Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
File: aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft (raw, json)
Hash identifier: ooKLXnSTifKsJDW3HJMCS5WLIaEFU4+Oivhq6eWQbFA=
Subject key identifier: 6E:D7:32:BC:CE:D3:86:12:19:6A:65:BB:86:9A:2F:63:F9:F0:72:3B
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 0196C871D196D8FEBB3E056B1743F3028FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
Manifest number: 0427
Signing time: Tue 13 May 2025 07:00:24 +0000
Manifest this update: Tue 13 May 2025 07:00:24 +0000
Manifest next update: Wed 14 May 2025 07:00:24 +0000
Files and hashes: 1: 1-7Y0vxgGjFDrArJxbSZiKPHjpLI.roa (hash: bOO4FlKJWXEQJjLmaOoP7m2UMLj2WLiNGPSaCEd5lyU=)
2: aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl (hash: BYVRIU1eJ8+LwEq1nYSrAEJLv/CKE96LXI6F17oi9LA=)
3: fxSPTs_KrZKa-NlCbE6u4smq6IQ.roa (hash: 9pMUqI23+lfSB11w0dNCq2uY/O6yUaZq0tlanY1cD7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:71:d1:96:d8:fe:bb:3e:05:6b:17:43:f3:02:8f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: May 13 07:00:24 2025 GMT
Not After : May 14 07:00:24 2025 GMT
Subject: CN=6ed732bcced38612196a65bb869a2f63f9f0723b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:d3:9f:1a:9e:8c:46:3f:5d:fd:17:9c:a6:
91:f1:74:2e:bd:8e:3c:32:c8:7b:5d:97:d7:1a:ee:
ac:fb:34:a2:e7:e2:fc:2a:bf:d1:59:54:ec:21:af:
af:41:a7:b2:59:df:8c:38:90:8c:cd:71:69:ca:de:
c6:96:53:58:11:af:6b:0c:4c:8f:f0:c7:f2:36:16:
60:de:0a:f9:d0:eb:bf:e7:42:f6:6f:29:04:9a:7e:
94:c8:b2:18:56:d0:d1:26:8c:d2:bd:0e:fc:df:23:
7a:1c:18:29:69:24:e4:d7:ef:e7:40:bc:8c:dd:7d:
20:53:26:c7:bd:e2:b0:ce:d8:8b:48:73:be:a9:db:
69:d7:78:e5:ed:5e:6b:33:6f:03:d7:dd:b9:b4:0e:
81:a6:2a:eb:d6:8f:33:20:40:87:75:d0:9d:28:b0:
dd:fa:91:5b:44:dd:92:c8:9d:d8:04:8d:0d:dd:de:
ed:34:06:19:55:93:0d:e4:75:bb:fc:e9:e0:a3:05:
25:7f:10:e9:2f:85:aa:c2:8b:66:1b:c6:86:5b:0d:
70:ed:9b:eb:04:4f:4d:56:fc:4d:94:0e:57:5e:ee:
7c:83:5d:b2:fb:b8:af:00:4c:86:ef:04:f0:95:7b:
7a:30:2c:24:c0:0b:f2:6e:ae:bb:08:7f:af:87:33:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D7:32:BC:CE:D3:86:12:19:6A:65:BB:86:9A:2F:63:F9:F0:72:3B
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:48:3e:d0:1b:b7:a7:b1:b5:18:4d:73:d1:5c:55:40:7c:1d:
d1:bf:b3:f0:5a:fd:9f:52:4c:af:72:a9:68:2e:03:e4:f1:85:
46:74:89:14:59:f5:65:6b:75:f5:d2:ca:6c:b8:a8:4d:ae:95:
cb:60:30:a2:34:e3:5d:ff:5a:6d:d9:09:16:03:45:95:ff:84:
9c:cd:72:bd:39:78:7f:31:1e:da:61:61:ed:bb:1c:63:b5:ed:
e0:a4:5a:03:b1:94:a6:a4:a0:67:55:f7:a0:ef:2d:35:b7:d0:
40:63:54:99:37:b3:e6:55:63:ac:6d:ae:96:85:f3:bf:65:1a:
c2:b6:ff:01:38:6a:72:f0:15:1c:39:d4:50:8e:f2:04:ad:16:
03:19:dd:06:68:48:77:f4:a3:8c:38:8f:e9:91:d4:ef:ba:32:
f8:55:24:74:54:a2:c5:94:e4:93:48:d5:17:ba:8d:be:ad:cc:
97:6c:4d:ad:1c:fe:c3:d3:be:60:ee:23:1d:4e:18:14:05:de:
f6:b0:a0:21:13:4e:2d:13:6a:7c:21:33:cb:c3:21:27:36:91:
ca:e3:c4:3f:ee:6b:ab:c8:b6:e4:c1:d6:86:e9:bd:7d:4c:e4:
86:3a:94:11:95:13:b7:d6:eb:c0:fc:d3:4f:bc:33:9f:be:9d:
b4:9f:82:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:51:57 2025 by rpki-client