Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
File: aesKgBz9tLWANaXQdaKQSy6qX5E.mft (raw, json)
Hash identifier: t4UBkO1XQLrYOSnon3fn9nIkwbnWlw3eNHk9OLuAHaM=
Subject key identifier: 6C:54:FC:84:D3:29:F7:E3:8F:9D:D4:E4:E6:BD:53:3D:BD:A4:52:DD
Authority key identifier: 69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
Certificate issuer: /CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Certificate serial: 0196760C0F6B2986C81959B71E425BED6D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 07:00:23 +0000
Manifest this update: Sun 27 Apr 2025 07:00:23 +0000
Manifest next update: Mon 28 Apr 2025 07:00:23 +0000
Files and hashes: 1: aesKgBz9tLWANaXQdaKQSy6qX5E.crl (hash: Zz9RIq2AsthUd0+FLxCRluHiX7uU5nNk2hVpXr6mO4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:0f:6b:29:86:c8:19:59:b7:1e:42:5b:ed:6d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Validity
Not Before: Apr 27 07:00:23 2025 GMT
Not After : Apr 28 07:00:23 2025 GMT
Subject: CN=6c54fc84d329f7e38f9dd4e4e6bd533dbda452dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:59:80:6c:0b:ef:96:7b:ae:02:44:70:67:
ca:6a:24:1d:bc:0f:0a:22:c0:b7:45:eb:c0:1c:68:
99:a2:94:fe:89:b0:29:3d:1b:98:e5:36:1e:7b:2d:
55:8d:a7:23:84:28:64:aa:c9:63:af:1a:b5:60:20:
8f:49:04:de:40:81:a6:83:7e:af:9c:7a:b4:3a:88:
af:37:e9:d5:75:05:ab:6c:66:78:51:52:dc:71:ec:
1b:ad:fd:3b:ed:8f:7b:c7:79:bf:02:1e:eb:0d:ed:
e5:9f:8a:64:e9:88:73:82:7f:dc:9e:f6:d5:29:09:
84:8f:3f:6a:43:b2:41:94:bf:9f:2d:c6:f9:a7:b5:
8a:a6:bf:e7:1e:e8:cf:0e:15:ae:a5:38:03:34:48:
cb:c4:84:4f:80:d6:f9:26:38:de:a8:b6:7d:44:ce:
93:83:5c:73:b3:8a:bf:28:11:d6:13:39:6f:f1:d8:
2d:c7:ee:0c:e6:1f:4a:6c:25:30:19:f2:89:2c:13:
0a:60:46:24:06:b1:ee:6c:23:01:39:9a:a6:e6:74:
d0:4f:ad:12:f2:a6:8a:cb:1b:ad:6a:2f:41:5a:aa:
c0:0f:82:f3:0d:1d:2b:53:ef:e5:ad:57:0a:4a:16:
29:24:72:36:55:42:d8:6c:bb:40:a7:63:49:4b:99:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:54:FC:84:D3:29:F7:E3:8F:9D:D4:E4:E6:BD:53:3D:BD:A4:52:DD
X509v3 Authority Key Identifier:
keyid:69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:74:c1:6e:41:c5:91:7d:a5:75:a8:06:99:c8:e5:f7:35:04:
e8:57:42:13:16:5b:90:2f:bd:a0:28:06:1b:2a:51:9e:bb:64:
9f:23:35:ca:d0:6d:dc:5f:5e:2c:ff:4f:14:3c:c6:5b:aa:ed:
79:aa:0d:84:14:24:47:2f:c6:19:fd:aa:da:27:80:c5:7c:93:
ad:17:e1:e3:f0:d3:c1:e5:41:7a:b2:fa:94:46:d8:79:01:16:
98:4f:fa:6e:1c:3b:9a:d5:79:68:3f:df:d0:5f:87:a9:5e:21:
69:09:46:8e:5d:28:b4:f9:d1:72:5b:de:b3:3e:d3:d3:53:f3:
d3:3a:d6:b7:1b:a0:a8:09:ab:66:0a:51:36:45:1a:6c:dd:a4:
35:c1:f1:64:71:24:dc:87:9d:e6:4c:1a:c3:bc:1e:6e:55:0c:
2b:29:84:bd:26:31:41:81:36:28:be:68:8a:bb:aa:c2:89:ef:
fc:dc:58:56:2d:8c:6a:b3:59:d0:2d:35:ed:ba:36:a1:19:3f:
85:cd:4c:d7:50:87:ec:7f:7f:31:8b:0c:4b:14:35:53:f3:23:
81:90:e4:27:51:e1:a2:ab:1b:e8:5d:20:8b:82:48:5f:06:5f:
ef:17:33:02:b0:27:6b:d6:b1:c1:98:26:c9:1a:1a:1a:cc:f1:
83:0d:20:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:06:49 2025 by rpki-client