Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
File: aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft (raw, json)
Hash identifier: WBzcF097a9RUlCg0KYy1xG9sDciWNB5aHlNvfP8UAM4=
Subject key identifier: 0A:7C:3A:4E:3E:87:47:45:83:BA:5D:24:7B:82:A7:8D:DB:3D:D9:8B
Authority key identifier: 68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
Certificate issuer: /CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Certificate serial: 0196B710394FF18793196D1305F69D162E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
Manifest number: 049B
Signing time: Fri 09 May 2025 22:00:15 +0000
Manifest this update: Fri 09 May 2025 22:00:15 +0000
Manifest next update: Sat 10 May 2025 22:00:15 +0000
Files and hashes: 1: AJ5wMI6kFAAGgXfPHZAVtLCSnP8.roa (hash: O5F5OKdgmFhYvl6NemyAslo9muG5v3CdZb38avB1q8I=)
2: aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl (hash: sJn7U2eomlI2AEf2taFEa5Dk5dJxzGp6DSPxYc9yaG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:39:4f:f1:87:93:19:6d:13:05:f6:9d:16:2e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Validity
Not Before: May 9 22:00:15 2025 GMT
Not After : May 10 22:00:15 2025 GMT
Subject: CN=0a7c3a4e3e87474583ba5d247b82a78ddb3dd98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:32:b9:51:34:ba:84:a9:be:03:f5:0b:04:
f2:3f:ec:f5:c7:f9:c8:50:6f:3c:5a:ec:01:0d:58:
9a:7c:d3:53:f5:ba:bf:1e:48:83:f2:69:c9:63:26:
ad:a8:5f:97:7a:7e:6b:37:81:51:6d:41:71:34:b7:
70:03:a9:24:d3:13:2e:95:dc:55:be:99:85:41:ca:
9c:30:6c:36:ea:fe:e7:24:6c:e6:31:3a:bd:6e:9f:
7a:b8:5d:8f:40:24:69:f4:12:ec:e1:1c:ad:7d:d1:
14:1b:fb:1a:97:63:d3:ea:38:ac:53:5f:45:f6:07:
b3:33:58:0b:44:55:50:e5:21:a1:9c:62:b2:66:3a:
0a:0a:e1:28:7b:dd:c8:a8:43:6e:f2:c8:41:a5:6b:
0b:22:56:6f:2e:1f:a3:34:6c:c3:67:60:37:1c:a5:
58:ae:5d:bc:0d:61:1a:9d:b3:71:d7:87:7b:57:78:
b5:a3:3d:c7:ec:a4:77:16:50:83:94:b1:42:93:c0:
2a:23:2c:f2:93:e0:72:0e:89:4e:3b:34:53:c3:de:
47:88:98:04:c7:34:1b:fe:2c:11:29:08:43:3d:7d:
3c:b3:2b:bd:ac:f4:40:ad:1c:11:00:7b:46:ca:8e:
5c:b1:a9:50:47:fb:14:d2:ee:fb:17:8d:25:eb:00:
09:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7C:3A:4E:3E:87:47:45:83:BA:5D:24:7B:82:A7:8D:DB:3D:D9:8B
X509v3 Authority Key Identifier:
keyid:68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ca:91:db:87:0c:c1:7d:0c:c8:ed:a0:1a:c1:b9:13:f1:4d:
34:e8:94:b3:f4:6e:09:9b:fc:0e:2e:4e:17:a2:4f:19:35:7d:
f4:9a:89:fd:a3:52:24:c7:8b:03:75:f2:19:de:19:e7:9a:26:
44:51:98:56:8e:48:f5:7b:44:ef:61:9e:b4:a6:8a:14:1e:04:
9b:53:83:11:26:00:7d:48:18:6c:fe:be:60:66:93:9f:b4:c2:
dd:31:65:04:86:b0:ce:da:67:61:b4:68:41:d1:05:20:66:7d:
1d:de:3e:59:fa:1c:30:0c:bc:2f:fa:42:eb:b8:e4:a4:c2:b7:
0f:ea:f7:fb:e1:70:25:6a:ea:07:b4:01:79:41:37:2f:8d:aa:
49:28:04:39:30:07:23:2a:fc:7e:07:5e:bb:a6:cb:d2:fb:0d:
d0:78:18:d2:ac:d8:5c:d9:11:c1:96:c7:31:5f:e5:36:c6:7e:
f3:f1:22:37:d5:a0:15:50:39:85:35:bf:ad:8f:a3:0e:72:be:
a3:c2:2a:9c:4b:83:8b:94:51:c5:97:9b:6f:ab:35:0a:13:ba:
0f:c7:15:91:1c:06:87:7b:d4:d2:92:b8:59:5f:95:2b:ea:38:
f9:c4:49:a2:ae:55:eb:62:1b:b3:4e:1c:d5:d1:cc:11:6e:ff:
02:03:5f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:29:23 2025 by rpki-client