Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
File: AOLDNzGtylfcwzsvuCM_wDiwlek.mft (raw, json)
Hash identifier: uPu1ZZ1ix5p8kMwVCu35P668rgPk1NTRPXLXv27o/6k=
Subject key identifier: EE:CE:46:07:1C:74:9A:D4:E1:94:8C:0C:98:09:83:E2:E9:4E:51:53
Authority key identifier: 00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
Certificate issuer: /CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Certificate serial: 0196B7B4F0DD617DD32C0D122691D673D038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
Manifest number: 106F
Signing time: Sat 10 May 2025 01:00:10 +0000
Manifest this update: Sat 10 May 2025 01:00:10 +0000
Manifest next update: Sun 11 May 2025 01:00:10 +0000
Files and hashes: 1: AOLDNzGtylfcwzsvuCM_wDiwlek.crl (hash: tegzaLTaEG1/Mvl/S4ogL5oYLY8+VX8W99VXwyDO5Oo=)
2: lx4r-_of66D7nj4_JxEX4B7iGSo.roa (hash: nBmUpTvMg37xBiu7Iw7rIz0CmSBaScYekCzZq9oCvAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b4:f0:dd:61:7d:d3:2c:0d:12:26:91:d6:73:d0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Validity
Not Before: May 10 01:00:10 2025 GMT
Not After : May 11 01:00:10 2025 GMT
Subject: CN=eece46071c749ad4e1948c0c980983e2e94e5153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:d0:d2:65:59:61:f7:f7:c6:33:93:cb:cb:
8c:e0:7c:3d:30:fd:42:cd:53:b5:43:80:37:12:05:
96:60:58:12:a6:61:54:82:d5:34:5c:9f:88:12:e9:
e7:20:4e:b7:0f:9e:80:a2:cf:bf:11:c5:14:f6:fa:
3a:f3:c3:74:05:ba:11:0c:1b:f7:ee:90:c6:b2:4f:
12:6a:c0:32:d0:e4:03:4f:ec:c3:3f:59:c5:a0:3f:
21:5c:14:18:23:60:b9:7d:68:fc:4e:e2:a4:f4:77:
8a:6e:2a:e2:05:4a:6b:32:c9:f3:e9:18:5e:2e:21:
5d:b6:9c:46:cc:cb:46:d1:13:c7:a9:a4:64:2c:f3:
a3:47:00:4b:d7:1f:aa:a2:69:21:2c:45:54:de:5f:
ef:56:df:c0:14:67:77:f3:35:d8:d9:51:7a:0f:8f:
8a:50:1c:a0:c7:f8:a0:90:36:06:69:ea:42:aa:86:
d6:b3:92:8f:83:f6:f6:65:6e:9d:74:d9:d3:d5:ff:
75:27:d1:ce:e5:b2:bf:6c:2e:91:3a:68:6c:25:f1:
0e:e7:38:2a:0f:a8:f1:7b:84:78:7f:ef:9e:6b:3b:
4b:9b:23:b5:55:47:d7:d2:7e:23:b1:e0:e1:39:80:
41:f9:23:9e:14:dc:e0:56:a4:3a:e9:40:82:53:42:
ae:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CE:46:07:1C:74:9A:D4:E1:94:8C:0C:98:09:83:E2:E9:4E:51:53
X509v3 Authority Key Identifier:
keyid:00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6d:8a:85:01:93:da:4b:b3:d5:c3:67:4e:90:8c:3e:cc:4e:
df:a4:d9:e2:ba:f0:cb:df:bf:c4:ef:3f:42:ee:bf:12:b1:b7:
f3:ca:f8:7b:10:92:f6:44:9d:70:44:3f:f3:ce:6f:6c:89:10:
58:06:84:5f:cf:d7:54:21:a2:4f:35:a4:1a:3a:53:9d:85:1f:
d0:2e:5e:48:31:47:6a:ef:16:44:0a:3d:16:20:75:45:83:9c:
94:19:47:e7:e0:e0:ea:e5:20:46:41:c8:1f:e6:60:0a:5c:c4:
4d:65:cc:91:ac:0f:60:52:15:d5:64:35:8f:42:b4:d1:83:83:
04:8e:42:f6:3f:9b:f1:ae:80:28:ec:4c:39:14:55:a1:0b:7a:
c8:d9:af:8d:0f:24:59:ee:ac:e9:50:27:5c:fe:3e:4d:cf:c0:
4d:ea:2c:ae:cc:02:56:f6:ba:59:2a:aa:8b:be:7f:85:aa:70:
92:9e:c9:b7:b6:1c:83:8e:a6:ae:fc:79:0c:f1:03:78:69:b3:
8f:35:ca:59:69:87:37:d5:47:39:fd:52:3e:d5:9e:ff:1f:af:
9c:63:02:d6:71:1e:f9:b8:f3:44:0b:50:32:03:30:f3:27:01:
6b:b5:6d:13:ca:1c:97:c3:59:0b:2b:de:0b:1d:d7:dc:f6:dc:
73:42:b6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:15:53 2025 by rpki-client