Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.mft
File: AEaAHkXKHu0_eNmSd9AZP1dmZcc.mft (raw, json)
Hash identifier: 3ZJfaF41lmeTs+BUEvQ8UvZFYJNudfUhold+z28Od2M=
Subject key identifier: 3B:29:84:8C:22:1E:3A:C7:F3:F4:FC:2F:37:56:65:19:32:84:E1:FD
Authority key identifier: 00:46:80:1E:45:CA:1E:ED:3F:78:D9:92:77:D0:19:3F:57:66:65:C7
Certificate issuer: /CN=0046801e45ca1eed3f78d99277d0193f576665c7
Certificate serial: 0196BFDCB045E2556B2B7199F32DD9F33438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEaAHkXKHu0_eNmSd9AZP1dmZcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.mft
Manifest number: 0D4F
Signing time: Sun 11 May 2025 15:00:33 +0000
Manifest this update: Sun 11 May 2025 15:00:33 +0000
Manifest next update: Mon 12 May 2025 15:00:33 +0000
Files and hashes: 1: AEaAHkXKHu0_eNmSd9AZP1dmZcc.crl (hash: 8Xw+5eKeHEJS/uJyYYgbwm+z9Q3StfANaINvanpv860=)
2: xiLGUGhf0T0iqyzSwJ-LQ5BF6Eo.roa (hash: YJzbP/5C/6ILVfg0WwaPWZ9SyS6RHby3juochsRhU0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEaAHkXKHu0_eNmSd9AZP1dmZcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:b0:45:e2:55:6b:2b:71:99:f3:2d:d9:f3:34:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0046801e45ca1eed3f78d99277d0193f576665c7
Validity
Not Before: May 11 15:00:33 2025 GMT
Not After : May 12 15:00:33 2025 GMT
Subject: CN=3b29848c221e3ac7f3f4fc2f375665193284e1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e4:a3:62:4e:d1:15:78:4c:16:42:a0:40:91:
12:56:9b:f2:84:6c:54:52:a1:07:9e:3f:d1:84:56:
66:bc:a1:32:11:ba:bf:c6:84:84:30:65:29:7f:da:
56:df:c1:cf:b9:7b:6a:4e:6e:90:0a:4f:e2:35:ab:
63:6c:f6:90:e9:3a:3b:d0:b6:23:69:f6:33:85:59:
be:5b:50:f4:f7:ca:68:28:8d:dc:df:7b:b0:7c:7d:
fb:59:71:bb:78:07:c2:95:61:df:b6:a7:14:f2:47:
45:fd:b5:33:84:e3:47:94:73:13:39:69:88:c2:a6:
48:5d:0e:18:fa:d9:46:2a:4d:fb:44:39:ec:dd:40:
02:b2:45:e5:17:ae:a5:09:2a:e4:2d:3b:da:b6:47:
ec:e2:dd:3c:43:07:dd:a5:9d:6d:f5:56:cc:a0:f2:
5c:57:a0:7d:4e:4d:d5:0c:9a:21:5f:95:18:71:00:
50:18:ae:c6:ec:7e:aa:70:5a:e0:35:1b:af:50:67:
72:a5:1c:16:26:6a:5d:9e:99:69:18:86:bc:71:05:
d9:ba:fc:0a:3f:0b:c2:fd:cb:f8:59:7d:6b:88:26:
67:d5:9f:a2:6d:d4:8c:67:87:a0:78:e5:5c:c7:95:
f1:10:35:04:02:90:16:88:b3:d6:76:d8:bb:95:95:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:29:84:8C:22:1E:3A:C7:F3:F4:FC:2F:37:56:65:19:32:84:E1:FD
X509v3 Authority Key Identifier:
keyid:00:46:80:1E:45:CA:1E:ED:3F:78:D9:92:77:D0:19:3F:57:66:65:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEaAHkXKHu0_eNmSd9AZP1dmZcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5a:a0:99:55:65:cc:be:69:e1:35:d7:07:08:ed:04:23:5d:
2b:28:2e:2d:10:66:d6:46:ee:6f:2d:84:37:40:88:5a:f0:8c:
6b:4a:d5:74:48:d3:2e:08:88:63:44:06:85:de:12:59:4a:06:
8a:f3:e4:9e:7a:6f:a1:cf:7b:14:bf:a6:73:34:84:1a:18:7d:
b7:e2:e9:5f:7e:23:43:e8:06:69:ae:ae:91:46:8b:ba:4b:38:
81:02:83:72:32:c9:fa:43:d8:10:01:cc:8f:e3:ed:23:bd:39:
c2:19:bd:75:fb:07:21:47:1a:f3:84:5d:98:d4:60:6a:d6:fb:
ef:4f:4d:52:ae:c2:c5:49:ef:8a:6e:1e:22:3f:7c:55:2e:f3:
67:0a:f1:f5:9a:63:8b:3c:2e:f2:7b:43:46:8d:a3:49:43:dc:
f5:a4:c7:9b:c5:2f:9e:1a:65:49:26:c4:37:f2:08:5b:6c:dd:
e0:0b:ff:7a:82:99:77:4b:50:5b:12:96:d3:8a:39:05:21:c7:
61:64:91:61:c3:ba:d3:ac:d5:0a:d8:c6:1e:92:06:fd:44:31:
36:22:d4:6a:8d:ba:82:aa:59:0d:51:de:94:4e:b1:b0:2b:eb:
76:c8:79:ca:42:ab:83:1f:ff:4f:29:6b:d4:9e:11:5c:74:04:
91:11:27:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:41:51 2025 by rpki-client