Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
File: aREkWuICUVXAm-wlqJkdVnrxhB0.mft (raw, json)
Hash identifier: l2eI/kqrgen69ePNPPLkrm0zKSFPwgNcxLMnEMmZLC4=
Subject key identifier: 53:70:C9:5D:3A:90:DD:04:E5:68:94:A7:DA:D1:88:5C:89:FE:AA:40
Authority key identifier: 69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
Certificate issuer: /CN=6911245ae2025155c09bec25a8991d567af1841d
Certificate serial: 0196AE0DA1400F8D3F31963A8D24992C175C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
Manifest number: 152C
Signing time: Thu 08 May 2025 04:00:50 +0000
Manifest this update: Thu 08 May 2025 04:00:50 +0000
Manifest next update: Fri 09 May 2025 04:00:50 +0000
Files and hashes: 1: aREkWuICUVXAm-wlqJkdVnrxhB0.crl (hash: InAoKwetN4zhCHnD+n7fEOqWxzj1JEVQHuO8tnddfyE=)
2: yzENspSptK5NyVWj5Yy0li0xAx0.roa (hash: T86R48aImGqbHLOy/BUV6X7cYzuPf6AXUqD6jlF+8qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:a1:40:0f:8d:3f:31:96:3a:8d:24:99:2c:17:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6911245ae2025155c09bec25a8991d567af1841d
Validity
Not Before: May 8 04:00:50 2025 GMT
Not After : May 9 04:00:50 2025 GMT
Subject: CN=5370c95d3a90dd04e56894a7dad1885c89feaa40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:35:7d:71:53:d4:58:44:08:5f:51:4b:bd:
35:a3:42:95:12:da:eb:e2:ec:03:0b:12:45:24:31:
59:e2:cc:5d:bd:9b:15:32:c9:78:6a:74:d2:12:1e:
17:e0:7b:01:d6:c3:b2:74:3c:2f:e4:45:47:d2:be:
3b:dd:0b:e3:24:da:0f:b1:68:cd:e9:0e:e5:d0:cc:
58:1e:2f:5b:55:dd:0b:3e:f1:18:be:f6:c0:dc:a2:
53:a0:bd:da:d5:40:aa:0e:73:79:9f:85:22:eb:c7:
2d:74:a0:95:70:03:fb:3d:e8:f3:6c:80:ac:a9:57:
b2:a8:46:c9:c4:52:16:05:14:f5:06:a1:9d:ae:b4:
72:bb:37:1f:8b:1c:a8:69:4a:cd:f4:8e:be:44:53:
25:57:4d:cd:b6:2e:8e:36:28:e7:92:06:94:99:dc:
45:44:dc:7f:0c:85:e8:11:fb:7f:fc:d2:e2:76:fb:
0e:fd:df:fa:a3:bb:9f:92:9d:31:ea:8f:67:22:d3:
69:51:04:d2:85:00:8f:b0:80:7f:3b:51:ec:40:89:
51:ba:c7:6c:57:5e:fb:c8:6e:f4:b1:f7:c6:4c:b7:
2d:1c:e1:b7:5c:73:5c:80:e6:41:5f:f8:55:75:55:
bc:ab:ff:de:0e:0c:e1:95:c2:56:9c:a9:c9:46:d2:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:70:C9:5D:3A:90:DD:04:E5:68:94:A7:DA:D1:88:5C:89:FE:AA:40
X509v3 Authority Key Identifier:
keyid:69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:68:08:e1:fc:5d:f7:1e:7b:02:88:3d:6a:ea:f7:00:6b:f4:
2e:19:9e:0b:b1:28:71:a1:0d:a3:06:4c:34:31:cb:c0:46:59:
6d:59:c7:ed:ec:07:5d:dc:25:d7:21:96:9b:ea:dd:ae:7f:7a:
c2:b1:f7:45:f7:c0:17:f1:18:c2:2e:fd:8f:03:bc:0b:8d:10:
96:65:c3:1d:a5:ef:34:30:96:bb:1a:6e:e6:65:90:f1:48:d7:
d8:de:4c:75:aa:5f:96:64:9a:74:8d:30:2c:ff:bd:ac:09:8f:
76:b1:e9:9a:77:8e:bb:fd:8b:1f:3b:9f:6f:b8:9f:0f:57:b2:
45:37:7b:29:1b:a4:fd:a4:0c:7c:a4:7f:42:53:b0:68:df:9c:
47:5a:c9:4e:24:50:b7:2a:75:f1:13:69:ed:22:9f:bc:9b:c1:
bb:62:4b:dd:40:20:39:fa:c6:06:74:4c:06:ce:d0:ce:f4:a8:
84:bb:12:ec:a3:01:ed:5b:22:c0:9a:92:ae:ca:b6:8e:46:59:
d3:c5:c6:4c:17:dc:a8:b3:db:12:45:28:30:64:1f:e6:c3:bb:
ac:0d:c2:19:fe:b5:1f:8a:13:ae:a2:45:4b:0e:3b:d7:97:67:
56:2f:cc:29:b5:2c:e2:59:5e:f2:36:75:7b:ab:86:e6:ad:4d:
b3:da:b2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:28:19 2025 by rpki-client