:94:ac:68:ca:eb:b9:fe:62:4a:
24:35:e6:03:49:12:53:a5:2b:b9:d5:83:4c:b7:64:6e:28:20:
f9:e4:c1:cd:64:23:82:6b:f8:eb:71:b2:3b:79:22:9d:00:78:
91:a1:12:31:6b:07:1d:11:85:0e:85:29:fd:62:d1:28:11:94:
89:f1:0b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:41:44 2025 by rpki-client