Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
File: aVnWvK7pOGJcG_oNMifA67q6qtk.mft (raw, json)
Hash identifier: UjW/vJoSBPJvP8iZQhCpYa26BeD1tMnEujzfqCYHqyA=
Subject key identifier: 5C:CF:12:16:9A:CD:75:69:E9:6E:C2:74:8F:FB:E1:D8:5B:23:EC:8E
Authority key identifier: 69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
Certificate issuer: /CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Certificate serial: 0196BD8180E8973846017AFA1404C4216D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
Manifest number: 08D5
Signing time: Sun 11 May 2025 04:01:42 +0000
Manifest this update: Sun 11 May 2025 04:01:42 +0000
Manifest next update: Mon 12 May 2025 04:01:42 +0000
Files and hashes: 1: aVnWvK7pOGJcG_oNMifA67q6qtk.crl (hash: NkpfzTLZKnP+BTpW82k+o1o77rfaBXGTb9n3bcCk2XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:81:80:e8:97:38:46:01:7a:fa:14:04:c4:21:6d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Validity
Not Before: May 11 04:01:42 2025 GMT
Not After : May 12 04:01:42 2025 GMT
Subject: CN=5ccf12169acd7569e96ec2748ffbe1d85b23ec8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:80:6e:a4:26:75:9b:ab:7c:4e:01:99:83:c0:
00:4d:fd:ca:6e:2c:79:31:01:c1:59:d0:54:42:ad:
40:86:19:b7:c0:2e:d8:29:aa:e4:0e:cb:ca:c8:da:
3e:ae:f8:c6:55:8a:68:51:a6:9f:f1:77:5b:6f:30:
62:37:6f:67:5b:b8:e1:fe:d2:d6:76:42:f2:0b:2b:
a5:0e:be:23:8d:a7:fe:06:ad:a6:5b:b1:09:d1:be:
75:82:41:0c:6c:92:db:5e:40:b8:55:55:87:06:92:
68:2a:b3:1d:34:66:9d:92:88:a2:d9:16:02:8f:ab:
3a:c8:16:35:84:4b:9f:68:76:11:31:1b:2c:9b:03:
83:1a:14:eb:ce:7d:f7:70:11:ff:b6:5b:20:f4:c7:
ab:d2:e2:7b:8d:39:74:46:48:f6:c3:a4:72:ec:20:
19:da:4f:6f:bb:f3:a6:87:69:f7:2f:e2:de:2f:4b:
28:33:cf:52:fc:aa:43:02:94:37:46:82:e1:48:09:
6b:3f:6b:90:4d:d1:03:20:0a:0e:da:21:09:82:7e:
ef:9c:40:fb:91:05:d3:04:ea:5b:d3:bf:24:31:26:
2a:68:97:34:32:b1:02:48:5f:8f:5c:91:47:80:c0:
e8:f9:6f:53:44:c4:d7:2a:93:01:f8:fc:b4:e0:51:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CF:12:16:9A:CD:75:69:E9:6E:C2:74:8F:FB:E1:D8:5B:23:EC:8E
X509v3 Authority Key Identifier:
keyid:69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4d:54:73:45:e0:42:47:13:06:26:f5:d4:b1:40:35:d3:ab:
cb:fc:1b:07:10:af:46:da:3b:1f:e4:74:4d:db:5f:ce:6f:0d:
89:21:64:f8:c6:f6:1e:88:d2:3d:76:0c:20:9c:5b:a6:2e:4e:
78:ed:b6:40:15:b4:91:f6:c3:3f:0e:20:22:5c:d9:de:4f:b5:
e0:37:5f:e6:64:22:7a:55:13:84:5b:c7:f7:17:07:0d:26:48:
19:07:e5:c7:27:a3:b6:d2:de:29:42:9b:28:7b:4b:a1:23:4e:
ca:86:9a:86:c3:f1:cf:97:67:90:c9:8b:c9:cc:74:9f:6d:1b:
57:f4:61:a3:58:ef:23:ee:da:99:18:21:91:25:18:ff:67:25:
29:b4:03:8f:a6:0b:a0:89:4c:60:f7:c0:b6:c3:fa:28:c0:bd:
a1:f0:3f:e0:60:bb:66:8a:d7:44:4d:52:e9:88:47:3d:ba:76:
da:06:48:ae:f1:7a:9a:68:4e:ff:1b:d8:8e:ab:91:60:c8:22:
9d:2a:22:de:d1:9b:8d:8f:d3:c0:0a:74:0f:04:ba:d3:f6:ae:
08:b9:64:3d:df:29:0d:cd:4a:9f:d4:5c:bd:f9:81:4f:4b:9f:
48:7a:c7:d5:20:c5:75:92:f2:72:9f:cf:ae:ce:5a:6f:ca:21:
f1:6e:9d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:50:38 2025 by rpki-client