Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
File: aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json)
Hash identifier: NeU/C287ZY1CmP3yTvES7aHWGsxq5KhONlbWW8N08b8=
Subject key identifier: BB:08:78:15:B1:E4:FE:D8:11:FE:0F:76:1E:36:98:FD:6E:6F:AC:8F
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Certificate issuer: /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial: 0196C916C347451790AB29527119EAB7A2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
Manifest number: 153C
Signing time: Tue 13 May 2025 10:00:34 +0000
Manifest this update: Tue 13 May 2025 10:00:34 +0000
Manifest next update: Wed 14 May 2025 10:00:34 +0000
Files and hashes: 1: 1LWuminfGd450btHCMbnnbPQ_ZE.roa (hash: TISDdBpwKFkkTeSDLc72qwKWM7K/Xn5/55e5YUo0nnQ=)
2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: ms5+AmScsoN2rkahqgdpsEcDrq7Omvvfq55t+AAOeFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:c3:47:45:17:90:ab:29:52:71:19:ea:b7:a2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Validity
Not Before: May 13 10:00:34 2025 GMT
Not After : May 14 10:00:34 2025 GMT
Subject: CN=bb087815b1e4fed811fe0f761e3698fd6e6fac8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:c1:09:61:d4:5e:fc:3a:7d:f8:12:15:08:
e5:d4:14:de:3f:f4:3a:59:cf:19:3d:24:a9:19:63:
7f:88:2f:c4:65:29:97:64:6c:7e:df:ca:70:a3:17:
b0:23:94:a3:a3:d6:a6:3e:1e:56:44:a2:53:d8:1b:
9b:c8:ea:aa:47:1e:85:71:e0:88:a3:c9:6a:ff:8a:
01:7b:d2:e0:e0:06:81:4b:96:a5:3b:24:6c:f5:27:
50:82:86:ca:08:53:5e:79:df:4a:67:42:0f:28:fb:
e0:73:8e:ed:4d:9d:a5:2a:b8:26:a2:37:ab:f8:84:
1d:1a:68:8e:46:8e:e2:b8:4a:fb:1c:bd:16:16:84:
f2:22:9e:81:7a:49:30:fa:d8:c1:6c:14:3e:04:a1:
5d:51:b3:fc:7a:28:a1:5b:24:7a:7e:41:ef:03:16:
21:b1:04:2a:64:4e:49:28:9f:6f:31:70:24:f3:3e:
cd:4a:ae:3d:d2:38:70:ab:d6:56:73:d3:76:7e:46:
23:19:d0:3d:1a:95:d0:03:2e:ac:4a:a6:01:b9:be:
af:44:ae:a9:fd:88:d0:59:51:63:a9:d5:9a:79:6e:
43:39:ed:a7:47:40:d0:8a:4d:11:d5:66:fb:19:4b:
0f:9b:d1:81:5e:16:9a:84:74:c1:ba:56:eb:02:a6:
2a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:08:78:15:B1:E4:FE:D8:11:FE:0F:76:1E:36:98:FD:6E:6F:AC:8F
X509v3 Authority Key Identifier:
keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b7:cd:2a:3b:01:ca:b6:eb:37:14:60:60:d7:77:e6:4a:dd:
ca:c0:52:81:1d:d1:80:de:14:fd:03:83:ea:b0:6b:6b:5d:21:
46:e4:bd:16:80:a1:b7:41:64:79:a4:ab:a5:f9:8b:e6:34:80:
be:52:92:9b:33:77:67:9b:f9:7d:af:1d:1c:2e:55:59:a9:e4:
82:02:3b:d8:d7:92:86:d4:82:41:c2:5a:20:f0:ca:f2:c7:02:
e3:29:bc:ce:d8:d8:e8:34:7e:29:c1:56:f6:4e:39:cf:07:e2:
63:a4:2c:4f:ab:00:7d:c6:b6:39:08:11:61:20:28:85:0c:dd:
c8:62:7d:5c:2a:e7:30:b4:cf:c4:b6:b3:c2:76:d5:f3:44:17:
f6:dc:63:f0:75:76:84:b6:cd:9d:5c:96:3e:17:86:a4:c2:e9:
af:1b:5c:79:05:ac:e8:50:f9:74:ea:cd:21:7b:7b:cc:18:c7:
92:95:2b:17:4d:78:ee:9e:39:7f:10:ee:c1:f8:b7:01:22:db:
3c:db:35:e5:88:22:3a:55:d8:e4:32:67:81:29:97:9f:ce:79:
e3:60:fa:62:d0:76:43:4a:bc:fa:bc:54:5d:4f:ee:f5:06:9a:
37:4e:48:4d:d8:8d:4a:db:9e:bd:38:ff:d9:80:3c:ce:47:99:
f0:5b:e6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:25:06 2025 by rpki-client