Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
File: aI5xOwfHn5e0fp8DIXaLCUiLegM.mft (raw, json)
Hash identifier: us6R3nvVr8KQ5AsHV8ShhInXL/6dFvRpQXTc7QHF9YA=
Subject key identifier: 09:3C:78:48:F2:7B:02:24:CA:12:DA:97:2C:C8:EB:3D:2C:77:03:F3
Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
Certificate issuer: /CN=688e713b07c79f97b47e9f0321768b09488b7a03
Certificate serial: 0196BBFFBEAF4807263D62DD7C0FD4DE3C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 21:00:21 +0000
Manifest this update: Sat 10 May 2025 21:00:21 +0000
Manifest next update: Sun 11 May 2025 21:00:21 +0000
Files and hashes: 1: aI5xOwfHn5e0fp8DIXaLCUiLegM.crl (hash: XRmv0K8Xx93SmS4x6fOVynsXSN5w2GCSUIs1+YaDO8I=)
2: eKt0iVcZQR9s-wKnsCaLnRBWxb0.roa (hash: r1viPmPOoL4VlPRT69GWy0bXH2hVoJ6TviDvQ+6ZdW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:be:af:48:07:26:3d:62:dd:7c:0f:d4:de:3c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03
Validity
Not Before: May 10 21:00:21 2025 GMT
Not After : May 11 21:00:21 2025 GMT
Subject: CN=093c7848f27b0224ca12da972cc8eb3d2c7703f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:81:dc:ef:32:e3:f4:d1:14:20:b6:94:f0:
16:8b:3b:4e:93:f0:47:f4:79:26:4b:12:ff:50:60:
d6:b7:34:cf:c4:00:93:c1:e1:e9:4e:4b:a1:34:7c:
de:85:28:13:ad:a7:e5:ca:f7:c5:3b:73:09:da:4b:
64:47:64:32:18:da:59:e4:44:cd:58:27:73:35:a5:
a1:a9:d5:24:38:6b:e6:d0:72:36:4d:cc:1c:54:97:
0f:a2:55:88:d1:09:57:85:72:bc:37:b2:ef:57:7e:
ab:fc:05:36:f5:7d:27:d0:8b:3c:bd:19:8e:82:15:
f2:24:b0:cc:fb:ee:75:b1:3d:ea:ff:4b:4b:bb:1b:
2d:c9:8b:c9:5b:60:f0:13:95:a5:bb:22:fe:ea:b4:
4e:cf:0f:a3:78:6f:77:32:63:34:09:fa:30:e9:79:
a4:4c:8b:45:3a:bb:90:61:4d:d4:77:93:a8:21:4b:
5c:39:80:e0:08:58:ff:f5:25:c4:f3:da:cd:ef:42:
87:c3:a7:a7:6a:72:fa:e6:e6:60:d5:7b:18:e9:52:
1b:f8:93:ad:60:f4:01:84:f7:6d:94:08:1a:7e:04:
e0:08:e0:22:65:7c:31:3b:88:c6:12:39:17:05:6e:
d8:e2:e4:26:6d:c9:25:a0:04:e5:25:88:31:44:a2:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3C:78:48:F2:7B:02:24:CA:12:DA:97:2C:C8:EB:3D:2C:77:03:F3
X509v3 Authority Key Identifier:
keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:67:d2:a8:18:bf:5e:93:25:79:17:1f:02:5f:e9:e2:1f:2c:
3d:7f:62:87:14:ba:a6:b8:b7:c3:1a:65:df:6a:b6:cb:2b:ed:
eb:00:6e:9d:9a:aa:a3:ec:48:49:27:74:22:c9:ed:94:ac:6f:
c5:e4:a4:7e:99:c6:55:8f:9e:fb:e6:e5:28:0a:f5:bd:f0:6e:
9e:1b:fe:4d:16:fc:b1:f6:fe:6e:ba:00:3e:c5:53:4c:f6:b2:
69:a7:d1:f0:f5:6d:91:60:a7:89:45:56:b4:05:74:8c:0b:4b:
bc:67:e6:b6:f0:ca:4a:51:1b:65:a2:a3:60:d9:fd:fe:c9:a4:
25:fd:c6:02:53:8b:b3:b0:36:3e:7c:c9:a1:0b:69:01:e4:9a:
ec:19:07:a2:f7:d4:a7:76:bc:1a:db:44:20:bc:c4:8a:6d:6d:
86:fe:ce:95:03:a0:95:88:50:70:84:88:ed:38:3e:9a:63:0d:
0a:69:64:84:0b:ce:04:3c:9a:97:8d:d4:01:01:3f:6a:a7:45:
2e:ca:d6:c1:8f:83:3e:f9:15:4b:69:f8:59:53:0f:35:96:3f:
d0:1d:17:85:b2:f0:43:3c:3e:d9:57:55:77:9b:5b:72:b9:5f:
62:ac:8b:af:8b:90:bf:18:67:8a:15:01:19:07:e9:da:8c:4c:
eb:38:7f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:37:09 2025 by rpki-client