Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
File: aesKgBz9tLWANaXQdaKQSy6qX5E.mft (raw, json)
Hash identifier: aXmDNjStycX/sOsf0Ke9ZWA5ftPFCeKfsZ5K2eHPZC4=
Subject key identifier: 12:1C:67:D5:0F:30:87:07:AD:4B:61:C1:C7:18:1A:E5:5F:8C:D6:22
Authority key identifier: 69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
Certificate issuer: /CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Certificate serial: 0196A654608B5A256F06D286198F907E48E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
Manifest number: 1525
Signing time: Tue 06 May 2025 16:01:09 +0000
Manifest this update: Tue 06 May 2025 16:01:09 +0000
Manifest next update: Wed 07 May 2025 16:01:09 +0000
Files and hashes: 1: aesKgBz9tLWANaXQdaKQSy6qX5E.crl (hash: HsCMUmSMJ9/4phjJVOsSj1OOIPt6GQJpIX2LQe3U7RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:54:60:8b:5a:25:6f:06:d2:86:19:8f:90:7e:48:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Validity
Not Before: May 6 16:01:09 2025 GMT
Not After : May 7 16:01:09 2025 GMT
Subject: CN=121c67d50f308707ad4b61c1c7181ae55f8cd622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:4f:0f:ba:2f:3a:73:19:a3:42:f0:cb:45:
e4:cb:dc:56:9e:92:2f:ee:9d:83:92:d4:6c:f7:07:
b5:b1:cb:30:b2:84:e9:68:0c:0d:be:d6:6a:47:96:
e2:dc:ac:97:9a:71:55:f6:d8:7e:ce:34:fb:60:bf:
3f:49:83:92:6b:36:dd:b0:d3:ef:e1:09:e2:83:26:
01:46:2f:6d:95:f2:2a:66:bb:2a:08:ac:8b:54:00:
12:85:33:d6:7c:66:e0:5f:e3:78:06:a0:da:3c:6b:
6d:59:27:5c:34:a8:6f:64:a5:80:51:b2:3c:6d:48:
9f:d0:0a:9c:71:ab:f5:15:42:2a:d5:ea:da:3f:59:
e4:2c:e5:a7:d1:61:7b:69:02:6e:6f:0c:51:09:ea:
dd:5b:fe:30:41:fa:bd:70:2d:86:8a:55:fa:89:02:
1f:c7:f0:55:3b:ef:a9:5c:71:80:b7:4e:62:43:69:
3b:d2:54:c9:57:c6:5f:eb:2d:8a:d6:c4:be:06:a6:
f2:3a:3a:0c:6c:44:6e:a1:f3:8c:69:c9:8b:1f:e7:
cd:f1:a8:e1:e1:55:a3:62:86:b8:68:88:89:94:22:
3b:21:87:54:c2:0a:99:92:d3:eb:96:c4:c0:84:08:
4a:17:a3:7e:34:82:db:c9:69:43:26:3e:4d:18:72:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1C:67:D5:0F:30:87:07:AD:4B:61:C1:C7:18:1A:E5:5F:8C:D6:22
X509v3 Authority Key Identifier:
keyid:69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3f:bb:54:9a:70:ad:31:9f:13:ff:31:20:06:96:62:dd:0c:
5a:ff:12:82:60:b9:1e:f5:a0:b0:03:91:1b:cb:4c:24:a8:9b:
66:b3:e4:69:7a:9b:33:ee:46:41:f7:dd:32:aa:3e:84:a4:99:
f0:08:16:5a:4e:aa:86:eb:90:56:be:b7:e5:59:41:88:1b:10:
07:7f:6b:7b:81:b4:bf:19:ea:38:80:aa:f1:bf:75:99:35:92:
d8:0f:4b:ed:6b:e8:57:96:d5:0b:8b:58:f1:b1:16:b2:0c:a7:
5c:61:4f:2b:ee:ea:c1:06:91:2f:c5:03:ee:f1:2f:27:5c:21:
be:8f:74:00:2c:ab:4f:05:ee:51:2f:8b:52:27:71:95:59:20:
db:aa:38:ff:c1:ba:73:1e:b8:66:f0:a9:ab:91:fc:46:75:01:
03:2e:29:d4:7d:0e:9e:d4:0d:63:06:08:fa:43:a4:d1:8d:4a:
1e:61:62:d7:98:55:53:a9:f1:e1:c6:cc:60:b1:c3:26:8a:34:
49:ec:64:11:23:6b:3b:72:12:f0:1a:07:fc:8f:40:04:d8:32:
9b:cb:a0:57:78:36:e8:96:ca:f2:39:34:4d:60:6e:46:9b:03:
16:ad:fb:9c:1b:47:6a:5f:b0:27:19:a8:47:cf:00:09:b1:45:
d4:b7:e6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:15:24 2025 by rpki-client