Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
File: aYhRnekYGF-24euv0eCDXKoRMuQ.mft (raw, json)
Hash identifier: Xeez1T++6ZQAZB+SvYgKjVeea3Cv8hrq3S9QlkxFTYA=
Subject key identifier: 14:C4:65:D1:60:AA:FC:FC:F0:05:7C:45:79:2F:B4:99:FD:E3:4B:56
Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
Certificate issuer: /CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Certificate serial: 0196E07A5431A1158CEA4451EF51A4BC7C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
Manifest number: 100E
Signing time: Sat 17 May 2025 23:00:35 +0000
Manifest this update: Sat 17 May 2025 23:00:35 +0000
Manifest next update: Sun 18 May 2025 23:00:35 +0000
Files and hashes: 1: TBGpVFI2lLvyIH4AY_XvgasXlhQ.roa (hash: tvFeHcNNfQ4t5ATDiY+/Dak2Xl/WexRzcSGHjDplBZM=)
2: aYhRnekYGF-24euv0eCDXKoRMuQ.crl (hash: RwVWTyZV39zM3leX5fjVHhNZWccGxe9loHjrBpS5qFs=)
3: rbkwFcYLaEEcgP57xj9znwlpmj4.roa (hash: enJo8AXIWRTz+79R6txrBmjabj1OaXyVz0RKSwmCnM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e0:7a:54:31:a1:15:8c:ea:44:51:ef:51:a4:bc:7c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Validity
Not Before: May 17 23:00:35 2025 GMT
Not After : May 18 23:00:35 2025 GMT
Subject: CN=14c465d160aafcfcf0057c45792fb499fde34b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:78:c7:ee:9c:29:94:e5:5c:e9:1e:96:5d:
80:03:ee:7d:dd:50:66:1d:65:46:b7:ef:3d:79:e7:
0f:87:ef:ba:f3:20:0a:72:0c:2b:74:9e:4a:40:1a:
2a:b6:89:86:7f:4d:9c:8f:ba:ba:4a:19:63:87:f6:
94:ce:3f:9f:5e:51:0c:a5:f3:cd:be:22:2d:a8:db:
e3:81:6f:8a:64:29:17:95:64:5f:65:7b:77:c2:fa:
a1:b2:d6:e4:60:12:f2:74:e0:6f:f7:29:85:19:28:
92:18:a0:40:51:92:d9:8b:86:f3:88:be:ec:0b:ff:
26:3e:69:55:9c:02:d7:f7:5b:bf:64:62:28:0d:9a:
9d:e4:55:ce:1f:4d:e5:94:c4:8b:90:44:ab:9a:75:
1b:f4:22:17:c9:7a:8e:41:d6:8d:67:c2:1a:a5:d4:
22:a7:78:b6:a6:4a:1b:ca:da:38:32:0a:de:af:2f:
2a:a1:67:e6:29:ec:52:8d:08:48:8f:46:be:ce:97:
86:98:e0:c4:89:2e:fd:4d:b6:38:d2:74:96:ee:c3:
72:69:7b:eb:a0:52:4a:95:4e:12:4b:e3:99:64:44:
6f:c6:21:da:2a:fd:c5:18:bc:38:a1:df:d9:4d:92:
e2:f2:b3:3b:af:33:1b:12:24:e8:ad:08:14:df:a9:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C4:65:D1:60:AA:FC:FC:F0:05:7C:45:79:2F:B4:99:FD:E3:4B:56
X509v3 Authority Key Identifier:
keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4e:ee:80:ed:41:c8:e4:b7:43:d2:31:18:16:eb:68:a6:09:
f6:d5:7f:3e:ec:f7:23:7a:30:e0:50:12:64:a5:dc:b6:39:11:
1b:b0:77:62:7c:e3:e3:a7:ef:c7:ce:0c:be:b2:d2:11:9a:9d:
c0:c0:14:22:ff:5e:c1:b2:71:83:e8:7b:bd:7a:07:63:79:96:
3a:e5:fb:89:3d:95:17:01:2f:46:78:da:07:bb:d9:bc:a7:c6:
98:e5:ce:83:c9:70:67:c9:04:53:6f:69:0f:4e:41:36:84:a1:
82:88:59:a9:81:93:5a:bb:cd:f4:51:fd:4e:c2:9d:a6:09:a5:
1d:65:af:c3:54:1d:42:b4:86:ed:9a:64:04:71:7a:e5:4b:b6:
7c:82:2e:4c:4f:3a:ba:f7:b8:34:3d:b1:e4:c9:a6:2e:3e:d8:
2d:cc:6e:fb:42:2a:ea:53:1a:3b:fd:e4:68:5c:cb:12:f7:f2:
0f:7c:02:2c:3b:3c:6e:5e:45:a0:7c:0f:12:94:19:02:7e:31:
1c:26:b8:d6:f1:47:13:97:30:d3:4e:b2:35:53:4c:78:02:75:
e9:13:8c:55:f0:78:e9:44:dc:33:b6:b5:1d:1f:7a:bf:73:41:
8e:33:4e:ab:90:0a:6f:7c:ba:7c:9e:09:f2:19:6d:88:72:1a:
c1:ae:4c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:42:18 2025 by rpki-client