Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
File: aYVKV6sNijySLI9qeaqP6KaiwJ4.mft (raw, json)
Hash identifier: Kiit5mxeUG5qmSTjeVmMgvA43TU/WuZKOg24SNO3L6o=
Subject key identifier: 99:71:27:25:29:C2:A7:82:B9:53:99:A5:D6:F9:EB:F9:26:BA:3F:57
Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
Certificate issuer: /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Certificate serial: 0196C8DFA1B03368C8D2D4F3D2CBF70A8B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
Manifest number: 0F9C
Signing time: Tue 13 May 2025 09:00:21 +0000
Manifest this update: Tue 13 May 2025 09:00:21 +0000
Manifest next update: Wed 14 May 2025 09:00:21 +0000
Files and hashes: 1: 8criSeClq2Eu3zzop6X6ae-0yfY.roa (hash: nOinS53G7GkxN9bqxtcws3EdTvx5t+9T2IsaBWfXBg8=)
2: aYVKV6sNijySLI9qeaqP6KaiwJ4.crl (hash: D4dMFN9Eu2G7PBQFBqFkxD49vJiwiidELZ9ZJuV4eZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:df:a1:b0:33:68:c8:d2:d4:f3:d2:cb:f7:0a:8b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Validity
Not Before: May 13 09:00:21 2025 GMT
Not After : May 14 09:00:21 2025 GMT
Subject: CN=9971272529c2a782b95399a5d6f9ebf926ba3f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:02:42:6f:c1:d7:5b:5c:6b:8d:69:92:40:
c0:92:cf:2b:c1:75:6b:9e:34:72:9e:13:b9:ca:fe:
75:80:30:02:b0:e9:bc:4f:1d:3a:44:06:8c:78:ce:
1c:fb:5d:e9:5f:4b:b0:70:f0:1c:1d:63:04:47:c9:
b3:06:8e:bd:70:db:02:3d:65:1f:93:91:da:4c:bf:
b0:54:97:b2:82:1b:80:2e:42:f7:04:2c:71:c8:a1:
4e:b4:00:f3:ed:45:53:2e:db:ab:4b:ab:9e:84:89:
d7:d0:2f:9b:d0:4f:ad:55:be:c7:43:4f:7c:9a:f0:
01:38:02:d2:b7:a0:2e:82:e0:ef:6b:86:bc:a5:fd:
d0:82:fa:4a:04:7a:76:7c:69:1d:4d:5d:fc:1c:2f:
d6:8a:f0:0f:25:8f:62:9d:47:cf:4c:bc:51:9c:72:
9f:5a:5b:10:27:14:90:a9:9d:64:43:09:ad:a5:7b:
e1:b1:5e:a6:8e:23:ca:ad:4c:33:04:86:86:42:4b:
7e:c4:3a:44:21:28:1f:91:53:5b:2b:f5:38:7e:8a:
4a:e5:02:65:a2:6b:40:1c:b1:81:19:81:51:50:7b:
3f:f8:23:1f:af:9d:66:a9:34:d4:ac:73:d8:12:62:
b4:e2:e5:b0:3b:65:7d:4f:db:95:a2:fd:58:b2:06:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:71:27:25:29:C2:A7:82:B9:53:99:A5:D6:F9:EB:F9:26:BA:3F:57
X509v3 Authority Key Identifier:
keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:28:97:3e:d8:1c:b3:c6:0a:91:53:d0:43:86:38:16:dc:ab:
f8:d4:c2:e1:eb:41:52:31:62:25:4e:78:f0:a3:f3:b0:48:f9:
46:84:35:de:85:07:8f:03:6e:0b:64:85:6b:8a:5b:14:00:7c:
30:02:bf:44:d1:e9:bb:87:2f:e8:58:21:3c:85:02:5e:96:b4:
6e:f5:60:ed:07:79:b9:af:d4:1d:32:47:1c:68:1b:da:f5:af:
23:14:27:88:80:15:82:b8:ed:18:01:3f:93:c0:6a:53:0a:b7:
6e:d4:60:a7:65:3b:c5:38:9a:b0:36:ac:66:30:f8:e9:90:64:
00:96:9c:ba:88:69:d1:2b:2c:c7:8c:71:6f:0b:0e:26:fb:04:
ee:51:49:78:17:fd:ff:96:6e:06:d1:51:85:01:d9:47:b2:0c:
bc:70:02:d2:a3:41:9a:2f:fa:e3:24:0d:ae:c6:13:89:51:97:
ba:03:07:e9:03:5b:0f:f7:7a:13:f4:4e:9c:7a:85:ff:f4:bd:
46:0d:bb:1c:32:54:69:20:60:ee:cf:c2:bd:62:19:87:9a:ba:
2e:2d:59:51:9e:f5:66:e9:f3:8e:ad:76:23:9f:d7:98:92:6e:
7c:b3:49:3c:e7:4a:41:d2:6f:a4:83:77:df:a8:63:ad:27:e9:
8d:66:50:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:41:49 2025 by rpki-client