Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json)
Hash identifier: Z4+HA2zEQCXTbn7VZOEENZ0We1JR/HLIh1N9SxpH3rQ=
Subject key identifier: 65:A1:64:25:8F:71:30:2A:14:D8:DE:19:82:80:2C:4A:77:AE:B6:A4
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 0196C04A75AB3FDDE0AE24582EA0E4875439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 17:00:27 +0000
Manifest this update: Sun 11 May 2025 17:00:27 +0000
Manifest next update: Mon 12 May 2025 17:00:27 +0000
Files and hashes: 1: Mk6bMg9yn912dvqA2bZ2UEvYkBY.roa (hash: KxEzTRFfoJeG7lkUxdhEUvS8hrtrGhN9+8KxA+43syM=)
2: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: g+bhSAV7GCxeKciOsIhpgaik9q2fMDu/w2dHAjCWRkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:75:ab:3f:dd:e0:ae:24:58:2e:a0:e4:87:54:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: May 11 17:00:27 2025 GMT
Not After : May 12 17:00:27 2025 GMT
Subject: CN=65a164258f71302a14d8de1982802c4a77aeb6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d3:7b:51:d9:8c:4f:04:b6:3e:59:82:d5:9a:
00:5a:a0:a8:66:17:49:93:fd:05:2c:e2:fc:f7:06:
1b:38:4c:98:b9:da:e5:e6:c2:93:ad:e8:cd:c3:6d:
12:1f:9e:a6:17:ae:73:f9:67:4f:aa:cf:d0:f4:8f:
d1:89:10:21:c9:78:40:fd:83:e6:e7:79:69:6c:4b:
67:b6:db:85:e2:f5:73:59:c6:22:5d:95:cb:bb:65:
44:d9:fa:a7:f6:8a:88:39:93:d6:2e:b0:d5:52:a4:
57:dc:49:8d:f0:6d:9e:53:95:08:54:3a:4b:d1:86:
06:17:35:55:27:61:69:91:1b:9c:d9:97:cb:68:01:
7b:e2:0f:b8:9c:6a:6c:af:66:31:a3:77:7b:de:4f:
82:35:2c:9b:e6:1f:f8:3d:52:5a:1e:db:74:c6:bb:
1f:35:a6:29:69:31:77:6d:ae:8e:7d:5e:76:f9:89:
dd:c5:a7:13:21:12:6f:49:80:31:28:48:0e:fe:6c:
7f:14:27:a2:79:e9:19:71:8e:69:a5:79:93:a2:06:
ec:4e:bb:74:5e:59:a5:40:1a:72:94:c3:ca:7c:6a:
b1:52:dc:8e:fe:8e:0c:33:d3:32:54:53:09:f6:89:
3c:9b:42:d6:bc:c3:d6:01:c9:50:ce:64:b7:90:84:
fb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A1:64:25:8F:71:30:2A:14:D8:DE:19:82:80:2C:4A:77:AE:B6:A4
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3a:83:f0:5b:4c:8b:02:10:d5:82:c7:ee:3b:23:ff:b2:53:
4d:72:b8:b0:bb:3e:6b:79:6a:d6:57:f5:f9:5d:f3:08:09:9f:
d9:7a:07:09:86:6d:53:d1:5d:c8:10:d2:b3:d1:77:ff:6e:c5:
6e:80:3c:97:c2:fe:29:44:5b:46:24:2a:f1:c3:59:e3:0c:43:
9b:ee:c0:e2:c6:ae:fa:1a:18:78:53:cf:8c:33:cf:01:b5:c7:
20:2d:dd:f1:ec:c7:c4:4e:c8:27:69:74:74:50:a0:c5:e9:d4:
47:40:3f:ee:62:6c:6e:f0:92:23:81:3d:33:f7:74:91:eb:a5:
18:dc:1e:77:8b:f6:10:d7:c0:d8:68:f4:8d:13:77:f4:6b:47:
f4:d0:15:29:b9:39:6c:c2:20:f4:9e:26:62:0b:0e:d1:cb:c8:
f5:f7:72:54:48:f0:d2:a7:74:45:61:f0:90:a6:f4:45:7e:5b:
93:89:c2:b3:cf:14:7d:90:c2:df:3f:8b:a7:03:35:10:95:c5:
d1:dc:8c:dc:9f:34:43:b4:08:29:ba:c8:80:f6:96:e0:9c:48:
4e:1c:8a:72:76:33:65:3c:81:af:58:e7:3d:71:63:5c:77:25:
b5:51:aa:eb:2e:52:1f:bd:01:9a:3c:af:6f:d9:7f:cc:2a:07:
15:f0:a3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:50:51 2025 by rpki-client