Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
File: aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json)
Hash identifier: AdJlwuI/0aATe021YC4DIRkHYNnSfmJXxwomde0WwNs=
Subject key identifier: DE:51:FA:31:23:E5:DB:05:F1:7D:AB:55:D7:06:DB:9B:01:46:B9:79
Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
Certificate issuer: /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Certificate serial: 0196AFC496DD35722FD2733BA1E372E23C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 12:00:18 +0000
Manifest this update: Thu 08 May 2025 12:00:18 +0000
Manifest next update: Fri 09 May 2025 12:00:18 +0000
Files and hashes: 1: 9peR5n5QXeylxwcwhSYgLjf27HA.roa (hash: mj+nyCVjal6tZvMkRYNWl96UMmHuvQTDEtFMDTf8UoI=)
2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: XnSNZvN4ysVlhSU83TnaVoRIvmJc90a/QsUiDuLAHVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:c4:96:dd:35:72:2f:d2:73:3b:a1:e3:72:e2:3c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Validity
Not Before: May 8 12:00:18 2025 GMT
Not After : May 9 12:00:18 2025 GMT
Subject: CN=de51fa3123e5db05f17dab55d706db9b0146b979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:e5:ae:ea:17:40:d3:4b:69:e4:94:63:1c:
29:e2:ea:48:b3:df:c7:16:b9:4a:32:3b:db:03:09:
1b:41:57:ae:45:a2:16:f7:40:5d:6e:65:64:94:2b:
26:a9:11:35:2b:17:ee:dd:33:83:04:61:71:f8:40:
54:23:68:28:b9:48:de:34:28:d4:0b:7a:15:4d:a5:
ad:e9:5b:42:3a:71:3d:16:65:2c:95:36:43:f4:f3:
93:1f:7f:79:ce:d2:3f:d2:d5:5b:c1:5e:5b:df:ba:
05:8e:3c:d3:36:30:5d:d3:40:1f:ef:c2:4f:55:7d:
73:50:bf:99:fc:72:a9:ca:0c:3b:70:93:b2:84:78:
d0:32:17:ec:b6:e5:a0:82:c7:b7:e5:e7:a4:95:34:
08:45:41:dc:15:53:01:ac:7a:bc:32:b1:2d:f0:ff:
c5:91:3c:65:3e:f7:e8:ae:f2:fb:ac:b4:6a:a2:7d:
8b:f7:2b:95:87:67:d3:c1:17:74:1e:8a:2a:4a:de:
21:79:b2:aa:08:f6:f1:cb:84:03:dd:88:7c:ff:d8:
c5:31:ea:46:c5:85:b3:9b:ad:49:b3:e3:ef:31:11:
a4:32:fb:60:e9:85:75:91:fe:3c:f9:e4:07:8d:5c:
d2:2f:96:b1:9e:32:9d:18:e4:b9:75:82:ba:96:71:
a3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:51:FA:31:23:E5:DB:05:F1:7D:AB:55:D7:06:DB:9B:01:46:B9:79
X509v3 Authority Key Identifier:
keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:21:31:34:ee:ce:57:7a:8f:44:36:12:18:26:8c:66:2d:a8:
a1:46:61:f1:f4:48:ed:1b:cd:45:9e:16:5e:32:de:04:48:c6:
29:91:3d:e4:15:b0:6d:1a:f3:dc:5d:18:92:ab:3f:f6:52:7b:
c6:c0:4a:3d:b8:78:0c:41:a4:36:46:9b:f5:72:f3:fa:66:87:
3b:7e:29:14:da:92:da:2f:16:d0:44:e6:e7:91:51:5c:45:81:
86:7d:6e:16:ed:b6:ad:39:b6:1d:3f:c8:5c:15:09:6a:da:e7:
5e:1a:3c:02:37:80:1f:11:95:70:8b:50:6f:b4:21:14:43:34:
d8:a9:b5:67:fc:9d:df:56:ed:44:80:5b:2d:0b:27:af:82:c4:
78:59:ee:5f:d9:15:50:53:d6:07:b4:c2:a7:e2:a9:ed:b4:cd:
36:5a:5d:4d:ed:e8:7d:93:d7:35:51:c5:aa:2b:f7:c7:b8:86:
45:10:fc:66:60:67:3a:d5:e0:8a:ad:84:4d:42:a0:a9:59:d4:
f1:0c:05:0e:a6:55:2c:87:e1:5c:e3:63:9e:b9:50:9c:c8:11:
f8:08:be:3f:78:a9:2c:7c:57:0f:f6:26:5d:94:89:e1:85:ac:
28:75:46:20:f7:9d:18:9a:c2:00:84:a1:f7:6c:61:e8:86:7f:
65:29:77:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:46:54 2025 by rpki-client