Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
File: aa24Jfn9vKDNfHkB3reiKuF5fAY.mft (raw, json)
Hash identifier: 1TxqDZHuoaRk+ngHOs6ijRANQYZBGy+5JA73IWTwwik=
Subject key identifier: 5F:11:34:E6:81:14:60:7F:0D:DC:CA:0B:15:51:A9:AA:72:9F:1F:11
Authority key identifier: 69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
Certificate issuer: /CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Certificate serial: 0196CC4EDD549691FB7318DF426B2E939422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
Manifest number: 1256
Signing time: Wed 14 May 2025 01:00:42 +0000
Manifest this update: Wed 14 May 2025 01:00:42 +0000
Manifest next update: Thu 15 May 2025 01:00:42 +0000
Files and hashes: 1: CcO4X5owbp8OTsQUAi4Se0U0bGo.roa (hash: Rjhil4a1bZ7IivISF1+emC+myyX4/SSXPPEDg9r6bJ4=)
2: aa24Jfn9vKDNfHkB3reiKuF5fAY.crl (hash: 6YL0Hw+Nlhqwv73hz9dlFt4zCI38xcdHUIqM3GgSVFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:4e:dd:54:96:91:fb:73:18:df:42:6b:2e:93:94:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Validity
Not Before: May 14 01:00:42 2025 GMT
Not After : May 15 01:00:42 2025 GMT
Subject: CN=5f1134e68114607f0ddcca0b1551a9aa729f1f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ee:55:29:a7:54:d9:7b:7b:a6:83:38:1a:18:
98:dd:30:b7:48:bb:ed:f8:6a:b5:06:0f:d5:12:7d:
83:ba:28:88:76:74:70:45:c3:26:f5:26:1d:ed:dd:
3b:07:7a:76:0a:b4:6a:01:b3:9c:3e:1f:f6:d5:80:
08:81:63:77:20:3e:7e:06:b5:23:16:f8:93:a9:88:
f6:12:2c:c5:77:5c:f0:8f:9e:7c:14:c8:02:a2:cb:
99:9c:54:e6:2a:ff:dd:55:9e:58:91:58:ea:1b:18:
81:4b:55:5c:61:bc:97:b8:ea:ce:c1:bf:73:36:0b:
4e:c0:d7:50:dc:1a:a3:95:4c:58:a9:b6:26:25:92:
5b:19:06:2b:1f:70:59:46:45:cc:d4:02:3e:04:81:
7b:b7:49:ba:fe:71:36:08:02:f1:da:26:00:df:2a:
0f:29:d2:f2:42:4f:16:e8:30:34:02:54:af:b1:55:
3b:df:22:75:f9:46:5d:23:2d:b1:fe:7c:c4:16:5a:
45:54:99:49:6d:24:8c:08:03:ba:a5:9f:dd:c8:7b:
c3:79:c2:e9:d6:23:c6:b7:91:39:8f:a3:39:5a:3b:
35:d4:d2:22:f2:09:84:d4:37:be:16:4b:f1:6c:b6:
65:e6:7e:79:c1:17:50:5c:b1:f0:df:34:57:b7:ff:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:11:34:E6:81:14:60:7F:0D:DC:CA:0B:15:51:A9:AA:72:9F:1F:11
X509v3 Authority Key Identifier:
keyid:69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:46:1d:99:09:af:0d:2d:2d:1c:65:49:92:d7:e5:d1:6e:25:
4d:98:f9:14:2d:25:51:ec:72:a4:0d:d0:52:b2:a8:75:2a:1f:
81:2b:1f:f1:86:e1:24:80:8a:ac:34:06:f0:20:da:82:44:99:
34:4f:a5:83:d3:9a:ef:97:5b:80:0f:c1:2e:66:fd:79:17:08:
56:ae:5c:86:14:3e:54:38:6f:17:19:b2:ea:5b:33:80:70:f6:
fd:4e:4e:ef:d2:c5:05:7d:4b:e4:b8:1f:bb:41:23:92:dd:e5:
79:c5:df:fc:57:af:13:8b:70:eb:6f:68:b0:df:1e:93:ad:e8:
f9:ce:9d:85:40:5f:14:fb:c9:15:88:17:58:94:9d:73:b3:6b:
87:bd:72:2b:ea:e6:09:1c:25:09:6d:0d:dd:6b:0a:27:6e:b5:
72:23:ad:de:33:86:90:dd:25:36:76:0a:c2:a6:54:fb:17:a6:
1f:71:0f:e4:f4:40:0c:f1:9f:df:63:8b:c6:2d:15:e0:0a:ac:
1c:9d:68:02:c1:58:11:29:96:c0:84:09:bf:87:c9:53:8b:50:
9c:18:21:37:77:2c:72:9e:2a:6a:35:ad:6e:b5:a5:0a:9e:79:
5e:ed:31:03:64:65:17:1f:82:70:83:14:b4:59:ee:75:f1:f4:
f6:8a:0f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:07:26 2025 by rpki-client