Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
File: aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft (raw, json)
Hash identifier: 47Gp52IduoQIRucoR8ad/xaTNRjm3RWj3JUaoRkMtS4=
Subject key identifier: AB:36:A1:51:45:60:60:9B:2C:B3:28:04:E3:32:5D:13:55:22:FE:AA
Authority key identifier: 68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
Certificate issuer: /CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Certificate serial: 0196A2AE252156327F90074E3972C456E78B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
Manifest number: 1408
Signing time: Mon 05 May 2025 23:00:43 +0000
Manifest this update: Mon 05 May 2025 23:00:43 +0000
Manifest next update: Tue 06 May 2025 23:00:43 +0000
Files and hashes: 1: VuecASVmjUcKvyphdlmWhBLtzCY.roa (hash: 9pywbAdYpVLPp0+Qv028vFSYWXiOfuf7WbI6OQxi+GI=)
2: aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl (hash: vjo1vBNqbU+SOl8GYIzQC4ZFqiloFxsBOcAeXlXKYFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ae:25:21:56:32:7f:90:07:4e:39:72:c4:56:e7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Validity
Not Before: May 5 23:00:43 2025 GMT
Not After : May 6 23:00:43 2025 GMT
Subject: CN=ab36a1514560609b2cb32804e3325d135522feaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:c3:16:95:54:96:73:d4:19:98:90:0a:d8:
06:b9:df:ec:43:83:31:64:e6:94:da:8f:1f:3d:2c:
f5:03:3c:6d:52:1c:3a:07:81:a8:60:f0:ba:5a:22:
7a:70:3d:62:fc:7b:55:5d:6b:d6:52:98:9d:ca:7f:
fe:7d:77:60:3e:65:4e:36:62:1c:11:a7:73:36:b3:
a9:71:2b:a3:5e:c9:5b:09:64:55:9a:10:c8:4a:18:
77:f2:68:89:bd:43:04:de:49:31:79:ab:01:e7:c5:
ca:5d:41:60:d7:3d:f3:91:e5:aa:f2:e3:0b:f1:51:
3c:99:40:28:ab:7f:19:55:f5:ac:12:6c:d3:9d:11:
47:7e:4a:d5:2a:bc:b8:34:04:58:6c:a0:6d:09:b4:
37:93:17:8a:f5:c2:94:63:f6:3a:cb:e4:c9:94:55:
78:92:b8:43:c0:c7:cc:fc:46:2c:9f:50:fe:09:fd:
6d:57:4b:e9:eb:d5:1c:19:8b:71:f8:43:17:7e:b2:
1c:b2:49:5d:5d:a5:ed:22:67:3c:73:25:79:4b:24:
b2:33:79:21:73:0d:c1:da:29:02:93:8d:f2:5d:3e:
b2:05:6c:e2:b4:c4:42:80:20:33:10:d1:14:a1:ba:
c2:e3:0b:ea:09:8b:6b:b6:80:b7:06:70:03:20:46:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:36:A1:51:45:60:60:9B:2C:B3:28:04:E3:32:5D:13:55:22:FE:AA
X509v3 Authority Key Identifier:
keyid:68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2a:7d:f8:ee:d9:5c:51:71:23:58:f9:0c:b7:0f:4e:eb:f5:
59:2c:f1:40:da:2c:8e:33:69:99:86:0e:63:d1:2d:e0:16:e0:
4b:c7:c4:3f:f8:b8:f0:f7:cb:65:5c:d6:8b:d6:da:03:1d:bb:
4a:b4:b1:57:e1:02:13:b5:54:1a:3f:2e:6e:20:4f:f5:dc:c1:
19:7b:a7:6c:ab:a1:aa:e3:75:14:f9:5e:8c:a9:1f:99:9f:b5:
5d:d7:99:3d:bb:e4:51:55:a6:4d:12:3a:83:29:99:3a:ac:13:
65:11:79:af:3e:ba:27:45:68:b5:bf:aa:89:ef:6c:ea:2d:75:
b9:fb:5d:48:8f:7a:de:fa:af:c8:ce:b5:da:16:bd:a6:9a:68:
30:e4:83:76:c4:41:1b:16:b2:72:a7:28:20:f8:bf:42:86:29:
ac:9d:60:3c:3b:c6:54:d3:94:92:b1:c3:94:3e:d0:fc:b6:b6:
83:4b:c9:f5:a1:ef:17:4e:27:be:65:7d:6e:44:44:f3:a4:bf:
c4:7c:e5:3a:99:cb:31:ab:8a:4c:19:c4:1d:14:72:9b:de:e9:
5d:9c:06:7e:8e:bc:a6:0c:c4:b9:35:1b:00:51:eb:a2:0b:fb:
13:8d:26:96:0d:eb:00:76:36:f3:c6:2d:dc:8a:b3:c0:c8:30:
82:de:0a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:47:02 2025 by rpki-client