Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
File: aqso6A3xrWqgQDFbhOMmqiOgQXw.mft (raw, json)
Hash identifier: IMVFjHlq3Iv1TkpWs+GS6V2VULM++GEqTIeq/0sh8O8=
Subject key identifier: 44:AA:0A:4E:0B:08:21:36:CC:56:49:15:46:24:50:A7:2D:27:84:3E
Authority key identifier: 6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
Certificate issuer: /CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Certificate serial: 0196D51ABA8C4100A6BFC1085186281E56B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
Manifest number: 06AA
Signing time: Thu 15 May 2025 18:00:20 +0000
Manifest this update: Thu 15 May 2025 18:00:20 +0000
Manifest next update: Fri 16 May 2025 18:00:20 +0000
Files and hashes: 1: aqso6A3xrWqgQDFbhOMmqiOgQXw.crl (hash: UnD4tTb9pokI30//3W+gCbj972BAMu0Ol8YR77199EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:1a:ba:8c:41:00:a6:bf:c1:08:51:86:28:1e:56:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Validity
Not Before: May 15 18:00:20 2025 GMT
Not After : May 16 18:00:20 2025 GMT
Subject: CN=44aa0a4e0b082136cc564915462450a72d27843e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:d4:5c:49:83:c0:73:f4:9c:00:b7:62:83:
3f:b1:76:17:8d:0d:32:2d:11:0a:6a:d1:87:12:84:
1b:2e:a1:ce:b1:d7:bc:7a:6f:8d:6e:b3:68:b4:b6:
55:c7:66:5a:34:6a:0a:34:78:85:96:bb:09:c3:f7:
a7:46:e1:15:3b:cc:02:5f:09:15:0d:9b:86:24:11:
59:ea:56:c3:69:ac:ce:da:81:2b:56:b1:6f:ce:ae:
6b:3a:0a:45:ab:11:31:7b:bc:85:f2:50:da:ac:1d:
04:bb:3f:45:3d:5c:a6:25:7f:6b:f0:b1:2c:3b:97:
5c:3c:6b:ba:d3:80:5f:a4:e5:18:dd:20:8e:df:d4:
6e:24:c8:ed:23:94:fc:0a:28:e2:0f:97:c0:c3:86:
c3:d6:97:80:5e:f5:43:c7:f6:1e:2b:a2:bc:67:a7:
ed:d4:8d:60:ab:cb:c1:49:6e:96:02:d5:a2:5f:2d:
27:2e:3f:34:d9:ea:7a:20:e7:dc:c6:2b:e2:36:b5:
5e:c6:4b:dc:a3:5b:2a:00:c4:f4:59:4f:e5:f9:4f:
c1:ed:9d:b9:20:2a:b2:34:97:1e:17:05:0f:5c:c4:
91:24:10:39:09:70:42:ee:be:ea:40:ff:42:1b:ad:
32:f9:82:73:35:9c:c8:ff:7d:d8:f1:23:b8:1f:67:
4c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AA:0A:4E:0B:08:21:36:CC:56:49:15:46:24:50:A7:2D:27:84:3E
X509v3 Authority Key Identifier:
keyid:6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8e:4d:c6:5f:08:31:d7:af:91:47:be:38:be:11:38:af:68:
fe:8d:52:c7:68:1d:de:2a:bb:bd:cb:a4:29:86:3d:6b:13:c8:
3d:d5:5e:77:57:c0:55:09:fe:6c:0b:d1:86:f4:cf:bc:4f:b7:
ba:8b:89:d4:d5:7c:f1:af:81:af:90:43:c2:a7:96:0f:9a:7a:
80:98:c8:42:4a:05:21:97:3a:47:4f:49:ea:de:06:f9:72:13:
ec:2e:e2:90:47:61:78:3d:55:db:21:b4:4f:a1:91:0c:86:6d:
64:34:c2:fa:4d:99:a1:5a:56:a3:da:e2:82:60:0c:5c:1e:a2:
07:bc:f7:70:1d:f0:46:91:df:45:1a:18:eb:82:3e:db:23:49:
7f:88:73:15:86:76:15:ee:f8:30:ea:a9:6b:50:7e:20:a4:3e:
dd:b7:70:ff:07:c1:2d:e0:87:b7:41:97:cd:d3:83:b7:1c:5d:
3f:60:0b:ac:20:51:28:6e:d6:81:f0:62:37:d1:3f:d8:1d:59:
e3:8a:14:13:85:15:99:28:d7:ed:8d:9d:e7:a4:db:0d:c0:09:
6f:c2:b9:70:8c:8d:7f:07:bc:82:ff:2a:e2:04:ef:6c:08:d1:
16:02:a1:53:91:2f:a4:ca:e9:73:05:4c:18:d2:0c:a4:36:4c:
53:ee:e2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 20:38:36 2025 by rpki-client