Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
File: Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft (raw, json)
Hash identifier: fnSLtp2FLM/k2sIO10LMMm8SQG4MIHyiTNfI/Gguimk=
Subject key identifier: 87:88:54:31:04:9D:4A:AC:C3:F8:CE:E5:D1:E4:4C:92:3F:4E:FD:A3
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 0196A79D68462235172EAB5AB9C6C78CA868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
Manifest number: 152E
Signing time: Tue 06 May 2025 22:00:32 +0000
Manifest this update: Tue 06 May 2025 22:00:32 +0000
Manifest next update: Wed 07 May 2025 22:00:32 +0000
Files and hashes: 1: Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl (hash: RijM2sHvKY/ibB88wKOzTCer1J5sY7g6hAtTXstHjUM=)
2: jpcHYT_B2cS9VsuU1pVa0wUy-XQ.roa (hash: 2CyucQJHHgpUaR0arXUHxX/SRCyvMCkBRcF1E4Jh1SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:9d:68:46:22:35:17:2e:ab:5a:b9:c6:c7:8c:a8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: May 6 22:00:32 2025 GMT
Not After : May 7 22:00:32 2025 GMT
Subject: CN=87885431049d4aacc3f8cee5d1e44c923f4efda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:11:69:4a:53:df:d4:ed:8e:81:fc:34:d8:77:
91:4d:1b:a2:f0:cc:7b:e9:73:92:91:6c:31:2b:f6:
0f:c9:d6:09:b6:7e:81:0e:cf:73:76:14:63:d8:b7:
17:9c:6d:d7:f3:99:cc:ef:ee:46:d9:97:0e:a7:d2:
be:1b:af:f9:e6:4d:84:42:4f:d4:1e:e6:f8:22:09:
ad:c4:7e:6e:59:c5:38:a1:78:d0:4b:89:86:72:4f:
73:3a:e4:3b:ff:58:57:28:a6:e6:e6:e3:80:26:99:
9b:61:93:2f:65:ce:2a:82:d2:3d:d6:9c:b3:b0:ab:
ec:5b:9a:e0:05:8a:86:75:2f:33:dc:2c:1e:70:51:
7a:04:6e:af:fd:d9:7a:a9:cc:75:9f:e3:6f:f3:be:
c9:ed:ea:ff:9d:80:d0:7e:b1:09:b4:e9:b9:52:2f:
8d:2b:76:96:23:61:3f:6a:d9:39:aa:53:96:17:55:
e8:32:6b:6c:43:fa:0e:e5:1d:76:8b:15:f2:1e:43:
6b:14:e5:da:e3:24:3b:30:e4:17:6f:e7:b1:a1:78:
13:26:b8:01:76:d6:44:27:0e:0c:c2:00:81:d2:a3:
3c:1c:1b:b5:59:91:36:2a:c8:4c:67:06:9d:7a:a1:
3e:f8:b9:33:b9:d6:38:4a:a5:12:39:79:db:e0:35:
1d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:88:54:31:04:9D:4A:AC:C3:F8:CE:E5:D1:E4:4C:92:3F:4E:FD:A3
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:83:13:80:5b:82:88:81:90:7e:a5:fb:74:53:4d:a5:1a:ef:
c4:f8:cd:b3:93:22:67:5c:cc:00:41:e7:d0:13:bb:c6:ea:2f:
ee:1e:b4:2a:b0:8e:db:9f:31:2d:d8:1e:fe:fb:f8:d4:c0:2e:
76:81:bb:36:08:46:e1:6b:7a:37:c3:25:cc:7b:af:3a:de:77:
93:ab:08:85:22:19:be:50:55:7b:b5:c7:e9:13:7b:ee:12:d2:
c6:45:8e:34:d3:6b:7a:0b:a5:9d:ea:8b:20:ca:46:bf:34:98:
a0:f5:78:d8:c2:b7:d5:61:26:5c:37:1d:e0:bf:70:b4:6a:41:
57:ab:ad:d0:62:0c:0e:2a:39:30:4d:d8:ba:e4:3d:c3:13:59:
16:d7:ff:da:44:74:b8:dd:19:77:de:fc:06:89:1a:e0:ae:5a:
20:7a:51:51:42:6b:c7:3c:b8:27:f9:3e:7f:e3:0e:6c:0c:cd:
2e:e6:08:96:77:5d:9c:b7:ce:e5:b5:4d:66:1b:b8:ae:31:3a:
5f:66:5b:54:54:1a:06:32:89:83:cd:d3:03:21:4b:ef:51:b0:
79:70:70:a5:34:21:4d:14:bf:73:5a:d7:68:70:dd:17:b5:d3:
29:5c:bb:2e:b1:8c:17:1a:ba:aa:8b:22:9e:8b:78:d8:24:2a:
84:74:0a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:21:45 2025 by rpki-client