Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
File: AW5eMfqHFqqlThj83P7T_JTbkLU.mft (raw, json)
Hash identifier: FJb+QaTUcr9n/CjPcxXmESDye3tkrZ1ur2ASuNFQVMw=
Subject key identifier: A3:0B:F7:04:49:53:B1:51:A1:15:E8:DD:C7:E0:86:AD:72:07:1D:85
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Certificate issuer: /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial: 019641E8CB771170DA4D5B59C97664C6D0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
Manifest number: 14F7
Signing time: Thu 17 Apr 2025 04:01:37 +0000
Manifest this update: Thu 17 Apr 2025 04:01:37 +0000
Manifest next update: Fri 18 Apr 2025 04:01:37 +0000
Files and hashes: 1: AW5eMfqHFqqlThj83P7T_JTbkLU.crl (hash: KMBu5BoZl2b70I4sYFJG3C0RKpS1RxmeFT7iYhjX4pE=)
2: Rgcekkes1KhkPm-geec6ef8_SvQ.roa (hash: 0N6GYLdc56+kVBGDj5O5jPTIUR3nKttL77HbNqyqtCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:e8:cb:77:11:70:da:4d:5b:59:c9:76:64:c6:d0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Validity
Not Before: Apr 17 04:01:37 2025 GMT
Not After : Apr 18 04:01:37 2025 GMT
Subject: CN=a30bf7044953b151a115e8ddc7e086ad72071d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:b3:31:01:74:1b:5a:90:97:6c:f8:2f:22:
89:de:cc:91:32:7b:9f:40:ac:57:3b:d5:0b:2f:ce:
c7:d6:2f:5f:55:ed:1a:a3:2c:cf:d4:41:99:be:66:
eb:94:90:8a:a5:bb:57:1b:3b:27:db:24:11:90:04:
e6:af:5d:2f:22:1f:0f:5b:ef:67:e9:d4:44:51:ec:
a0:cf:34:76:60:ec:cd:39:6f:a0:bf:5f:93:25:1d:
b2:17:5a:fa:54:63:03:7c:31:24:43:7f:a9:75:49:
b2:77:2b:ef:50:24:2d:90:97:35:b3:ec:71:0d:7d:
ab:6d:b9:da:87:a1:1d:f3:ca:0d:9b:60:ae:2e:b4:
61:b2:5b:ac:26:d0:eb:43:61:47:fc:28:e7:27:95:
77:e6:2b:4d:77:38:f4:43:a7:b0:79:86:8c:72:8c:
09:d3:a1:73:80:c0:ac:9c:25:32:6d:72:c7:9f:7a:
fa:2b:cf:b6:32:0a:6f:2b:50:99:54:e3:2b:cd:28:
eb:e3:7f:23:32:a5:48:46:8f:75:b6:61:9e:ed:de:
4d:ee:08:11:ee:8b:d7:8b:fd:05:29:6f:28:99:47:
07:4e:a3:b8:65:e2:0b:05:8c:3b:62:be:25:45:6b:
5e:68:ce:9d:f1:81:0f:2e:81:fc:2b:a9:40:3e:a8:
e1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0B:F7:04:49:53:B1:51:A1:15:E8:DD:C7:E0:86:AD:72:07:1D:85
X509v3 Authority Key Identifier:
keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:88:d3:1f:ed:12:ca:28:75:1c:dc:bd:10:b5:31:99:f8:39:
07:63:86:b3:31:9a:dd:08:c0:dc:4f:ee:b8:7f:76:72:fb:ad:
71:ad:94:23:df:ee:06:32:e1:f9:c6:69:d4:41:60:23:d7:f8:
a8:14:54:5b:e1:ca:21:a1:93:a0:7c:0a:ef:aa:02:0c:0f:3a:
7a:9b:5b:20:24:b4:27:d1:c1:50:b9:d2:2e:43:b3:15:5f:a2:
5d:c6:a8:f2:57:b2:58:03:9a:c8:0f:31:25:8e:1b:b8:6e:a0:
97:59:24:db:bb:b6:68:dd:c2:52:66:d4:98:30:29:35:20:a9:
c9:53:24:81:c0:62:a4:78:52:7b:38:51:29:a0:2e:33:0f:33:
55:fe:2a:07:e8:59:f4:c1:c7:c5:a2:9f:f3:3c:04:dd:82:c3:
c2:b9:b6:6f:52:ca:0e:5c:97:54:ce:01:0c:1b:0a:fd:0d:f6:
05:7a:6f:e0:c8:39:e4:63:5f:94:aa:76:4c:57:67:cb:e5:17:
ff:18:40:3a:dd:0e:d3:68:db:cc:2c:ab:c4:9e:77:45:d7:b6:
0c:2b:1f:72:b8:68:97:49:ed:16:a4:78:d7:fd:49:90:ad:d6:
b7:db:be:48:eb:f5:60:c0:41:27:d4:38:00:9b:25:0f:c6:ee:
40:b8:38:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:26:46 2025 by rpki-client