Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
File: AA0P7izVZpZcoI21UGY8sgtBI0M.mft (raw, json)
Hash identifier: 7UlcfLbyCJOVufcjyEAoksl6JPD3UD9Oyqj+KEasWXk=
Subject key identifier: FD:76:04:B9:A3:1D:D9:86:AE:C2:F0:CF:74:DD:83:95:BB:52:11:99
Authority key identifier: 00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
Certificate issuer: /CN=000d0fee2cd566965ca08db550663cb20b412343
Certificate serial: 0196C04B16AB5CF7564436B605D8C8F39F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
Manifest number: 0B00
Signing time: Sun 11 May 2025 17:01:08 +0000
Manifest this update: Sun 11 May 2025 17:01:08 +0000
Manifest next update: Mon 12 May 2025 17:01:08 +0000
Files and hashes: 1: AA0P7izVZpZcoI21UGY8sgtBI0M.crl (hash: Gleryuaq63lYpKgsM1EcSfmSlVwnQ1p4QFIExbS0K58=)
2: c2eVtCtVjsi6i3vPHgLATuNVfoM.roa (hash: tozwRqmwgoJZSoOdc4bKHZ1xB9xQYRcf64jJhmtl4S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4b:16:ab:5c:f7:56:44:36:b6:05:d8:c8:f3:9f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000d0fee2cd566965ca08db550663cb20b412343
Validity
Not Before: May 11 17:01:08 2025 GMT
Not After : May 12 17:01:08 2025 GMT
Subject: CN=fd7604b9a31dd986aec2f0cf74dd8395bb521199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:70:17:1e:77:69:81:0c:b8:e2:29:5a:38:
ce:60:34:82:f3:76:20:f4:7c:7b:59:8b:fd:e8:3e:
41:22:8d:09:5e:47:6b:0d:e3:a7:b4:34:c9:c8:54:
b1:98:6c:2a:d6:1a:e9:a4:e9:ec:38:81:fd:16:7d:
98:b2:d2:6c:9d:7f:e7:d5:01:5c:5e:38:5a:e0:0c:
7e:b5:1c:6e:4c:2c:62:71:3b:44:4f:b0:33:e3:4b:
e7:54:49:41:3e:03:c0:b0:8e:0c:c0:15:0e:93:5b:
d2:43:2a:39:e2:ee:06:f2:41:b2:3c:5d:f1:d3:69:
b2:f4:3c:b5:32:cd:ea:b2:9d:06:f3:22:ab:00:eb:
e6:ec:9c:58:a7:b5:82:73:9d:18:7f:94:a1:f3:c0:
78:2f:dd:cf:3e:bf:14:1c:71:6b:02:96:f9:0f:b9:
b5:29:4c:db:74:48:4f:b1:47:f1:0c:d3:49:ce:ab:
37:2a:38:47:a7:bf:93:59:33:6a:d6:e4:42:e8:dc:
7b:47:11:4d:92:63:dd:40:03:8e:55:9c:df:5f:67:
ef:71:aa:04:6b:45:0a:e1:7e:a6:01:58:52:a6:a1:
1d:28:ac:a0:b0:30:2b:cf:16:e7:ec:23:78:c4:ff:
89:c0:1b:9d:77:7a:07:59:24:4b:9f:54:9e:15:f4:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:76:04:B9:A3:1D:D9:86:AE:C2:F0:CF:74:DD:83:95:BB:52:11:99
X509v3 Authority Key Identifier:
keyid:00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6d:42:09:b6:96:91:3a:b7:64:7c:c4:e4:44:a0:03:5d:3a:
ab:c4:42:73:46:f9:77:2b:17:58:38:a2:30:02:85:9b:98:50:
25:24:d7:be:54:f0:d7:64:30:da:5f:db:a0:6f:75:01:42:f8:
84:3b:19:6e:52:65:4d:54:96:b3:b9:0c:04:e2:e8:d3:50:09:
6c:53:0b:24:05:20:dc:49:87:84:1e:76:10:d5:42:81:d9:57:
a8:22:41:d9:bd:a9:c3:4d:19:44:7b:8d:90:5b:b2:22:92:f2:
6f:67:22:72:29:1e:59:6f:ee:8a:1c:8b:13:d6:eb:8b:0c:e8:
29:ab:ea:4c:66:2a:0c:86:2a:b4:f3:62:51:9c:e7:db:a7:21:
f6:99:0a:41:41:55:0b:e4:ec:ae:6f:e6:40:0a:74:2e:c9:bc:
a9:b2:b3:e8:60:ac:98:63:17:ef:b9:c4:75:2e:c7:88:05:ac:
2e:19:23:6c:20:8f:d6:15:77:5d:c2:af:20:ae:dd:e3:55:7b:
c1:81:16:01:5a:d5:88:1b:ce:7e:d7:dc:fd:75:45:89:f9:ed:
e8:34:65:93:41:4f:ae:78:1a:d3:ac:d2:94:be:35:eb:16:69:
ab:3e:eb:72:05:14:78:fc:98:04:47:c3:91:47:76:2d:ae:ef:
f0:f9:cd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:08:24 2025 by rpki-client