Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
File: AiyP_FBgnsDYtKcoBciZCmSq5x4.mft (raw, json)
Hash identifier: GBWjejwSseB3amGHgHCGVSYxbMUMapDnNS0hDjIRLKA=
Subject key identifier: 54:CD:2E:9E:AB:FA:60:2A:A5:8C:0E:C0:FF:15:AD:A2:6B:C0:D2:BE
Authority key identifier: 02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
Certificate issuer: /CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Certificate serial: 0196CA973E40B42C004B7302769B5328485D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
Manifest number: 0AAF
Signing time: Tue 13 May 2025 17:00:31 +0000
Manifest this update: Tue 13 May 2025 17:00:31 +0000
Manifest next update: Wed 14 May 2025 17:00:31 +0000
Files and hashes: 1: 7TO4e8lijWMlxMa1DByMrXD5jOw.roa (hash: cDwhkc8bh/DTSiy1V4KBQ3fFakHZ/iT/sbs5LQBmNws=)
2: AiyP_FBgnsDYtKcoBciZCmSq5x4.crl (hash: OWCovRxVQI6ecBBPyVSMCz3bfl1dBKilHWWczf2fCtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:97:3e:40:b4:2c:00:4b:73:02:76:9b:53:28:48:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Validity
Not Before: May 13 17:00:31 2025 GMT
Not After : May 14 17:00:31 2025 GMT
Subject: CN=54cd2e9eabfa602aa58c0ec0ff15ada26bc0d2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1a:59:28:b9:5b:f7:06:8c:64:a6:aa:7b:74:
90:7c:a9:87:73:a4:d6:5e:1e:35:89:8d:d0:b8:9b:
48:b8:1f:7f:bd:25:4d:e6:45:0e:46:ad:16:96:ab:
9c:06:fa:63:8e:e3:0a:a9:27:cf:6c:c9:d2:c6:20:
b6:85:0b:74:b8:77:5b:67:c3:33:12:6a:0e:c9:11:
f3:26:55:a5:1d:3a:df:91:ce:34:57:e5:2c:bd:0c:
83:a3:6e:68:7e:af:ba:ae:53:40:44:e8:64:eb:a1:
99:d4:83:c3:a5:32:98:bd:d0:f3:5e:c4:1d:1d:55:
25:b7:60:35:b2:05:2a:e2:54:ad:a4:72:32:8b:a8:
3b:68:8a:85:f6:83:0d:20:20:2c:10:dd:8d:91:18:
f1:77:c4:62:11:e8:d6:4b:6d:f4:56:d2:97:1f:bf:
3d:c7:1b:8d:b0:21:78:fa:6d:6b:b3:b7:c7:5e:78:
2d:cf:20:55:da:63:27:94:d2:33:ba:c6:73:d4:7d:
81:8f:c3:fc:ae:71:b7:79:05:16:01:83:a3:10:50:
08:20:75:3c:8e:74:d2:53:25:5a:1d:6d:4b:19:37:
99:ce:48:a9:56:2b:26:14:0f:45:c5:97:70:63:83:
ac:13:18:21:e2:4d:0b:e9:f8:17:eb:fe:7d:15:9b:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CD:2E:9E:AB:FA:60:2A:A5:8C:0E:C0:FF:15:AD:A2:6B:C0:D2:BE
X509v3 Authority Key Identifier:
keyid:02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:81:4d:c1:ac:1e:fd:c4:b3:2d:30:1a:70:4e:61:85:cd:fd:
eb:5a:ed:c4:53:3d:1b:13:11:88:80:df:80:e8:31:c7:f5:10:
62:b7:f0:ec:ea:41:10:bb:59:a4:c0:cd:90:98:11:3e:85:89:
a0:f0:70:62:f3:13:37:f2:fc:cd:1f:3a:b5:62:a0:5d:ec:6d:
85:1d:84:07:96:b3:77:bd:f7:38:b9:31:78:eb:81:92:e0:37:
f4:1b:b6:98:c5:dd:92:89:6d:90:b8:e0:fc:1c:55:99:64:b1:
51:4c:46:1e:ed:28:e1:d7:39:18:8d:58:e3:8f:65:03:c0:74:
30:42:52:37:0a:ae:3c:ff:b5:05:0e:ee:36:9c:5d:d7:d5:48:
ab:2e:53:2e:d8:eb:e3:82:97:48:30:b0:09:cf:90:de:91:66:
c9:28:5c:4f:10:e0:1c:fc:1a:c7:20:72:86:63:0f:e5:09:0b:
b4:14:c4:12:2a:7c:1c:c1:5d:09:92:bc:73:87:44:af:42:76:
30:b1:2e:d1:4c:93:fb:5d:14:05:91:b6:05:a1:d5:c0:c6:f4:
3e:7c:22:a9:40:f0:d6:10:aa:76:47:bf:fe:7f:42:28:9f:a2:
24:89:c5:3d:1d:a7:4e:d3:e1:d0:a4:97:bf:a2:92:75:ee:da:
b3:ea:2a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:35:39 2025 by rpki-client