Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
File: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json)
Hash identifier: gOtuo0alM8WXlhwo0PPEWzARkz9Cb9HDTH74WUoTl5Q=
Subject key identifier: 23:2E:E6:66:50:EC:7B:60:15:60:F4:2A:8F:7F:20:32:09:B8:2F:90
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial: 019651C888917F76D54703645B1126C306C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
Manifest number: 1141
Signing time: Sun 20 Apr 2025 06:00:18 +0000
Manifest this update: Sun 20 Apr 2025 06:00:18 +0000
Manifest next update: Mon 21 Apr 2025 06:00:18 +0000
Files and hashes: 1: PzCzJjGgoPXtrlh76B1G7PxDa5w.roa (hash: 0mC70+WY3sICObRriEKv1EjaSi7E87FOmh2jLXs4uxs=)
2: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: Z6F6u/EH/MlPp55Vemgbonxn6soaiO9foVu3+xp7gfs=)
3: xkqO4aVLIZUckL31oh3PJoWcGDw.roa (hash: U3ieRFwqG7N/E8wCUCYGjMDFUjBJb6rB66D0tY2rBtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:88:91:7f:76:d5:47:03:64:5b:11:26:c3:06:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Validity
Not Before: Apr 20 06:00:18 2025 GMT
Not After : Apr 21 06:00:18 2025 GMT
Subject: CN=232ee66650ec7b601560f42a8f7f203209b82f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:71:fa:4a:bb:66:66:6c:5c:37:a8:3d:35:
b5:35:05:80:fe:ac:51:88:0e:e3:10:e1:80:f1:07:
19:11:49:09:bf:bc:4c:02:1c:ac:39:18:90:8b:95:
4c:08:96:e4:4d:30:6a:3a:fb:1f:9e:85:2f:15:84:
2d:66:dd:4a:14:cf:47:eb:17:18:0d:01:26:91:01:
e9:b0:27:d7:cd:77:3b:07:e8:47:ea:4d:87:1a:25:
35:d8:69:c1:cc:38:48:cf:39:49:7a:24:df:e7:f6:
27:39:c4:fd:e0:98:3d:b3:f0:14:41:6b:bc:e3:13:
43:fa:f8:b2:ff:1b:be:24:62:90:aa:7d:b1:af:83:
ae:3a:6d:fb:b0:a8:57:78:91:c0:96:67:d9:44:ad:
c2:e7:00:49:41:b0:6a:d0:04:e0:f2:70:28:d2:96:
5b:fe:53:33:f8:d5:a6:f1:8b:06:41:cb:82:a4:c2:
79:c2:52:3c:11:32:93:f6:6e:a0:06:3c:4a:6d:65:
98:1a:78:e6:ef:0c:69:d6:2e:1c:2c:ec:bc:50:c4:
ba:08:a7:55:0b:fb:1c:98:3b:2a:93:9a:bf:6d:63:
63:2d:a1:75:c8:0c:df:d3:3e:24:a2:e3:d4:f2:82:
5b:19:7b:6c:8f:6c:66:9c:60:ae:8b:46:87:f0:fb:
2f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2E:E6:66:50:EC:7B:60:15:60:F4:2A:8F:7F:20:32:09:B8:2F:90
X509v3 Authority Key Identifier:
keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e9:7f:3c:8c:89:77:52:9f:6f:a5:d4:c1:92:44:ec:3a:92:
18:48:19:3c:62:c8:3b:dc:91:cd:f0:7a:49:35:05:d0:fd:4c:
3c:cc:f8:31:83:48:7f:a5:f9:05:2c:7d:26:90:0b:41:03:f9:
d7:60:4f:4b:fc:8e:ae:81:b1:26:c2:b4:46:cd:62:95:b8:0b:
85:d6:8f:9c:8b:61:26:d2:76:9d:96:44:24:64:42:08:74:e4:
9e:64:09:14:88:36:9c:7e:f6:53:01:d8:fd:3b:a5:ed:10:65:
e8:9c:e5:53:50:42:66:18:7a:e8:b0:79:26:ab:dc:98:a1:3a:
6c:be:1d:44:30:55:40:ca:82:b6:e3:c7:e5:02:d2:0a:ca:c5:
2f:4f:ac:71:88:46:a8:c9:eb:2f:17:b1:79:b6:c9:3f:80:1c:
53:cb:26:b5:7a:4d:8f:86:dc:36:a4:bb:a8:97:0d:26:c2:21:
ec:a9:7a:f2:5a:b5:c6:f8:fa:c8:64:57:5e:0c:45:f3:43:56:
f8:03:0f:c5:2a:ae:c5:f8:5a:5e:28:d1:31:54:65:68:fb:2a:
5e:4a:11:3f:76:7d:95:d5:a5:7e:41:3e:0b:0a:93:9d:08:46:
0c:67:64:d1:75:0f:b5:61:c8:7b:56:a9:99:55:84:08:ae:3d:
5e:1d:08:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:45:07 2025 by rpki-client