Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json)
Hash identifier: twDFgvpJaoOH/AtDPOLIswLeia9wglLilGeSSNOFz84=
Subject key identifier: 00:0D:5F:48:CC:86:F0:68:00:A1:89:C5:18:83:AC:07:5E:3A:14:C0
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 0196B6A253A594359248C6FD7F2D7EA78E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
Manifest number: 0184
Signing time: Fri 09 May 2025 20:00:13 +0000
Manifest this update: Fri 09 May 2025 20:00:13 +0000
Manifest next update: Sat 10 May 2025 20:00:13 +0000
Files and hashes: 1: Hc3x7cMMhQ2pFoiy2saJ4XllrVE.roa (hash: B1k+alzkgyWX1Dzf52yEQFBGvjvNE4DrGgKVq+glwN0=)
2: YtxtGxzAFTD7VGg0PFEmZBNLElA.roa (hash: y8ZPyeZ/AYX6lgVWKnXOB87kBExgdYaVeX1AwaOBKoc=)
3: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: PwznBYh/4A102rmPnK6sB0Nui+R4a+Ue7Jz7UIUVCNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:53:a5:94:35:92:48:c6:fd:7f:2d:7e:a7:8e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: May 9 20:00:13 2025 GMT
Not After : May 10 20:00:13 2025 GMT
Subject: CN=000d5f48cc86f06800a189c51883ac075e3a14c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:64:c8:0e:d5:2b:8b:45:0a:d4:9b:5b:bd:
0b:76:34:4f:22:b3:5e:dd:41:79:ae:d9:68:2f:62:
c2:3a:dd:26:13:ab:a3:19:0c:ce:12:6d:22:7c:4f:
70:ad:1f:c4:38:f0:73:04:04:96:3d:32:fc:40:e1:
6f:3c:01:e3:e6:0f:1b:67:73:33:87:df:50:93:a6:
24:3c:51:fc:e7:03:ca:73:13:c8:cd:b0:7b:ec:6f:
f3:ca:68:33:42:10:1c:e9:75:ab:a5:04:d4:47:b9:
10:e7:f2:05:70:99:f7:16:39:db:c5:d8:bd:a1:ce:
95:4a:c6:c0:a9:f2:53:21:cb:c8:d7:61:dd:70:14:
9c:b2:79:55:50:5f:fc:4f:8c:bc:9e:d5:a1:7e:bb:
6a:db:b9:76:e8:11:2b:a5:63:d4:25:f5:96:2b:97:
16:c2:59:d9:d3:ef:4d:7a:58:2d:11:24:ed:f6:25:
24:46:72:3f:3f:6d:9c:5f:00:e9:2f:dc:92:0b:a3:
13:6c:54:b7:1f:b0:87:ea:07:bc:09:f4:ad:f4:35:
bf:34:a8:c5:96:fa:61:e9:66:57:e3:d5:b9:24:b9:
97:47:78:05:b6:c0:70:d9:1b:1c:ea:fd:29:26:72:
d6:ae:74:1e:cd:d2:be:f2:4d:4d:b5:65:44:ce:71:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0D:5F:48:CC:86:F0:68:00:A1:89:C5:18:83:AC:07:5E:3A:14:C0
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:62:d7:7e:7d:c3:84:5f:bb:81:bd:b9:cb:f7:3f:a1:dc:a1:
1a:1b:75:12:37:75:65:65:9f:a6:30:f4:26:c3:10:34:62:ad:
18:70:23:8f:5a:82:9f:8e:9e:b8:49:bf:6c:c9:46:ce:bc:76:
78:4f:e4:d5:40:3f:52:2e:7e:71:a2:a0:eb:70:75:c9:ae:d4:
29:fc:d5:a0:85:67:9b:8f:07:1e:c8:4c:31:09:c5:0a:4f:07:
e1:e2:e2:da:b5:6b:3e:19:11:8f:98:d2:46:03:2b:fd:aa:09:
e2:aa:00:86:36:b5:d1:c7:ec:25:1a:fb:ce:31:84:b8:e3:5a:
15:ac:5e:93:76:13:a0:92:b9:ed:54:6e:81:72:f4:da:25:0f:
0b:93:4b:ca:2d:98:d1:8b:8a:0f:4e:56:f9:96:45:31:da:dd:
09:de:23:5a:fb:a8:a0:10:a0:9a:e4:a8:4c:4f:4f:a7:92:d0:
5c:e9:32:ab:13:48:99:ca:9e:58:18:5a:64:80:96:43:f4:9a:
f0:df:0c:3d:0f:44:5b:12:c7:06:48:a2:76:5e:60:43:2d:ff:
79:b9:f9:a3:c2:a6:89:a4:55:56:3c:3f:22:f5:7e:2f:ce:32:
3c:4d:84:84:33:82:35:81:04:39:b4:33:c2:9d:c6:5a:f9:62:
bd:0c:c1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:59:09 2025 by rpki-client