
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
File: aq57yNMxY8xLbdoXGjh_-YAioPY.mft (raw, json)
Hash identifier: LGh4XVlQyP8e3FFLkp1PIzGc9CZq3mlu5otL7r2qpDI=
Subject key identifier: 08:BD:DE:1B:DE:F8:A3:2E:DC:2C:C5:34:53:68:B1:02:5D:DB:70:36
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Certificate issuer: /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial: 0196D7ADF3F638F96519FCF5782679B2FF3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
Manifest number: 133D
Signing time: Fri 16 May 2025 06:00:23 +0000
Manifest this update: Fri 16 May 2025 06:00:23 +0000
Manifest next update: Sat 17 May 2025 06:00:23 +0000
Files and hashes: 1: aq57yNMxY8xLbdoXGjh_-YAioPY.crl (hash: UStNGfJgC+Re079Ts+eeFJwwQg2C8hd6N3elg5mTjrk=)
2: gQqJELq1-EV3FBRQEAYd71OCUP8.roa (hash: bKz/Il/boauhNtFoORiL2V0u7PFpV3gpz4FiQkcwVo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:ad:f3:f6:38:f9:65:19:fc:f5:78:26:79:b2:ff:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Validity
Not Before: May 16 06:00:23 2025 GMT
Not After : May 17 06:00:23 2025 GMT
Subject: CN=08bdde1bdef8a32edc2cc5345368b1025ddb7036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:4b:e0:47:89:59:a1:19:ff:95:31:50:83:
08:55:ad:22:cc:1e:e3:a8:88:03:a4:78:c1:c2:74:
09:ae:72:01:11:26:a3:7c:01:27:ff:b1:68:e8:76:
ca:a3:d3:28:ef:6c:18:b8:03:37:64:3a:6e:f5:df:
e5:d1:20:54:89:48:ad:d8:17:b5:c1:55:a9:85:01:
cb:31:66:91:4d:ce:ce:5c:ce:5d:44:f8:63:3e:10:
9d:24:9d:4c:13:91:74:3a:ad:84:53:ee:63:a1:59:
81:e3:f1:eb:bb:ab:da:80:23:ab:5e:9b:71:73:c2:
96:ee:07:1a:13:8f:31:ee:b0:57:42:d5:3a:fd:46:
34:13:e0:85:81:35:21:2e:2d:96:62:23:61:ff:a6:
d8:75:c9:f0:41:81:d8:db:54:b0:f4:2f:b3:76:fa:
76:24:b3:f3:24:7d:cd:dd:ed:68:6c:50:1a:93:a1:
c9:12:c6:f2:8a:c0:58:3e:7a:b1:ed:e1:d0:90:15:
cc:87:63:c7:8e:ff:95:d3:24:2b:b8:08:49:a8:26:
94:52:9e:70:5f:c5:71:26:14:49:df:d5:f1:be:e2:
2d:d9:c9:14:e6:94:bc:94:d9:49:bc:14:4f:d1:77:
2c:ad:e2:b0:49:ba:00:8a:00:3d:c9:32:ee:ca:3a:
6d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BD:DE:1B:DE:F8:A3:2E:DC:2C:C5:34:53:68:B1:02:5D:DB:70:36
X509v3 Authority Key Identifier:
keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1a:7e:df:f5:87:75:69:83:78:cc:a2:b6:9b:c6:d1:2b:71:
d0:60:db:a4:c6:51:13:cc:ff:8d:a5:98:ea:84:75:c9:d9:ed:
53:f0:1a:fa:2e:7c:6f:98:e9:4a:ba:f4:35:f3:77:77:37:4f:
fd:f6:fb:cd:01:84:96:2a:3a:34:38:c2:30:aa:22:18:90:48:
63:85:83:c2:91:85:39:8d:38:f2:25:2b:02:2b:36:9c:f4:be:
61:4c:e0:e4:81:9c:e2:dc:ad:05:10:9a:4c:2a:0b:5f:18:a2:
1e:13:88:73:9c:76:c0:cf:ea:91:0c:89:56:64:23:f2:7b:b6:
81:f0:25:5a:b4:32:bf:82:3e:e3:09:d2:45:7e:67:b9:e0:30:
b6:f5:ab:52:fb:a3:72:58:da:07:ff:67:38:92:4a:0b:ac:37:
d5:c4:9c:c3:fc:9f:65:93:79:bc:1a:fa:20:55:ba:93:60:7e:
90:00:02:11:4e:78:58:1d:02:6c:4b:3c:8b:b6:bf:0d:b1:07:
2c:b7:d7:d0:e4:bc:e0:90:b2:65:37:c3:66:cc:47:1c:24:a6:
66:6a:ad:cc:a0:df:58:1c:2d:e1:b3:7a:af:c6:61:df:3f:6c:
02:17:77:0e:45:5c:01:4a:24:13:37:65:33:0c:c9:7c:27:5a:
e5:aa:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:18:01 2025 by rpki-client