Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
File: aErIoCEnBoJ2XSPvAzjzXHht2zU.mft (raw, json)
Hash identifier: 1jClRMyWqqY4/dDqIPDFdZWmJZYli65SPBWX2pzyZMA=
Subject key identifier: 8C:79:D8:FD:6F:45:CF:24:6E:89:E0:65:05:DC:D8:13:1F:29:46:62
Authority key identifier: 68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
Certificate issuer: /CN=684ac8a021270682765d23ef0338f35c786ddb35
Certificate serial: 0196A3F73F86C4DCC88868EC6F033A353DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
Manifest number: 11D5
Signing time: Tue 06 May 2025 05:00:11 +0000
Manifest this update: Tue 06 May 2025 05:00:11 +0000
Manifest next update: Wed 07 May 2025 05:00:11 +0000
Files and hashes: 1: aErIoCEnBoJ2XSPvAzjzXHht2zU.crl (hash: ITfIu0Vhwg2aDrh4WzUICQBhnknDZPHzkEdke2Wbb9w=)
2: eEP1VypyuqVxmlLrgaA9LlVwYK4.roa (hash: 5dvQLaqP0vbYafUJXNT7sKTWbRstUgrMUzxGvHU5Rgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:f7:3f:86:c4:dc:c8:88:68:ec:6f:03:3a:35:3d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684ac8a021270682765d23ef0338f35c786ddb35
Validity
Not Before: May 6 05:00:11 2025 GMT
Not After : May 7 05:00:11 2025 GMT
Subject: CN=8c79d8fd6f45cf246e89e06505dcd8131f294662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:2e:cb:90:8f:94:7b:48:a7:55:a8:b4:0e:
0b:08:86:b5:a3:3f:e9:1e:a9:48:bc:95:98:0d:81:
6e:36:9b:9f:2c:e3:26:f7:87:3f:4f:7a:a8:4f:d8:
8e:86:83:d5:06:a7:6d:e0:f3:2c:45:e3:5f:46:dd:
80:f1:ce:05:d8:14:16:d0:e3:0a:55:f9:73:aa:5b:
a0:ff:8a:ae:7c:c0:1a:81:7b:f4:18:15:19:aa:4d:
7e:1f:eb:ad:dd:9a:86:97:a2:23:a5:5d:cf:09:d5:
20:4c:8c:7e:7f:22:46:4f:73:5f:40:dd:4b:7c:cf:
67:3c:50:d9:32:77:7d:a6:8b:64:3f:d7:48:5b:bb:
35:8a:2d:94:e3:a4:65:19:46:31:4f:24:d9:15:c2:
03:1b:03:2a:73:68:cc:c5:b9:53:3c:23:f9:c3:5b:
68:8f:e9:33:53:29:ea:1c:52:ad:68:c1:66:7f:26:
1c:98:6b:7d:dc:77:35:9d:06:d7:02:8f:75:ad:9d:
c4:48:8b:34:68:d1:bc:97:eb:d8:2e:5d:7d:eb:70:
ac:32:f8:83:c3:e5:5b:49:f4:89:ef:d9:c4:07:d3:
fe:03:b1:c9:e6:fa:b4:f1:07:2b:43:3a:ee:bf:53:
37:97:b9:69:b5:b0:04:7a:bd:51:b6:aa:e4:21:29:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:79:D8:FD:6F:45:CF:24:6E:89:E0:65:05:DC:D8:13:1F:29:46:62
X509v3 Authority Key Identifier:
keyid:68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:96:36:5d:a3:55:e1:1b:cf:94:8a:2e:0e:a7:50:41:b0:7f:
f0:ac:62:68:e6:78:8d:da:36:75:c9:35:1c:18:c3:d0:43:cd:
16:a1:dd:57:9e:ce:5a:ee:5e:8d:9e:69:87:9b:fb:94:c7:3a:
12:52:0f:e7:00:c0:fd:29:15:9a:88:06:f4:23:2e:13:46:a8:
8c:97:45:90:07:f9:c2:ed:42:f2:f8:b1:7f:ca:5c:41:0f:28:
27:25:73:3e:86:ce:7f:47:04:39:77:fa:54:c2:17:d8:9d:1c:
a5:8c:96:b7:aa:af:9e:09:ab:17:6f:05:f3:00:3d:71:eb:30:
a5:3b:c0:b6:78:9d:be:57:29:95:da:f8:6e:44:b2:94:e6:73:
d4:66:f9:ea:6b:35:b6:e4:bb:5d:fb:fb:af:af:32:2e:24:a5:
47:6b:e2:d8:79:56:45:5d:eb:c1:f9:1a:f1:31:e1:47:8e:b1:
83:c4:e7:dd:28:b2:11:4b:cc:0e:ff:c1:e3:a5:f5:f9:3a:48:
f5:99:12:f7:f4:1c:2c:6c:3f:bb:e7:a9:5b:d7:ce:57:32:52:
c1:20:57:17:fc:7d:61:15:da:7e:66:fc:48:5d:1d:5b:f2:3e:
9e:e3:20:41:d8:52:43:9e:9f:50:0f:20:c9:92:ac:14:c9:29:
d2:1f:d3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:20:57 2025 by rpki-client