Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
File: aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft (raw, json)
Hash identifier: J2cv8dbMu6Nb0L9Miz5kEp1IUichT7psoYy6sxQirBg=
Subject key identifier: A4:84:B0:35:8A:1B:33:F1:EC:3F:C0:A7:BE:DF:52:2E:99:26:15:C9
Authority key identifier: 69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
Certificate issuer: /CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Certificate serial: 0196AA9E6FC7990282CAADFD69D40BCF7608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
Manifest number: 0C3E
Signing time: Wed 07 May 2025 12:00:32 +0000
Manifest this update: Wed 07 May 2025 12:00:32 +0000
Manifest next update: Thu 08 May 2025 12:00:32 +0000
Files and hashes: 1: aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl (hash: Y9acZPaAUI4eiwz/coJus8a1x9yxlqivU0R1iZBvjfM=)
2: jT8P4HyIvKh8r7FQFBaidUndh0Q.roa (hash: Wroxjw87hFNcZdv8/bJmsCuX0IjtBBcn8Xp1138BSK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:6f:c7:99:02:82:ca:ad:fd:69:d4:0b:cf:76:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Validity
Not Before: May 7 12:00:32 2025 GMT
Not After : May 8 12:00:32 2025 GMT
Subject: CN=a484b0358a1b33f1ec3fc0a7bedf522e992615c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4a:1c:7b:53:7e:bc:57:fa:c5:24:10:a5:16:
fd:f3:52:ec:b3:3b:74:1b:07:2e:a5:25:0e:a5:ee:
e7:76:4c:1d:c4:83:48:69:46:3b:58:bc:24:f7:eb:
11:76:61:9e:22:d8:42:29:fd:3d:bc:54:02:35:cd:
f7:03:be:7a:40:e7:71:6b:b9:fd:bb:bd:40:db:10:
2a:be:b1:3d:7f:fa:0b:14:00:af:be:91:e8:d5:78:
e1:19:58:86:3c:be:d0:50:b2:94:04:f3:9c:e8:db:
0d:cd:2e:ad:52:38:7d:13:34:28:bf:58:92:77:36:
58:6c:cf:e9:b5:83:7c:89:31:a7:5f:3f:21:ff:86:
67:27:3d:f5:e8:8b:f2:a1:84:4a:a6:9d:27:83:ce:
30:b9:a6:50:f2:37:98:e4:48:eb:99:81:15:fd:c7:
15:0a:28:de:a9:9b:40:92:a3:24:19:49:f0:60:d4:
bc:6b:25:75:e0:73:af:8a:8b:12:72:f7:26:4d:42:
e6:d4:97:71:fe:52:a2:c0:aa:1d:43:8f:41:2c:b4:
60:2a:6c:23:da:5b:26:06:3e:24:8a:e2:a0:85:dd:
0c:d6:6a:84:78:d4:ea:cc:24:bc:3f:65:1f:ad:8a:
fa:ae:8a:0a:c6:6d:d4:d0:26:22:79:18:86:1a:85:
24:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:84:B0:35:8A:1B:33:F1:EC:3F:C0:A7:BE:DF:52:2E:99:26:15:C9
X509v3 Authority Key Identifier:
keyid:69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:44:1e:21:f7:21:80:1b:40:73:53:d7:66:bf:f0:5b:1b:c9:
88:42:74:81:57:ac:75:f7:ff:74:d8:31:38:1f:b2:07:c0:e5:
2b:f5:c5:87:2f:0f:21:14:06:15:0c:53:ac:24:01:a9:4f:09:
ad:27:50:0a:bb:a2:e0:40:47:35:4d:c4:c7:75:fe:bb:05:c6:
eb:37:92:20:c9:a5:09:e2:b8:0b:79:5b:8f:79:99:1a:99:90:
ce:75:d6:9e:53:14:d2:6b:a5:5e:37:4b:12:61:e6:d2:c5:d6:
15:d5:18:29:50:81:10:ba:88:66:c1:70:4f:5e:4d:2f:0f:07:
02:5f:67:cc:96:c7:1f:67:f9:53:c6:94:a8:98:d6:55:5d:04:
f8:6f:b7:77:4c:3c:77:9b:49:03:61:7d:f3:d5:07:25:71:29:
ea:5a:7c:dd:c0:05:29:43:ee:9f:4c:c1:42:60:b6:76:f2:6d:
10:04:6d:c3:70:23:34:3c:25:9f:6b:0c:f2:01:c1:6c:e9:df:
d2:f7:4d:b8:2b:9a:90:29:85:33:ac:95:86:bf:0d:9f:39:2d:
36:81:9b:7a:df:67:3f:b5:da:a8:2c:91:eb:f6:07:b6:04:e8:
ff:92:f4:f5:25:c3:2c:7a:fb:1b:9e:02:60:38:00:a6:f5:b6:
c8:98:e3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:01:50 2025 by rpki-client