Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File: aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier: Kf+0bXqPmxpPGID3zPYeUkpE9L2oqcluSakz1dS1D5w=
Subject key identifier: 50:88:90:E9:D3:B6:95:5A:A6:2F:F3:F2:7E:DA:4C:D5:8F:99:B2:0C
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 01969D19A2BD691DE7D99A9567E5E39BF43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number: 121A
Signing time: Sun 04 May 2025 21:00:25 +0000
Manifest this update: Sun 04 May 2025 21:00:25 +0000
Manifest next update: Mon 05 May 2025 21:00:25 +0000
Files and hashes: 1: HZpeO8_57nt_M9qIXInad5VBRmg.roa (hash: nBZAN/bftccBXWEqjcSEhglUjfU5BncjTL3GeIrsER0=)
2: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: wR2iD8jXSIby/XSjb61oeBjKj7psPk1xn8DVhyjhdKE=)
3: u3Gm6l2xEryYp2Hjv5EZHS-8JWs.roa (hash: pFBOXJ7Esc39OQ26JOyW4DMUlulYCetq6fGsY/MF+5Q=)
4: wco6lby84EFuFZVsD3YJ6jjZJjg.roa (hash: OvjwNT1Vaz0Q8soeoNZqB9D75gw6QRvYDSS5yJ4IFyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:19:a2:bd:69:1d:e7:d9:9a:95:67:e5:e3:9b:f4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: May 4 21:00:25 2025 GMT
Not After : May 5 21:00:25 2025 GMT
Subject: CN=508890e9d3b6955aa62ff3f27eda4cd58f99b20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:58:c5:6b:52:7e:5f:81:36:37:61:e4:8c:
88:15:5f:7a:9e:91:c1:cb:36:86:15:b9:10:8b:48:
b4:d1:94:ee:b8:dc:bb:cb:60:89:73:6a:a8:0c:d1:
38:8a:f9:5f:13:f5:30:b9:c3:82:fa:a1:1c:4c:eb:
3d:8e:78:71:59:b4:cd:55:a4:ca:70:00:b2:1b:b1:
4c:c5:e4:bd:4c:d1:17:0f:1d:57:cf:6b:dc:69:33:
d7:d5:13:1f:b8:74:a4:3a:aa:ba:8b:07:33:cf:90:
86:50:2e:28:92:f2:22:93:fc:ab:50:30:c6:48:63:
a0:13:55:f7:fd:58:d4:88:4a:c8:87:fa:e7:87:88:
ba:4e:1a:87:e7:02:5a:9b:ee:a1:e6:b3:c0:2a:c5:
10:d4:65:4f:a0:3a:52:b6:48:7e:48:f5:9e:1e:11:
9a:65:63:88:7e:03:b1:43:32:54:22:29:ff:d3:35:
e9:a5:c8:b9:44:63:c1:8c:da:f1:a6:30:f7:a7:2c:
01:f9:87:41:a4:0c:6c:9f:54:bc:dc:16:6b:36:4f:
49:a5:c2:66:bb:3a:98:b8:19:ac:c9:64:74:4f:9e:
28:30:8b:5e:16:90:08:87:4a:41:0c:7f:45:05:8c:
60:08:48:16:b0:7f:33:13:7c:6b:8f:10:df:82:8d:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:88:90:E9:D3:B6:95:5A:A6:2F:F3:F2:7E:DA:4C:D5:8F:99:B2:0C
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c9:04:e8:86:0f:f2:78:79:da:7c:cf:43:76:94:9d:f1:12:
8c:25:90:53:fe:e2:da:9a:11:9c:b8:c8:f4:92:1d:9b:ce:65:
cf:0f:2e:76:66:8b:6e:bf:9b:39:2d:b9:f9:0c:b2:fe:93:5d:
1e:65:8b:d9:cf:74:cd:25:55:4c:f8:52:7b:ba:8e:48:be:ef:
83:0f:dd:3b:18:af:19:ee:47:54:5b:cd:31:85:f5:b7:37:40:
c2:5c:a1:60:d8:85:cd:0b:44:a9:cc:eb:3b:04:56:33:61:c2:
8f:65:4f:e1:c9:ef:50:44:0f:81:d5:03:40:e3:ee:15:53:d7:
a9:9f:f1:2a:fe:70:4a:51:78:4c:cd:9d:ac:9a:ec:d1:72:95:
bc:85:29:9b:55:3f:ff:a1:9b:a1:7a:00:4b:b4:02:bd:5f:92:
0a:aa:0c:41:d8:d8:1e:0e:09:ea:f3:0a:36:e0:96:20:ac:4f:
e8:78:e2:23:77:78:d1:a0:78:15:37:aa:d1:95:0f:0a:7d:7c:
c6:e1:72:64:db:b3:2d:4a:b9:50:76:93:d4:e4:fd:af:96:a3:
e3:b2:30:ae:b0:16:00:27:cd:f5:12:3d:25:cd:44:b2:27:82:
e7:ab:f7:0f:7b:5e:d1:3a:d8:17:ae:79:a1:da:86:c0:dc:fe:
d3:4e:56:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:03:34 2025 by rpki-client