Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
File: aIEP_k-SA6EAZ31lGTtEJniaz1w.mft (raw, json)
Hash identifier: cxI6pjqBYMqGcSZq7ZhZjr5joO3Sj75rkbB5tU9RnX8=
Subject key identifier: 3A:A4:38:8F:99:F4:6E:8A:F2:91:FC:29:88:51:81:C1:D2:7F:B3:4D
Authority key identifier: 68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C
Certificate issuer: /CN=68810ffe4f9203a100677d65193b4426789acf5c
Certificate serial: 0196BDB729CE22CD8B5E1B8E755481D402B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
Manifest number: 0945
Signing time: Sun 11 May 2025 05:00:19 +0000
Manifest this update: Sun 11 May 2025 05:00:19 +0000
Manifest next update: Mon 12 May 2025 05:00:19 +0000
Files and hashes: 1: aIEP_k-SA6EAZ31lGTtEJniaz1w.crl (hash: Dq4FqHtllkoPgFCakegWyzmU/Y6wx+pNJ2v/fD/MI/A=)
2: vq_lB1n1a8tSkpEaBYJenT9A5i0.roa (hash: TQs2bRUGUy5hOg6esXq8436QciZ59nHTgLwMPf5bhwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:29:ce:22:cd:8b:5e:1b:8e:75:54:81:d4:02:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68810ffe4f9203a100677d65193b4426789acf5c
Validity
Not Before: May 11 05:00:19 2025 GMT
Not After : May 12 05:00:19 2025 GMT
Subject: CN=3aa4388f99f46e8af291fc29885181c1d27fb34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:61:d7:e5:49:28:4a:53:e1:ee:58:18:9e:
5b:2e:b9:64:f4:00:fd:a4:73:57:08:dd:57:7c:aa:
eb:d6:3f:3c:63:87:16:a2:c2:81:e4:1f:85:66:18:
7d:aa:15:a7:43:41:9d:ef:5d:47:d7:3b:98:27:25:
d1:8b:0d:e6:ed:63:b8:47:e7:e9:83:8e:3f:75:19:
09:ef:76:14:da:d0:5c:23:9c:ad:88:79:ee:3f:5c:
ca:3a:8d:99:28:82:4f:af:b5:ca:51:88:c3:0f:81:
d1:83:9d:b3:82:a2:94:21:e4:3f:7f:2a:7e:5c:34:
1e:98:a7:b5:31:4a:f1:e1:5d:a6:22:85:74:8e:5a:
7b:5d:66:1d:42:32:45:3b:90:b6:b9:5c:09:78:cc:
65:b1:9f:31:62:5d:79:64:8c:10:67:c0:65:fa:31:
d4:5f:fb:ab:c2:c3:ab:d2:8e:1f:84:e7:85:d6:11:
c1:de:6f:7b:46:53:64:b0:7c:3f:cc:fc:58:b7:f5:
ba:f5:3b:97:65:24:9a:81:bd:1f:da:1a:b2:da:f0:
97:f2:be:df:5c:f0:d4:94:70:21:d3:ad:79:75:e7:
69:70:67:c0:9d:68:a2:64:80:5f:1b:a0:ea:f3:40:
5c:26:4f:b2:ae:dc:b1:f8:12:02:a6:d1:7d:28:50:
a5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A4:38:8F:99:F4:6E:8A:F2:91:FC:29:88:51:81:C1:D2:7F:B3:4D
X509v3 Authority Key Identifier:
keyid:68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c4:c4:8c:a8:37:f8:85:c2:76:8f:fb:4d:13:ad:2f:a1:92:
33:5d:20:26:31:33:a1:dd:a1:33:78:05:20:2f:71:6d:cd:b1:
71:00:b6:32:51:eb:d5:a5:1b:1f:58:06:10:5c:dd:ee:e5:da:
44:14:82:72:ea:cd:ac:42:90:8a:61:18:f1:aa:53:93:95:be:
39:62:c4:14:e9:22:d2:4d:91:e1:8a:8e:5c:bc:67:33:4b:56:
49:66:2a:5d:2e:84:84:49:96:73:39:18:5c:03:24:ff:28:0d:
fa:22:41:fa:04:8c:2c:fd:5d:d0:3f:c1:76:24:b5:95:c4:57:
60:2d:ad:a2:97:82:0c:51:10:38:23:12:58:49:ed:d9:8e:17:
06:f8:6b:65:15:61:6c:ff:de:5b:02:89:bf:bf:37:81:76:1d:
7c:13:a1:07:8a:65:80:e4:54:9e:36:89:b2:7a:83:53:40:2d:
a7:ea:a5:19:e1:90:55:ec:7c:c7:e1:16:b6:d4:ba:4d:18:52:
29:dd:aa:6f:2a:c8:f6:da:80:93:bb:b5:5d:5d:83:3b:bf:03:
3d:dc:3c:d9:a9:fe:13:f7:98:af:3e:c2:c5:38:04:01:27:f3:
de:5b:86:1c:fe:19:f7:ad:96:2c:f4:91:21:c1:a7:c2:55:87:
24:d8:bf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:35:39 2025 by rpki-client