Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
File: aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json)
Hash identifier: 1TEtTigZiYxsqrA0ARVnGCTj3NwnCtCXm62Og/7JiNM=
Subject key identifier: 28:42:7E:D1:90:0E:19:75:56:69:05:2E:11:E2:7C:1C:06:0C:CD:47
Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
Certificate issuer: /CN=69159820dd718004fb15c85b270796cb4e84a4ea
Certificate serial: 0196AA310A0E852151C6928AB0BA5E54A602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
Manifest number: 51
Signing time: Wed 07 May 2025 10:01:02 +0000
Manifest this update: Wed 07 May 2025 10:01:02 +0000
Manifest next update: Thu 08 May 2025 10:01:02 +0000
Files and hashes: 1: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: sMS9yNkDw3UF979jIi6KscpIxxaCF6GEMuY+kzvrJZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:31:0a:0e:85:21:51:c6:92:8a:b0:ba:5e:54:a6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea
Validity
Not Before: May 7 10:01:02 2025 GMT
Not After : May 8 10:01:02 2025 GMT
Subject: CN=28427ed1900e19755669052e11e27c1c060ccd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:97:ff:dd:14:7e:e6:6d:49:35:9f:9e:ff:40:
20:5a:a0:26:93:49:e4:d3:f7:0c:88:91:b7:85:7e:
38:38:fe:0a:e7:1a:90:7e:d2:ca:c5:3f:60:a4:14:
9c:33:35:dc:9d:f7:8b:42:0b:01:80:b9:c8:b0:a4:
8c:fa:25:73:4e:c0:7a:29:4f:cd:2a:90:2e:9b:77:
d3:3d:ca:25:1a:0f:c4:0c:43:69:77:6b:36:cf:b9:
fb:4c:6b:0d:80:12:e6:e1:d9:da:71:4b:c2:e5:10:
23:a1:66:60:4c:84:61:3a:76:23:56:85:29:35:0e:
04:79:91:26:71:0d:7e:3d:b5:35:b4:6f:81:9e:04:
1d:0b:55:e0:bf:25:20:27:6a:d2:c4:10:3e:42:48:
cb:cb:75:b6:65:fe:af:45:98:ed:ba:b2:59:66:58:
52:80:ec:bb:09:b5:db:58:80:8c:96:d9:35:f9:aa:
25:70:0d:63:61:67:58:30:85:e8:b1:30:4e:05:e3:
4c:a2:03:5e:ce:15:74:af:cd:0e:72:20:a1:db:bc:
24:3f:e2:dc:3d:99:b8:4f:8c:66:8a:07:b6:1e:5e:
99:db:a4:9f:ee:3a:4e:00:82:b6:b4:a9:ba:8e:dc:
e1:98:7a:9c:86:2d:72:44:c8:74:f8:3f:2a:e6:b5:
5d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:42:7E:D1:90:0E:19:75:56:69:05:2E:11:E2:7C:1C:06:0C:CD:47
X509v3 Authority Key Identifier:
keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:8e:b1:59:d1:2e:5b:d5:5f:b9:f4:fb:19:48:27:ae:fa:bb:
7b:4a:81:c9:a1:b1:1e:78:ce:1f:66:04:65:23:86:06:bb:30:
a2:ca:ce:64:5a:b2:5e:02:b0:ef:ac:9b:8a:49:97:9a:0d:52:
e7:e3:65:ff:35:62:6a:a1:0c:ab:03:02:7a:5c:7c:0b:e8:43:
28:c0:e6:70:22:f8:fc:33:87:a9:96:13:1d:44:56:28:a1:c5:
27:82:c8:8a:da:c5:32:e0:21:6c:f2:da:bc:40:dc:83:62:2f:
9d:b6:b4:0d:78:7e:94:03:52:bf:2e:be:d6:1b:07:31:45:7b:
6f:4f:f5:6c:cb:88:ef:b9:51:6a:a9:5a:75:8a:d2:9a:7e:76:
02:e1:97:63:eb:1d:d5:32:18:a7:82:4c:7e:86:dd:5b:d2:11:
7d:d5:37:15:55:b6:88:9e:f7:a4:3f:3d:81:dc:50:0e:a2:aa:
a2:80:f7:d9:22:26:5d:85:cf:f9:a7:83:21:43:9b:6a:79:58:
46:bf:88:79:7c:f8:7d:5c:f0:b6:0f:a0:cb:f5:89:38:9a:ae:
ac:aa:b7:4f:54:ff:69:93:8b:b5:fb:ba:fc:ab:50:a1:08:b8:
a7:6b:ff:93:f3:2d:34:8c:e4:71:3b:42:cc:f2:32:34:f3:7e:
c4:fe:a4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:55:03 2025 by rpki-client