Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
File: aYfUeTXhE31URCbbUojhKpwCWsI.mft (raw, json)
Hash identifier: 8/MA95H5oJ3WK3LhOxJhaL3044nEY/EIYPLWFnVvs0Q=
Subject key identifier: B1:A5:BB:54:EA:DF:AB:41:12:B2:C1:0F:34:AE:FB:93:43:4D:CC:79
Authority key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
Certificate issuer: /CN=6987d47935e1137d544426db5288e12a9c025ac2
Certificate serial: 0196BDB73BC79A37826F6D0DBC9B5A010C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
Manifest number: 0CF9
Signing time: Sun 11 May 2025 05:00:24 +0000
Manifest this update: Sun 11 May 2025 05:00:24 +0000
Manifest next update: Mon 12 May 2025 05:00:24 +0000
Files and hashes: 1: aYfUeTXhE31URCbbUojhKpwCWsI.crl (hash: M8yCVXIMYESmwbqa25RO5Y5NlELi8GRUeF5TwPoR96A=)
2: u5cM_QOizpw-qJJPqONMvmbrpo8.roa (hash: GZfhlRyj3hdFyyCNQhpcV7zv1K17zHPhBmiPFi/AntI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:3b:c7:9a:37:82:6f:6d:0d:bc:9b:5a:01:0c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6987d47935e1137d544426db5288e12a9c025ac2
Validity
Not Before: May 11 05:00:24 2025 GMT
Not After : May 12 05:00:24 2025 GMT
Subject: CN=b1a5bb54eadfab4112b2c10f34aefb93434dcc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:d3:1b:cc:c9:ab:fa:f4:29:f1:af:59:a6:
6f:bb:b2:93:40:27:73:15:09:c5:bb:f3:68:5f:ee:
ec:1e:25:b5:a8:a8:94:06:d1:4b:c4:62:05:e5:0e:
d0:69:c1:80:2e:79:83:07:c8:8f:43:90:19:8f:a8:
e3:90:e1:92:ec:b9:2d:d0:99:93:2d:e6:2f:d0:57:
9f:71:79:dd:5e:88:bb:0e:7f:da:78:e8:1e:c7:70:
21:cc:e9:04:c3:e5:83:39:23:9a:40:2f:30:f1:49:
79:0b:95:5c:e8:2c:f6:d9:ce:55:05:af:4d:4c:b3:
aa:31:b9:63:96:22:a4:06:f6:24:2d:d7:d6:9e:fd:
ea:c7:6c:79:6b:61:45:51:e4:f6:2b:44:bd:ad:7e:
3f:c3:e1:a9:c0:b4:72:dc:a0:d6:9d:9b:74:20:f5:
83:e7:ba:61:36:27:ce:e9:4f:bd:47:e7:b5:dd:f2:
3c:29:63:cd:8b:0c:6b:64:41:7e:d0:85:bc:ec:43:
4d:db:b1:b0:7b:5c:35:df:7e:4f:c1:a8:41:27:1f:
98:f9:67:1d:32:57:03:7c:5d:23:ab:41:78:bc:54:
f5:bf:c6:b0:1b:35:69:11:42:58:7c:8f:02:62:e8:
68:8e:73:4a:04:dd:b8:3f:15:b4:fd:17:33:16:95:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A5:BB:54:EA:DF:AB:41:12:B2:C1:0F:34:AE:FB:93:43:4D:CC:79
X509v3 Authority Key Identifier:
keyid:69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b3:d9:63:87:6e:85:a2:04:7d:a3:3a:6f:89:e0:0d:96:65:
e7:dd:99:fa:dd:40:fa:a8:52:69:21:2b:f8:f8:9f:7f:b4:28:
80:31:87:b3:4e:0c:dc:9a:88:f7:a6:b4:ea:57:04:b6:e1:2e:
d6:82:8d:6c:b7:e0:cb:25:18:86:85:26:26:47:84:f4:b2:29:
7f:6f:0a:41:58:00:a6:bc:d0:e6:44:16:11:0d:04:d3:9c:10:
ba:53:33:0a:ca:8e:4b:5a:9b:3d:cc:73:e6:0e:77:4c:f4:10:
1d:00:67:12:7d:09:d5:f1:60:82:6c:8c:4f:b3:5e:d6:fe:b9:
e5:10:a8:83:d4:46:58:74:73:79:73:dd:f5:e4:49:7f:0b:da:
c9:87:64:b9:11:4d:0c:30:1f:61:11:d9:37:06:18:c7:2d:a6:
7e:62:44:d7:36:46:95:f7:c1:e9:8a:79:bd:7b:e1:39:35:31:
94:1a:b0:cf:81:9e:66:4f:81:dc:38:4a:ad:b5:4e:91:ee:f4:
33:c1:80:6d:68:ab:fd:0d:40:fb:e7:71:97:df:86:f0:c9:98:
4d:f8:37:a8:5d:43:22:11:5a:34:28:b7:1d:47:bb:89:b8:a1:
08:4e:84:e6:1b:cc:bd:6c:b8:07:48:4a:3b:a3:ab:82:30:68:
57:b1:d4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:23:22 2025 by rpki-client