Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File: aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier: y3Q31wR/yDPIS7YOWumptqvHPZ4YzQgzXsOaCWukwfc=
Subject key identifier: 62:0E:EA:6C:31:34:10:B3:82:63:F8:A9:75:04:CF:03:A4:7D:77:7D
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 0196A4D3B322D4F68D7346EB276B5EFE842F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number: 140C
Signing time: Tue 06 May 2025 09:00:59 +0000
Manifest this update: Tue 06 May 2025 09:00:59 +0000
Manifest next update: Wed 07 May 2025 09:00:59 +0000
Files and hashes: 1: AxMCzGQBfkdUPjF75_FQYgBKyKk.roa (hash: Q4uzKxO1D3wkqVE3S1h7jCMzrLyzlo8Fuw91HVMqqb4=)
2: GBH94I9dnJeJP-cDtrZrjQV60Xo.roa (hash: y6nZi/uewPtAISPvzpzs2QyOXFXhWR2PVFDixGJRcS4=)
3: H2VZSmbjuhR3ac6MIKzeglyIYks.roa (hash: UIjSJcyc/E8JLENuCv3vqPJa+7OOm7xS/YMDmRv22Kw=)
4: HF4WzxoDXgbg5yBxSS03tW9aru8.roa (hash: PWduzoTmZRp313sGCyiMmvYNM3baM7nUGFf5SyjiJn0=)
5: J77jo9bOLCQlRa9jZXP7dkS-vsc.roa (hash: BkSOP5B+rRmnn+pH6eFEIdlnuALStZNG5jHgh2jmArM=)
6: W5nu10iQUnq2WyeNqh0FW5pghzg.roa (hash: ACfKtWV/LqUk5Me2H3s1q6ll6Bv01sLwUkPbncMCuVs=)
7: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: lw1x5RcogsG9KjMNQNf0IS+kNscZbZ6wtfvRUFcjPBo=)
8: udc46mgp-szqkgSRcIGKFCbr4JI.roa (hash: JhRkQnx4Eha9Xs6OT104V9KWisTA96XNNv0iCMA2cQI=)
9: vyegIY_7PWJ_35cJ7FHof10Oetc.roa (hash: WbJ2gjaiGN54VhXMkNaf0rgW5sSEbQ1P8bkrjt4iUcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:d3:b3:22:d4:f6:8d:73:46:eb:27:6b:5e:fe:84:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: May 6 09:00:59 2025 GMT
Not After : May 7 09:00:59 2025 GMT
Subject: CN=620eea6c313410b38263f8a97504cf03a47d777d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:50:51:ac:f3:b5:e7:f4:a5:87:d8:0c:03:d7:
7c:0f:c0:2c:1c:43:7d:93:f7:10:38:f5:2a:fb:bc:
a6:72:4e:ed:25:4a:59:3f:b0:bc:4d:5b:0f:2d:23:
c7:c5:44:71:6d:87:93:97:2e:3d:52:51:cc:75:4f:
e5:f6:05:74:b5:de:83:dc:44:36:e1:5e:b8:bd:19:
2a:2b:75:54:8d:59:4e:e3:d6:13:a4:4b:6f:d2:ad:
d6:39:ff:50:30:26:fc:4f:0f:83:bb:f8:7a:65:70:
1e:68:5c:30:46:cd:50:c1:79:66:36:f6:99:f2:90:
bd:28:74:07:a7:2b:ed:ae:55:d1:90:1a:55:8f:b7:
ba:74:c5:81:76:7d:93:fd:98:3e:57:cf:aa:e1:10:
b2:1d:2f:85:c2:61:9c:e8:50:21:33:2e:3b:9a:b0:
cf:d0:95:9e:6b:46:36:33:f6:65:a5:05:7b:e1:e8:
b8:dd:e8:31:90:77:11:d5:10:02:d2:41:14:fb:e2:
d7:92:13:49:60:8f:3d:8b:57:0d:04:2a:96:4e:ed:
43:97:67:3a:d9:af:49:fc:bf:3b:93:4a:f5:f2:cb:
a4:b8:ce:04:c7:e8:d1:1a:a9:5e:44:a6:bc:75:1b:
80:e8:ba:80:68:d8:d2:d4:2a:62:ba:f2:48:4c:6b:
91:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0E:EA:6C:31:34:10:B3:82:63:F8:A9:75:04:CF:03:A4:7D:77:7D
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ec:45:2e:70:17:00:1c:7a:11:6c:6c:0e:6b:b0:97:ef:f5:
eb:e5:7b:0b:da:1b:47:29:cc:36:d5:3c:59:06:1e:8b:77:a4:
82:f6:6a:ed:19:fa:20:d0:b0:7d:63:46:f5:7b:e2:8f:c6:35:
29:46:c0:02:09:5e:f1:8b:60:9d:f2:01:98:be:53:46:88:65:
b2:ad:e4:f8:70:9a:92:e2:5a:6d:ed:19:44:b9:38:d4:9d:12:
1d:17:05:d5:08:68:de:34:45:b0:d1:69:49:18:37:5f:42:81:
6b:f0:4f:bd:a7:6e:f7:67:de:47:ab:ed:0a:99:44:1a:f8:38:
b1:df:b3:d2:3b:a2:fa:e6:0f:a3:e8:85:b3:31:80:7c:5c:35:
38:ee:5e:63:7d:04:4d:bc:1f:d7:d2:e9:ae:3d:7c:2a:1a:b3:
57:3f:47:7c:9c:1b:98:4d:89:67:4c:e7:36:80:2b:50:56:e0:
49:cd:18:93:07:a3:8a:71:f3:9f:3c:d6:b9:52:7c:24:41:14:
fb:ec:0c:7e:dd:9c:b1:f6:95:0a:cc:7f:3c:2c:d3:5c:c4:fc:
a7:8a:7c:e8:d8:47:82:6c:69:06:8a:a5:ad:03:be:3b:ab:8e:
94:7b:7c:79:ae:34:cb:b2:e5:be:d9:29:52:df:28:1f:74:f0:
ce:00:d9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:19:26 2025 by rpki-client