Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.mft
File: aEdQ3w66d01LTWROyOM1CPj1OP4.mft (raw, json)
Hash identifier: RP85cH0c6dSJRtQpwXYPoR1l9VOQDMaROx3EvIhdmu0=
Subject key identifier: 4D:69:FF:FF:68:34:D3:89:9E:DD:3C:5C:AE:D9:34:75:01:7E:15:59
Authority key identifier: 68:47:50:DF:0E:BA:77:4D:4B:4D:64:4E:C8:E3:35:08:F8:F5:38:FE
Certificate issuer: /CN=684750df0eba774d4b4d644ec8e33508f8f538fe
Certificate serial: 0196C013D4FBF1752CE9C603C0E03C028793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEdQ3w66d01LTWROyOM1CPj1OP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.mft
Manifest number: 05DE
Signing time: Sun 11 May 2025 16:00:47 +0000
Manifest this update: Sun 11 May 2025 16:00:47 +0000
Manifest next update: Mon 12 May 2025 16:00:47 +0000
Files and hashes: 1: aEdQ3w66d01LTWROyOM1CPj1OP4.crl (hash: tSbZh7bsTTBXq9qjhT4gBUTnrwkFStFxVVN1lz16PhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEdQ3w66d01LTWROyOM1CPj1OP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:d4:fb:f1:75:2c:e9:c6:03:c0:e0:3c:02:87:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684750df0eba774d4b4d644ec8e33508f8f538fe
Validity
Not Before: May 11 16:00:47 2025 GMT
Not After : May 12 16:00:47 2025 GMT
Subject: CN=4d69ffff6834d3899edd3c5caed93475017e1559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:5b:da:62:df:73:0e:72:19:f4:8e:3c:9b:
ac:76:19:eb:f7:42:8e:55:76:4a:34:9f:cd:f4:2e:
fb:26:f0:57:72:4c:60:58:a9:b7:30:19:84:0a:91:
7a:ca:08:62:bb:02:71:bb:5d:f9:3e:1d:3a:cc:fa:
29:07:b7:41:c2:4e:d6:f3:d5:a9:41:a1:bd:bb:1c:
b2:4b:06:d2:b4:2f:22:14:0c:9e:fd:8c:d6:ba:a1:
48:21:39:bc:3a:68:ab:c0:25:d3:83:16:ed:09:3e:
4a:98:3a:9c:06:df:7f:76:c9:59:e8:52:87:eb:8b:
31:94:6c:47:2d:c0:20:60:66:22:b6:6d:f0:01:2c:
96:62:a1:de:dc:20:b1:6a:50:29:e4:f9:dc:b0:e0:
da:96:5d:40:47:5b:2c:e3:b0:90:a6:dd:3d:4f:50:
1a:0a:55:c2:8e:08:81:05:4b:d9:3e:7c:77:ed:0c:
f4:fb:c2:81:fc:a6:82:b8:ca:dd:8f:6d:69:58:4f:
96:bb:af:ef:77:30:ca:a7:e0:16:b7:93:53:65:12:
a1:e1:58:96:e1:89:21:84:60:d9:98:50:0f:46:ef:
5c:f8:08:5d:4d:35:d2:41:93:35:3d:7f:a4:1c:b6:
02:6e:4a:e8:03:eb:7c:17:8b:a9:06:fc:17:5b:cd:
25:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:69:FF:FF:68:34:D3:89:9E:DD:3C:5C:AE:D9:34:75:01:7E:15:59
X509v3 Authority Key Identifier:
keyid:68:47:50:DF:0E:BA:77:4D:4B:4D:64:4E:C8:E3:35:08:F8:F5:38:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEdQ3w66d01LTWROyOM1CPj1OP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9901fe-52c1-4d5b-9e0f-d325f6863343/1/aEdQ3w66d01LTWROyOM1CPj1OP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a5:94:82:d6:de:c6:f0:bd:e0:19:b1:91:30:94:3a:84:28:
35:b3:c6:c7:ac:16:ac:48:63:c3:a6:d4:de:ee:8b:ab:86:a3:
5f:bf:27:34:98:61:2a:4e:a3:a8:97:4c:7d:9f:c9:4d:f6:1f:
92:f2:45:09:84:30:0b:cb:3b:ba:e2:b0:1e:ee:c4:a3:05:d1:
ff:ca:a0:2b:6f:34:80:e8:34:1b:6d:26:54:c5:c2:7d:c4:dc:
81:28:98:fe:a5:51:e4:bc:76:41:a9:ec:8e:21:e5:81:ff:5e:
29:cd:96:e9:a8:bc:bf:8b:2d:5e:4c:4a:87:17:b1:4d:1e:0f:
d6:60:b6:f2:65:88:5f:e8:15:42:ec:19:d7:ec:f1:5f:c3:d4:
50:45:08:a9:cc:08:8a:9f:12:e4:c5:04:7b:0b:cb:d2:b6:e4:
44:ef:f6:33:1e:e7:6a:a8:b4:0c:75:49:69:60:7b:6f:69:05:
7d:e9:67:48:dd:e1:7e:90:bf:43:19:c9:02:3b:eb:d7:2b:4c:
50:e4:e7:72:76:47:89:4a:e8:c8:a0:55:2c:6e:31:ae:71:f8:
76:36:0a:63:c7:cd:d1:0c:58:74:52:14:ed:69:cd:6b:72:37:
3f:c9:e6:83:8a:ea:bb:5f:b7:d7:21:b9:98:95:46:60:8e:31:
9a:5a:20:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:26:39 2025 by rpki-client