Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
File: aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json)
Hash identifier: /7CTQHyCrHl1AqUEO8uV2nRzYGtRqrPcHd6Yg/dj86o=
Subject key identifier: 27:EF:D8:84:A2:B1:DB:5C:70:6B:9C:86:31:2D:0D:C5:88:72:3B:32
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Certificate issuer: /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial: 0196CACE3E76989B38019A80E33B1BC1A113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
Manifest number: 1347
Signing time: Tue 13 May 2025 18:00:36 +0000
Manifest this update: Tue 13 May 2025 18:00:36 +0000
Manifest next update: Wed 14 May 2025 18:00:36 +0000
Files and hashes: 1: A95nvExRv6jB5eSZJpOw7UhU9Cs.roa (hash: 377020JWmLx/vMoWlq0LLQD0jueSe9bNRdwFbBb8JvY=)
2: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: YMMGjHmPohzvNYHsbdbIhsNUvKXX1YSIB6VX41gbXt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:ce:3e:76:98:9b:38:01:9a:80:e3:3b:1b:c1:a1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Validity
Not Before: May 13 18:00:36 2025 GMT
Not After : May 14 18:00:36 2025 GMT
Subject: CN=27efd884a2b1db5c706b9c86312d0dc588723b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:2f:e9:d5:2e:bd:a1:6c:e4:32:d9:6d:50:
12:f9:34:49:d0:4f:6a:9a:d7:36:8d:15:bc:83:89:
a0:b1:80:9e:47:f9:fd:0f:e0:65:da:87:82:81:74:
5e:ee:a4:98:7d:87:fc:8b:59:cb:cc:94:38:22:c4:
17:d6:5e:fa:c6:2c:7b:41:44:e8:52:37:18:5c:39:
dc:14:c3:bd:37:a9:2e:94:c5:11:0f:af:8c:fc:b0:
8d:c3:36:ce:be:4e:25:32:03:5b:15:fe:cd:32:c5:
98:30:95:32:13:8e:bd:9a:ce:21:ce:5d:6e:70:ce:
5a:8c:cf:23:9a:25:c3:25:7a:4d:dc:d2:d7:54:cb:
5d:eb:14:64:72:9b:8c:2e:89:69:08:ce:b0:14:18:
62:3c:78:4c:5b:25:9c:5b:a0:0f:5d:34:c8:de:45:
be:42:a3:fe:fe:35:4f:55:68:93:c9:68:57:05:aa:
b2:de:9e:4e:35:33:86:0b:e6:98:79:d0:17:65:e6:
46:70:0d:69:77:88:eb:f3:d7:31:f4:bc:3f:bd:92:
80:f6:06:d3:f3:e7:b4:eb:1d:6a:37:d1:0f:60:57:
92:ed:ef:e2:b0:66:b6:b8:ee:84:28:e1:f0:d9:e9:
aa:98:9d:2b:64:eb:a6:42:30:6f:a0:c6:73:75:06:
d5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EF:D8:84:A2:B1:DB:5C:70:6B:9C:86:31:2D:0D:C5:88:72:3B:32
X509v3 Authority Key Identifier:
keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:68:2a:3a:25:f5:c8:94:73:b3:20:32:f0:28:2a:95:10:6d:
2b:35:ec:b0:4b:b5:a0:86:38:1b:07:86:0c:d3:ca:1c:81:d8:
e0:6f:f3:56:4e:b4:b7:fb:9a:f6:c5:5b:cb:ca:e3:97:a2:7d:
d0:cf:41:d8:d6:b4:87:8f:f2:e6:4f:38:f1:bd:bf:0e:8e:27:
88:e1:94:7e:25:b3:5b:7d:b0:14:e0:1d:87:8b:65:ec:49:8a:
1a:85:f7:7b:1b:b5:17:fc:e5:98:f5:6f:06:09:6c:5a:82:66:
48:e1:5f:a1:52:a4:bd:8d:be:a7:12:50:4c:8f:5f:14:c2:cc:
bc:b1:ad:b7:83:4b:76:16:c1:87:0d:a3:4c:64:c3:95:15:79:
c6:80:c5:25:73:79:2f:75:72:ae:2d:2b:58:71:bc:09:77:14:
60:4b:34:f3:fb:02:f5:23:b8:4a:1f:11:de:a9:a3:ec:a0:aa:
1f:56:1f:b3:83:99:35:c0:38:8a:81:0f:cd:62:47:e8:4d:07:
14:e8:07:43:1a:bd:99:c8:a8:62:09:fc:cd:31:3f:a1:01:14:
b9:a7:45:cf:03:28:b8:a0:ee:8a:42:4c:ff:58:2b:49:fd:8b:
48:d7:e4:df:78:46:0f:d8:c2:8b:9e:41:b0:d3:93:5f:a9:40:
24:ac:f5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:34:53 2025 by rpki-client