Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
File: 04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft (raw, json)
Hash identifier: y2nxQrye8IO9jsuQnUOcmZq1+vMjZZCo3vsGYd4DvpA=
Subject key identifier: 37:B3:53:17:54:5B:E6:1E:60:9F:0A:8C:42:03:43:14:F1:A5:DD:AE
Authority key identifier: D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
Certificate issuer: /CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Certificate serial: 0196C013C03942CEE14EB26FF221D0543D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
Manifest number: 0235
Signing time: Sun 11 May 2025 16:00:41 +0000
Manifest this update: Sun 11 May 2025 16:00:41 +0000
Manifest next update: Mon 12 May 2025 16:00:41 +0000
Files and hashes: 1: 04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl (hash: 7EUFzTC9txtQIWc1mJvhq4pImuByKTNCGpFeIxMEERY=)
2: 0k42oFwK9zeHh7UudZGNANSBYXM.roa (hash: 5Ao6mH3fPzWjkBEDJZN7zRWdA8LcUFLpcoEHQj83IGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:c0:39:42:ce:e1:4e:b2:6f:f2:21:d0:54:3d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Validity
Not Before: May 11 16:00:41 2025 GMT
Not After : May 12 16:00:41 2025 GMT
Subject: CN=37b35317545be61e609f0a8c42034314f1a5ddae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:a2:5a:a6:b9:da:ff:2a:fc:af:67:ce:29:
30:ec:bb:44:22:55:14:39:45:1b:3f:65:08:ca:ae:
e9:1d:e0:7b:1a:ff:ed:9b:09:52:f5:1d:05:a4:2e:
f0:42:29:8f:af:bf:7d:e7:40:ee:c8:82:2b:3e:8b:
e6:cd:a1:b2:f1:db:2c:38:9d:eb:11:9b:f6:8c:7e:
c0:c2:13:15:ae:88:b5:56:fc:f4:15:fa:05:70:96:
05:8c:a1:1d:20:14:b2:1c:ee:14:62:09:1e:9e:3c:
78:12:c3:bd:17:bc:a9:2c:44:e3:38:25:d6:df:61:
21:71:3b:95:1d:c3:6c:1c:0b:c7:61:13:05:ae:41:
70:3f:9c:bf:b5:f0:a0:94:eb:06:60:af:f5:da:d9:
ff:a2:5e:10:55:26:29:10:4b:a3:27:d1:13:d3:39:
ee:82:f2:f1:26:e2:cc:37:b3:e3:50:1d:91:b1:79:
e6:d3:75:e7:d7:90:79:01:96:fd:60:5a:92:62:f9:
87:85:b3:16:d1:cc:7a:12:ef:01:b8:10:5b:c0:a5:
91:1f:e2:08:5a:0f:da:b5:ef:b6:16:63:8f:93:3a:
e4:f4:e0:a5:9d:a3:eb:3d:ec:3b:c9:c7:55:7f:cf:
55:1b:44:d8:e9:b1:7a:91:06:a7:29:fa:c2:dd:0e:
53:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B3:53:17:54:5B:E6:1E:60:9F:0A:8C:42:03:43:14:F1:A5:DD:AE
X509v3 Authority Key Identifier:
keyid:D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f3:fc:75:f1:f5:72:22:eb:6b:e4:2e:ad:1e:d4:65:91:02:
16:05:31:a8:d0:5b:aa:96:2f:45:3e:d2:67:c0:5e:a8:c1:85:
a1:b1:1d:6a:8e:3c:93:13:d6:14:65:a2:b0:fd:5e:bc:4d:03:
9e:71:52:6f:16:86:83:be:83:d7:3c:e1:38:cb:1d:c0:e5:55:
c2:77:30:d4:a7:0d:00:48:eb:b3:2c:a0:5b:58:16:69:4f:94:
46:ae:2b:75:88:a8:51:9a:be:f1:3e:ef:06:28:a8:b8:48:64:
5c:9f:3d:89:d5:91:3f:27:19:81:c9:57:3d:ed:2c:e8:32:e2:
d3:ad:1f:f4:c3:6a:e0:f1:22:91:70:b8:ef:ae:ab:f6:bf:e5:
10:95:8d:4a:ec:72:bf:b7:93:e1:99:6f:b4:41:21:9e:72:35:
d6:e0:8d:6d:4d:49:12:d6:13:6e:ff:7e:d5:33:04:23:72:7d:
9f:e6:d6:b2:f5:ca:08:0d:3a:c8:bb:c6:9a:d5:ff:0c:57:6e:
75:12:ad:ec:f6:5c:ca:cb:80:d2:3c:0e:c0:df:01:d9:c1:ff:
92:fc:23:fd:a8:f9:74:7e:58:39:c4:23:35:f4:19:bd:ba:c2:
82:80:92:64:78:6a:fd:52:0d:6d:b7:b2:e5:ac:e9:5d:86:e4:
86:b5:6a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:19:51 2025 by rpki-client