Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
File: aQetffrtuWAyDtF0BxUki4lasIQ.mft (raw, json)
Hash identifier: hdVRIRgsoS3D1hbqk/64cATLd63ZJbrTlsudCYtiDRc=
Subject key identifier: 48:FD:4C:0E:45:08:D0:15:45:AF:8E:4B:62:44:4B:AC:DC:DF:66:72
Authority key identifier: 69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84
Certificate issuer: /CN=6907ad7dfaedb960320ed1740715248b895ab084
Certificate serial: 0196B822F44E5223C9EFC90CDE4BBADAB17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
Manifest number: 03B3
Signing time: Sat 10 May 2025 03:00:20 +0000
Manifest this update: Sat 10 May 2025 03:00:20 +0000
Manifest next update: Sun 11 May 2025 03:00:20 +0000
Files and hashes: 1: aQetffrtuWAyDtF0BxUki4lasIQ.crl (hash: 4uwLWHbTJayHYikt+QOIM5wmX1NY+RhCyCn+VFQ6Eu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:22:f4:4e:52:23:c9:ef:c9:0c:de:4b:ba:da:b1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6907ad7dfaedb960320ed1740715248b895ab084
Validity
Not Before: May 10 03:00:20 2025 GMT
Not After : May 11 03:00:20 2025 GMT
Subject: CN=48fd4c0e4508d01545af8e4b62444bacdcdf6672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:dd:93:c3:4a:bb:68:c4:fa:6c:66:d5:71:
61:27:1d:c4:9b:b0:5a:93:c6:6f:fc:bb:bd:2e:5d:
41:cf:44:e5:43:d2:1f:de:e1:6a:b5:e2:df:fe:65:
b1:d7:e6:25:87:6c:f5:25:95:76:fe:d0:cf:28:33:
27:7a:62:71:f2:6e:ac:35:fd:2e:91:08:62:58:3f:
1f:51:df:0c:c2:89:dd:b2:08:1e:12:37:83:ca:5d:
06:4a:82:c2:8e:f0:c0:da:22:4a:a9:7c:fe:4a:09:
39:be:c1:6e:49:d0:a0:4b:60:14:57:2f:8d:d7:c2:
d3:82:ca:1d:4c:6f:cd:f8:cc:d0:f0:21:81:d4:da:
dd:71:5c:26:72:d2:47:88:3f:a6:f6:b6:19:0f:4e:
19:86:94:1a:1a:00:b1:29:72:7e:a9:1a:53:26:e1:
c8:90:3d:8d:fd:dd:b8:b3:c4:f4:16:6f:41:af:12:
da:8b:a4:b2:64:cd:07:4b:34:56:0b:75:27:33:84:
15:59:1f:60:71:f0:3a:d8:b1:7e:f3:4c:68:76:83:
5f:16:d6:e7:f2:d2:9d:b7:79:48:40:a8:f2:6f:f3:
6b:57:85:1f:34:79:c6:1d:93:75:8f:a8:ca:9c:8c:
5e:09:3c:49:f6:8b:04:1c:1b:73:39:95:bd:46:e0:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FD:4C:0E:45:08:D0:15:45:AF:8E:4B:62:44:4B:AC:DC:DF:66:72
X509v3 Authority Key Identifier:
keyid:69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:68:9a:e8:f6:7e:90:b9:d0:1a:94:c9:a5:e4:cb:8b:a0:06:
cb:6c:9c:64:dd:42:3d:9b:13:67:98:9b:0d:2f:b5:5b:26:e7:
82:54:9d:ee:e0:71:a2:27:71:68:c4:20:f7:55:ae:ea:43:05:
7b:b2:26:89:dc:02:ab:56:f7:7b:6a:fa:2c:98:e7:32:6b:52:
3b:3b:32:a7:4e:30:1f:78:ad:8e:cd:9e:07:48:02:02:48:bd:
bf:c8:d4:9e:e6:11:48:db:2a:fe:40:ca:5d:2e:cc:9b:8e:6f:
51:87:ac:8d:b4:5d:80:53:1c:bb:28:38:ec:95:d8:44:a9:ae:
6d:95:ab:aa:d4:68:31:ec:5d:df:da:c6:f8:0e:94:22:0d:26:
3f:fa:1e:a2:43:f4:df:43:29:43:a4:9b:84:da:5b:4b:8b:09:
62:aa:01:2f:69:c4:d1:7e:01:ae:80:f9:ff:d9:63:55:68:a0:
33:c3:ec:d7:3d:1a:b6:e2:5c:03:c4:ef:d9:5e:65:15:10:04:
2b:95:59:6d:b1:8b:bc:d2:d2:0e:82:25:94:79:a7:f0:ab:38:
8a:aa:14:cc:b3:84:39:02:02:0e:81:1f:73:06:c9:fb:3d:f2:
96:4c:e4:95:94:4d:e4:1b:df:ec:d1:bc:75:bc:f4:20:fd:e7:
82:49:48:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:37:00 2025 by rpki-client