Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
File: aQMR37ZbZZViGO_0cZep65akB9s.mft (raw, json)
Hash identifier: LgoWcZ+GytTTeQoHOaL2eB10Ss4CGEEgTZH3WdvDYMw=
Subject key identifier: D0:07:31:23:05:2A:61:F7:06:09:FD:46:65:1A:1D:6D:3B:CC:C1:FE
Authority key identifier: 69:03:11:DF:B6:5B:65:95:62:18:EF:F4:71:97:A9:EB:96:A4:07:DB
Certificate issuer: /CN=690311dfb65b65956218eff47197a9eb96a407db
Certificate serial: 01964B8FFDBF877943EDA5DA17D8E68DFC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
Manifest number: 14F6
Signing time: Sat 19 Apr 2025 01:00:49 +0000
Manifest this update: Sat 19 Apr 2025 01:00:49 +0000
Manifest next update: Sun 20 Apr 2025 01:00:49 +0000
Files and hashes: 1: aQMR37ZbZZViGO_0cZep65akB9s.crl (hash: D6RQvPuIoXg0XFo575Lgj4UDsJzhXSxnkvjeOI+Ac9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:8f:fd:bf:87:79:43:ed:a5:da:17:d8:e6:8d:fc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690311dfb65b65956218eff47197a9eb96a407db
Validity
Not Before: Apr 19 01:00:49 2025 GMT
Not After : Apr 20 01:00:49 2025 GMT
Subject: CN=d0073123052a61f70609fd46651a1d6d3bccc1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:2d:ce:a0:78:84:59:37:0e:f9:52:92:e1:
dc:b7:88:04:3a:23:db:a1:52:d2:08:43:e8:e1:c2:
2d:f4:9f:00:7e:f3:0d:2a:c5:c8:b8:c7:41:af:06:
89:99:b8:5a:98:58:a0:26:70:e2:54:81:35:c3:c2:
2e:f6:53:35:63:c8:92:ff:84:a8:ee:7f:08:b5:1e:
0a:b3:a0:b9:62:a1:8d:77:cc:21:57:44:79:55:fb:
50:74:ac:bd:ae:37:ab:e6:96:9a:1e:0f:b0:8d:6c:
d2:76:df:f4:29:cb:14:da:7c:ea:89:ff:48:17:e5:
c6:b0:8d:e9:8b:d5:30:c1:d2:fe:90:1b:2e:c9:10:
f7:fb:e9:68:8b:5b:30:02:23:bc:d6:ac:14:21:0f:
33:64:c7:92:89:c9:de:53:7a:c5:69:8e:ec:14:46:
38:f2:8a:33:72:84:de:8d:a2:e5:d2:41:f9:01:84:
0e:f6:1c:d1:68:f2:14:74:aa:b3:2f:33:ba:c8:33:
6c:28:f5:f9:f5:8f:fd:9e:3c:9a:7a:82:43:af:f2:
e8:d6:29:8e:3d:5c:b0:9c:95:d0:97:40:e0:07:fd:
bc:bf:a1:fb:33:ae:90:bc:2b:9b:96:d4:0a:e1:54:
b8:77:5d:b5:e9:16:aa:a2:bb:6a:ce:68:c0:0a:93:
d5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:07:31:23:05:2A:61:F7:06:09:FD:46:65:1A:1D:6D:3B:CC:C1:FE
X509v3 Authority Key Identifier:
keyid:69:03:11:DF:B6:5B:65:95:62:18:EF:F4:71:97:A9:EB:96:A4:07:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c4:13:37:2c:af:49:48:5a:ad:a1:05:cc:53:6d:e0:3b:bd:
df:36:12:ca:5f:7f:4b:a6:3b:be:d7:26:62:97:2c:49:0c:d4:
a0:77:44:4f:ac:6b:26:2d:e9:da:66:c9:9f:e7:de:35:ae:d3:
a1:9e:7a:13:4e:7e:a4:06:ea:92:4c:6e:79:86:65:eb:c0:42:
50:59:49:db:8a:27:70:0c:2c:14:4e:5f:23:a2:ed:cd:b5:54:
da:49:8b:d3:fc:5d:76:b6:d9:c6:5b:cd:5d:3f:fc:0d:72:4b:
26:3f:36:ae:eb:75:c1:3c:53:41:50:45:e0:88:f7:2d:42:25:
9e:f5:8e:b6:7d:44:d5:e5:c1:f9:f2:4f:0a:0f:16:e2:ba:0e:
51:fa:ae:36:70:e5:2d:65:41:f8:bc:83:ed:09:23:ab:50:a2:
72:aa:68:a1:c2:14:07:fc:36:f2:72:34:41:62:02:90:01:0f:
2e:80:47:60:84:a6:4e:bb:be:94:de:5d:aa:c3:2f:f4:09:e8:
f2:77:23:66:88:2d:e8:bf:0c:45:6a:59:70:84:bb:32:5f:4d:
71:e7:07:31:5f:0c:6f:bf:68:32:d3:c3:d8:09:09:57:52:41:
43:03:f5:a8:84:92:4b:d9:49:a2:68:b6:9a:14:53:97:a2:a9:
76:e6:95:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:03:03 2025 by rpki-client