Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
File: aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft (raw, json)
Hash identifier: WH2ku3zm/mJXzzadV08QppfZ0/0UQfIC3x9Tlw73Esw=
Subject key identifier: 60:5B:81:C5:33:7D:C9:30:B5:5B:B8:EB:6E:A1:7B:B2:67:D7:52:4F
Authority key identifier: 69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
Certificate issuer: /CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Certificate serial: 0196BDEE8F1F5EEFA31A899F93553B0AED87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
Manifest number: 02F7
Signing time: Sun 11 May 2025 06:00:50 +0000
Manifest this update: Sun 11 May 2025 06:00:50 +0000
Manifest next update: Mon 12 May 2025 06:00:50 +0000
Files and hashes: 1: aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl (hash: 85uxulzN4z+sQe09AQ859EhAlpDJ+e/m71R1wOwFI00=)
2: ddFSz5BHQOYnaU-gHg3YrxEkhJw.roa (hash: adygbfjd+yjXvUTx2yOuoRyVaLmd0xsTX9kZsgRNyYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:8f:1f:5e:ef:a3:1a:89:9f:93:55:3b:0a:ed:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Validity
Not Before: May 11 06:00:50 2025 GMT
Not After : May 12 06:00:50 2025 GMT
Subject: CN=605b81c5337dc930b55bb8eb6ea17bb267d7524f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:0e:3e:6f:34:0a:84:bf:dc:9b:a2:e4:51:
07:95:64:d9:af:f1:3b:df:ed:32:62:7e:b5:c5:12:
23:ea:0c:13:c2:15:bd:19:59:cf:b8:61:a9:8e:53:
6a:b2:c5:32:5c:8b:ec:c7:97:c9:be:ca:34:b3:54:
5a:cf:85:63:a4:83:26:8b:7f:88:cd:43:20:d4:0f:
27:dd:38:67:d9:0a:f2:32:85:d9:aa:08:2a:b3:37:
20:2f:a9:5b:6e:d6:12:5a:29:f9:00:86:80:90:bf:
d2:ea:b7:24:bb:b3:06:21:6c:4e:20:d1:03:cf:27:
49:45:29:93:db:b9:5c:48:c7:d9:fa:2c:e2:94:8d:
52:21:fc:79:a8:37:ad:62:c7:0e:7b:93:d4:84:30:
ec:f3:79:31:1e:c0:67:f0:95:e6:e1:bd:c4:da:b9:
35:01:0e:03:72:20:f0:95:e2:97:dc:a2:a1:a2:aa:
66:d2:57:d4:88:bb:fd:ad:4d:ed:4c:9f:6f:9a:14:
12:19:60:ab:e4:62:0b:3d:35:de:df:82:cc:9b:19:
6a:5a:bf:f3:b4:39:5e:e8:50:17:54:89:56:6b:c1:
3d:4b:ad:bf:b3:b8:0a:f1:11:68:09:b3:5d:e0:85:
95:a4:7a:af:d8:eb:5a:59:ae:60:c3:e8:ff:90:a1:
40:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5B:81:C5:33:7D:C9:30:B5:5B:B8:EB:6E:A1:7B:B2:67:D7:52:4F
X509v3 Authority Key Identifier:
keyid:69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:43:6f:b4:d2:e2:58:a7:fc:a6:f4:4c:c8:30:00:09:01:db:
34:f1:e0:c9:d4:1b:ae:d0:98:0d:2d:86:41:7f:1c:0c:c7:fa:
1d:6d:03:24:22:04:6d:78:53:16:f4:24:ab:f9:89:a3:e7:64:
97:b4:fb:0c:3b:f7:53:2d:6b:97:69:2c:64:28:18:d3:44:7b:
e9:83:a6:3f:ee:b5:d0:3f:a5:57:1f:b3:94:d1:a3:eb:17:f8:
82:56:f1:59:eb:49:3d:fb:74:f8:5e:8f:ec:32:f3:77:6e:90:
21:92:7a:15:5c:dd:15:39:1a:04:c0:28:f8:36:8e:55:5c:8a:
7a:a5:4b:04:41:a1:ea:ef:e7:43:f0:a2:50:5e:3f:0b:6e:46:
93:ab:3d:ea:73:55:1e:e9:7e:3a:cb:c7:d3:0b:8d:4c:8f:be:
45:68:ee:78:cd:9d:4f:44:71:a2:c8:f5:68:bb:16:0e:92:26:
bb:14:c5:8a:9f:00:a2:5b:c1:3e:4e:f7:6b:e7:91:e4:25:a5:
59:16:56:86:36:4a:4f:5d:90:96:98:9e:e3:b7:68:2e:5f:75:
28:50:89:23:24:2f:dc:90:06:63:fc:4f:4f:5c:39:4e:d0:f8:
24:8d:69:c9:f6:03:79:62:9e:ba:cc:1c:e0:49:9a:32:38:90:
6f:61:a6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:37:43 2025 by rpki-client