Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
File: aIt13GcpXVhht31RoCEYtg3FWGg.mft (raw, json)
Hash identifier: 6txdwl4++fUafc5RGufwisnXeQewLR+HG9SzepF5Tmc=
Subject key identifier: 25:05:28:FB:70:5A:98:69:DB:AB:DF:9F:DD:CE:6C:AD:21:BC:7C:91
Authority key identifier: 68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
Certificate issuer: /CN=688b75dc67295d5861b77d51a02118b60dc55868
Certificate serial: 0196B66C1256B49739D19A7539DB47BB40F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
Manifest number: 0C3A
Signing time: Fri 09 May 2025 19:00:57 +0000
Manifest this update: Fri 09 May 2025 19:00:57 +0000
Manifest next update: Sat 10 May 2025 19:00:57 +0000
Files and hashes: 1: ArfVzV_ad27WSg6MSNAJVOVO4Jk.roa (hash: 7YOwLzYn+04mEiM6zjtu45GNMFpON/tmtRVeglwvQWQ=)
2: aIt13GcpXVhht31RoCEYtg3FWGg.crl (hash: QqRmL/2OckG6DAravSH2vvS0vjjDYgK/5ni39r1YiJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:6c:12:56:b4:97:39:d1:9a:75:39:db:47:bb:40:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688b75dc67295d5861b77d51a02118b60dc55868
Validity
Not Before: May 9 19:00:57 2025 GMT
Not After : May 10 19:00:57 2025 GMT
Subject: CN=250528fb705a9869dbabdf9fddce6cad21bc7c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:06:47:a3:7c:e3:6f:1e:28:ac:59:90:48:33:
41:74:7e:03:98:47:55:0a:a3:a5:d5:7a:5e:ad:5f:
7d:22:14:0f:e5:37:86:45:f5:94:31:ff:83:a7:61:
da:21:58:c4:05:69:7f:66:71:5a:8e:9f:88:40:73:
4d:47:db:54:e3:a1:43:5d:a3:4c:85:96:38:bf:77:
65:64:32:1b:8d:e5:e4:6a:38:57:e4:0a:14:67:02:
a6:b3:96:53:d5:47:f3:0d:57:0b:4f:63:2d:c8:e6:
8a:cf:29:7c:43:39:30:16:f3:55:12:65:2a:e7:42:
24:bc:b8:92:ac:62:7b:c7:4d:ef:68:46:7e:5a:d5:
8c:0b:c7:75:80:cb:db:91:38:25:05:15:fe:34:32:
d6:25:fb:1c:08:66:90:03:ca:86:f6:eb:08:9d:a1:
f1:c2:c3:6e:b9:46:50:94:11:f0:40:dc:cc:21:1b:
df:73:0d:87:3f:cc:24:1e:94:bf:7d:48:b1:5b:44:
c8:19:26:e8:6d:44:6b:bf:dd:1a:61:96:12:c1:c3:
ec:f6:6c:b8:ae:c5:3d:d5:17:a7:6b:11:c2:eb:b6:
d6:f7:be:b7:57:18:30:81:0f:17:3e:5d:8f:1c:3f:
be:d7:cc:40:95:19:4c:06:23:62:55:21:3d:72:1a:
de:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:05:28:FB:70:5A:98:69:DB:AB:DF:9F:DD:CE:6C:AD:21:BC:7C:91
X509v3 Authority Key Identifier:
keyid:68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ae:7f:c5:57:95:81:3c:75:4c:5a:ec:a4:ed:03:66:d1:0e:
fd:fb:c6:97:ef:0a:89:d3:c7:7a:d6:9b:6d:5b:98:e3:ce:78:
90:5c:90:2f:e1:41:58:d1:5f:36:d9:56:e7:e6:e1:3e:55:be:
8d:7a:e7:2e:38:bf:54:d9:2e:ec:a9:15:00:3e:54:95:75:56:
f9:ae:77:91:57:08:c3:ae:e5:2d:4d:4d:45:b2:c7:b7:e5:d1:
e2:17:a6:9c:6f:5d:32:45:66:96:a5:b3:38:78:bc:2b:f4:26:
c8:29:43:49:de:6c:94:49:bd:4c:4f:3d:49:53:80:99:f9:dd:
95:20:9e:34:eb:0d:7f:a4:d4:19:74:a7:d3:15:c7:22:7a:6f:
eb:18:20:be:c7:6a:05:97:d7:95:d8:dc:19:90:c0:b7:eb:09:
71:60:26:74:8a:ec:16:9e:3c:d5:30:dd:fc:e1:4e:0b:98:51:
ae:05:ad:59:09:10:a2:a6:fd:07:ad:25:e1:45:be:70:db:84:
6f:4a:10:7e:19:53:4b:86:7e:dd:fd:c2:9d:b9:a4:a7:e6:35:
d0:b9:27:24:9d:1b:e3:e9:8e:02:46:2e:02:03:66:36:d1:e4:
ef:cb:4c:6b:59:6c:32:b0:8f:62:3f:20:a1:44:76:a9:e2:7d:
dd:32:cd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:57:10 2025 by rpki-client