Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json)
Hash identifier: 4y7WUTADEhTiCUBfySKZD3pksz30KNFcnuFghc7Kl6c=
Subject key identifier: B5:4D:4C:2B:9D:A4:92:D7:72:FF:9D:C7:77:9E:8E:33:A8:D5:FF:5F
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 019675D56AEDCD0E8A980DCF1F2A2B1CA711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
Manifest number: 1454
Signing time: Sun 27 Apr 2025 06:00:42 +0000
Manifest this update: Sun 27 Apr 2025 06:00:42 +0000
Manifest next update: Mon 28 Apr 2025 06:00:42 +0000
Files and hashes: 1: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: 1Ss4mvGhj4lpA6yhyFmq2PskR0xitl3B1uqmU147jN0=)
2: iGWnAlCFQ6pmXTyPhSirCP5UB4U.roa (hash: 4zG8JsxyxdWf4j+Yjdv8Dm4ymHITRyxtThA4racm63s=)
3: rDWkJyuDMvY3qk_P3bLz1VAfXBA.roa (hash: T51bFQ1LTlcOohBY3SvkvA3KStpNAaU7OZJJkLrtQ5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:6a:ed:cd:0e:8a:98:0d:cf:1f:2a:2b:1c:a7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: Apr 27 06:00:42 2025 GMT
Not After : Apr 28 06:00:42 2025 GMT
Subject: CN=b54d4c2b9da492d772ff9dc7779e8e33a8d5ff5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:ce:b5:8e:68:c7:cf:f6:e0:97:ad:6c:ec:
0d:a3:7f:13:79:7b:49:be:a2:eb:ca:81:dd:d7:b9:
20:e3:32:c4:ff:52:22:93:8f:f6:0a:0f:5c:4d:d9:
64:60:fa:21:eb:f0:05:25:5a:4f:9d:73:75:1c:4f:
3b:ac:e4:41:f8:6e:e0:90:0f:28:fc:55:56:e5:78:
a2:36:ba:5a:31:de:98:4c:ff:c5:dc:57:4a:64:41:
48:04:92:95:aa:99:dd:74:17:3f:cb:f7:99:c6:0a:
6f:30:8b:9c:39:28:14:33:c3:9a:71:f5:07:b2:45:
f0:44:5c:06:d6:8b:e6:de:0a:af:11:30:74:07:60:
3f:a9:f9:43:53:28:d6:33:dd:ca:3b:77:a5:fe:5e:
2d:13:d2:b4:2e:75:7b:9f:93:89:5a:16:7e:a6:dc:
89:8f:88:17:47:6b:bd:7b:59:0a:34:2d:89:ab:a0:
9e:97:74:ca:6b:a2:f6:78:82:4d:09:8c:9e:60:0a:
8d:0a:1b:76:c3:a6:9f:6e:ee:66:0f:ff:40:6e:19:
67:63:2a:10:32:a7:eb:b7:2a:22:6c:3e:3e:9b:43:
9b:c6:06:58:3e:6f:38:1e:15:16:ab:81:7f:12:4e:
d8:5b:39:2b:1c:8a:a4:79:de:2b:e5:cc:c6:05:f3:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4D:4C:2B:9D:A4:92:D7:72:FF:9D:C7:77:9E:8E:33:A8:D5:FF:5F
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e0:f6:83:e3:5c:1e:7b:72:98:e5:81:c9:dc:fd:eb:21:e4:
92:49:8f:f9:ba:a5:19:b2:27:f3:79:1c:fd:77:65:17:7f:cc:
ef:2e:bf:f4:ac:fe:c7:74:ec:bc:f0:5d:a2:1c:75:2d:ed:2c:
f8:9e:ef:f6:63:0c:af:b4:10:e5:51:83:f5:17:59:e2:bf:94:
92:b2:ff:04:db:62:f2:d5:2e:7e:48:8b:c6:e3:c6:24:1a:53:
d3:9b:48:94:af:b2:ee:e6:b4:e0:9c:27:0b:dd:b1:a8:a5:f8:
a1:89:60:a0:96:cb:83:35:83:6b:87:23:ec:e3:17:2c:4a:61:
60:5c:10:b1:b9:69:19:28:60:08:63:33:6c:4d:47:c4:8f:49:
6a:25:ff:98:04:17:61:e4:f7:72:6a:41:b4:33:71:6c:cc:56:
c1:8f:28:dc:88:d6:a3:89:0e:dd:fa:26:30:8f:f1:2f:61:9c:
a3:7e:29:89:b4:28:a4:dd:bb:02:e8:be:8e:bf:e5:9c:36:f9:
2b:30:b4:bb:66:d0:0a:6d:d0:fc:d4:3b:2c:55:08:43:69:19:
3a:49:4a:fa:be:2c:6e:91:23:a6:b3:66:87:f0:37:58:89:21:
be:54:4e:05:01:a5:b6:0d:96:53:dd:79:f1:71:f0:ef:9f:67:
4e:59:83:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:25:57 2025 by rpki-client