Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
File: aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json)
Hash identifier: /rm9JaVfIPM9WEB2pjGvUR9Pao6eY8qSDnKKgELV5BM=
Subject key identifier: 3C:1C:C0:99:D7:39:4A:8B:67:B8:05:3C:76:2A:E6:3D:CA:B8:30:FC
Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
Certificate issuer: /CN=6816171b3f91b1d10b0445987f611428abf13e1a
Certificate serial: 0196BDB735684D750A099EE3287317B1F9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
Manifest number: 19
Signing time: Sun 11 May 2025 05:00:22 +0000
Manifest this update: Sun 11 May 2025 05:00:22 +0000
Manifest next update: Mon 12 May 2025 05:00:22 +0000
Files and hashes: 1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: NvLALcsjUBPaE8Fe5RQ012LkzivZEBdGChev8f4tl9k=)
2: ctE-xjtRaK2N_xv7jPgdr16mAqk.roa (hash: 6dqptnwwlw4mSqTSZoD2O9lUv3DCB5Cf6H1piQtg/m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:35:68:4d:75:0a:09:9e:e3:28:73:17:b1:f9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a
Validity
Not Before: May 11 05:00:22 2025 GMT
Not After : May 12 05:00:22 2025 GMT
Subject: CN=3c1cc099d7394a8b67b8053c762ae63dcab830fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a0:3f:0c:c5:8a:7b:21:60:b4:02:25:65:9c:
50:72:01:6d:8c:58:cd:29:ce:74:ef:6f:e0:ec:cc:
21:d1:c3:85:e6:d5:ae:24:66:b5:e8:51:5f:84:1b:
aa:66:eb:7d:8d:63:c5:f8:a5:d0:fa:c6:ac:42:a3:
c9:61:cf:09:5a:44:79:4e:c4:94:69:e5:8a:a0:34:
cb:87:49:a0:c0:89:5c:eb:48:1c:47:f4:9f:a6:f7:
23:4e:6e:72:6c:b2:1a:9a:9c:90:75:7f:8d:bf:b5:
a6:d9:81:5e:eb:72:fd:bb:33:82:f0:52:be:2f:5c:
7c:2c:eb:ef:75:db:df:f8:7f:af:e0:ff:99:25:74:
20:92:c3:e4:61:0a:56:5b:57:03:1e:bf:f9:f5:23:
e9:b2:37:28:a2:51:bc:01:b2:cc:ab:fb:a8:02:7c:
d2:85:5e:e2:90:d3:4f:bf:7b:54:81:35:83:cf:6f:
d5:27:2e:0b:4c:dc:87:71:8d:64:d5:e2:8f:5d:37:
d3:f0:e9:41:ab:a9:de:2e:de:4a:e7:f0:69:1e:92:
f3:5b:47:50:55:74:ff:bd:03:dc:92:50:b1:c2:0e:
06:90:80:68:e8:39:bf:35:47:58:83:73:c6:b5:07:
7b:39:e2:e0:a3:57:7b:de:84:eb:4b:43:b3:e0:10:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1C:C0:99:D7:39:4A:8B:67:B8:05:3C:76:2A:E6:3D:CA:B8:30:FC
X509v3 Authority Key Identifier:
keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:20:83:06:1f:31:4f:5a:4d:e3:18:a6:6b:a0:74:7b:f7:a8:
d3:1c:d7:4a:08:86:46:70:cc:43:f5:b2:82:ad:5e:61:87:a6:
f0:59:e2:48:f8:11:9b:21:64:df:16:a1:36:12:3e:e1:48:28:
71:6a:29:31:b6:bc:62:90:41:62:b1:e5:b6:8b:2b:94:15:e4:
bf:f6:db:c4:60:d9:9d:c1:6b:84:98:3b:21:c7:00:9f:dc:a6:
28:62:42:e0:9d:fb:af:78:30:ae:21:5f:0b:c1:57:35:23:60:
e1:16:56:63:73:e5:10:48:3a:55:b3:c4:b9:4d:41:b6:43:1c:
ce:8f:ca:29:5a:e6:9b:bd:e2:5d:cc:5f:b2:c3:74:8a:29:ee:
0f:84:ac:85:13:df:08:58:c0:03:a6:10:e8:c9:37:48:65:44:
17:ae:7a:e5:df:c2:9d:85:74:54:f2:23:f6:6a:c2:af:63:46:
bf:17:37:14:b7:96:db:73:bc:3c:eb:11:23:a9:d5:d5:bd:d2:
14:5c:46:42:6b:1e:b3:14:42:7c:9a:f4:ce:20:01:9a:63:83:
0e:aa:fc:54:f1:7e:4c:a1:3f:e7:b8:49:26:78:9e:5c:d5:b3:
3a:fa:1f:78:5e:4c:7c:d6:ed:06:b8:03:06:59:83:3d:28:96:
c0:ff:bb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:06:32 2025 by rpki-client