Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
File: aI5xOwfHn5e0fp8DIXaLCUiLegM.mft (raw, json)
Hash identifier: L3M1up7qyjmFqPjrLXvIFhvf2EjJCFcIP6xnITvyuv0=
Subject key identifier: C1:F5:8A:B7:59:04:32:F9:CF:EB:BE:DD:F9:F9:A1:09:38:55:BA:0D
Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
Certificate issuer: /CN=688e713b07c79f97b47e9f0321768b09488b7a03
Certificate serial: 0195797DBE987180F734071BCB4F07426F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
Manifest number: 148A
Signing time: Sun 09 Mar 2025 06:00:38 +0000
Manifest this update: Sun 09 Mar 2025 06:00:38 +0000
Manifest next update: Mon 10 Mar 2025 06:00:38 +0000
Files and hashes: 1: aI5xOwfHn5e0fp8DIXaLCUiLegM.crl (hash: RIjJmrvLUUlg9PVV1uwNJvs3zwSF/nnBqVT7iQnENks=)
2: eKt0iVcZQR9s-wKnsCaLnRBWxb0.roa (hash: r1viPmPOoL4VlPRT69GWy0bXH2hVoJ6TviDvQ+6ZdW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:7d:be:98:71:80:f7:34:07:1b:cb:4f:07:42:6f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03
Validity
Not Before: Mar 9 06:00:38 2025 GMT
Not After : Mar 10 06:00:38 2025 GMT
Subject: CN=c1f58ab7590432f9cfebbeddf9f9a1093855ba0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:8f:fa:cd:81:f8:36:96:2e:9f:4b:0b:6b:
33:76:50:b2:da:0d:f4:a3:49:59:d8:93:ca:0e:f4:
a4:ca:5d:9c:49:32:75:db:cc:13:6b:1d:d6:c3:91:
be:64:e1:3c:19:b9:13:a2:94:16:0f:d1:3c:a3:ba:
1d:8e:62:a1:2b:11:b3:95:42:38:23:43:07:27:11:
37:23:55:62:06:67:ec:fb:d9:61:bf:e6:e3:32:c0:
5b:7a:f2:25:30:a3:44:c3:14:e3:af:91:14:2e:db:
44:4d:d5:c7:a2:1c:b1:0c:04:7f:3e:ba:0d:c9:89:
0d:85:b2:a4:10:fd:4f:ab:12:a8:c6:fa:10:e0:f1:
84:ee:d6:71:71:2d:46:ed:eb:96:2b:58:d8:18:c8:
70:31:70:32:4d:fe:d6:71:69:8f:00:86:fd:ec:bc:
b8:3f:59:97:a5:20:83:a4:06:58:6e:aa:5a:bc:b9:
49:50:e8:4d:56:ba:67:13:b8:27:a5:fb:55:f8:4e:
90:8e:58:fc:5c:82:05:e9:eb:63:40:43:91:2f:f4:
57:08:bb:77:0d:2c:e0:6a:7c:52:39:f5:17:e2:13:
3b:a3:a1:7d:38:dd:a4:d8:61:65:79:c4:bd:c4:54:
0c:ef:90:0d:e8:e2:ec:24:c1:00:d7:79:84:b5:2b:
31:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F5:8A:B7:59:04:32:F9:CF:EB:BE:DD:F9:F9:A1:09:38:55:BA:0D
X509v3 Authority Key Identifier:
keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:16:20:40:34:f6:60:62:0f:81:5f:66:ef:b1:fa:26:80:23:
7a:b2:b9:fa:31:1b:f0:87:74:39:dc:01:75:34:ac:bf:9e:0a:
ca:f4:67:41:57:d5:4d:4e:58:f1:ce:c9:98:e8:a6:bd:c9:ae:
ab:3b:7c:61:27:51:9a:bd:d5:76:9a:e5:94:5a:92:b5:9a:4d:
59:b0:e4:10:4e:71:31:0a:a4:cf:f4:7a:c2:d9:bf:01:d4:29:
ae:fc:aa:9e:98:d5:4a:f0:aa:06:19:94:59:92:b3:74:c3:64:
b8:14:fc:72:df:6a:7f:bd:ef:dc:50:f4:47:fc:09:27:97:85:
7a:08:05:3a:f0:f4:8f:f2:78:8a:de:a3:2a:89:a7:7a:51:2c:
f4:ed:65:d0:c2:1f:c0:30:86:29:f6:f6:2a:68:4e:b8:d7:c4:
13:00:55:80:54:29:ce:ee:7e:a9:dd:6d:e5:00:36:2a:41:3a:
7a:2e:64:9f:76:73:f6:35:01:57:db:e3:27:fb:1f:03:96:42:
d5:78:89:67:06:0e:10:a1:6b:41:86:ec:ef:4c:84:17:80:8b:
a7:67:90:d8:39:ac:f8:11:c8:22:d9:1a:d7:96:0c:4d:f2:10:
93:f2:ce:17:5e:9e:2e:e5:ee:ac:5c:3b:98:a0:6f:31:5a:15:
59:e9:16:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:16:48 2025 by rpki-client