Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
File: abZsbpoUxv13P6Md-YILM5aVLi4.mft (raw, json)
Hash identifier: EVdyEMvmefmBg4iOxY/khN9MesVNF+FsyuAsQCDCSgw=
Subject key identifier: 6A:93:3C:50:0C:F3:16:CD:D7:4C:8B:2E:CE:EF:E3:E4:88:02:FF:2A
Authority key identifier: 69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
Certificate issuer: /CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Certificate serial: 0196808F84B4F57BBF4F97636B0BB33FC9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
Manifest number: 02E0
Signing time: Tue 29 Apr 2025 08:00:11 +0000
Manifest this update: Tue 29 Apr 2025 08:00:11 +0000
Manifest next update: Wed 30 Apr 2025 08:00:11 +0000
Files and hashes: 1: abZsbpoUxv13P6Md-YILM5aVLi4.crl (hash: nym4S3iOTcvx7PVbdPKOCCE5v4799qnk/jsx3/9rpR4=)
2: sBZyctgvNvtriFhe8m6CbBJ7dYg.roa (hash: JowCeeluxMSod/7/LxTDdw9H9SvUld/0RlKOgZZipFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:84:b4:f5:7b:bf:4f:97:63:6b:0b:b3:3f:c9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Validity
Not Before: Apr 29 08:00:11 2025 GMT
Not After : Apr 30 08:00:11 2025 GMT
Subject: CN=6a933c500cf316cdd74c8b2eceefe3e48802ff2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:aa:bc:df:cd:c6:e6:85:e0:dd:50:70:e7:
1b:37:2c:f4:6d:8c:bb:91:31:94:9b:23:00:e2:78:
2f:c1:cf:44:ad:6b:70:9a:e4:84:ec:93:42:3e:57:
af:d2:b6:a9:0d:c6:a9:37:c0:0a:96:fc:63:e0:38:
c8:5b:0f:c6:f2:8d:93:9c:d6:b1:f8:02:76:21:13:
97:51:bf:da:ad:8a:63:3e:dc:09:28:85:31:0f:07:
ce:ea:92:28:fe:4d:56:07:64:d6:1d:d4:e0:a4:d3:
b0:3f:85:43:16:8c:7b:9d:84:d0:89:f0:32:8d:14:
95:bd:f6:36:61:71:01:27:27:61:71:db:2f:fe:80:
88:2a:23:4d:a3:65:b0:99:9f:e7:ae:5b:ec:2e:1f:
f6:9d:20:23:44:00:3e:f7:e7:48:f5:cc:ed:c2:f8:
70:78:c2:31:57:23:ea:66:51:9f:e2:05:7d:37:b2:
e4:eb:fe:05:49:b2:58:85:cd:80:0c:5b:22:35:a4:
fb:5d:e9:1e:35:fe:19:25:6d:17:8a:45:a4:23:3d:
70:9a:aa:4b:bb:73:dd:0e:39:c0:ac:99:e2:aa:2f:
7a:60:c8:03:d7:5a:b2:4b:f0:11:9e:ad:17:6e:d8:
af:76:dc:65:80:58:af:33:6a:8d:38:a3:cb:24:ce:
54:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:93:3C:50:0C:F3:16:CD:D7:4C:8B:2E:CE:EF:E3:E4:88:02:FF:2A
X509v3 Authority Key Identifier:
keyid:69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8c:dc:a2:35:f6:e9:4d:d2:63:7f:3e:e5:41:50:f0:d6:de:
bf:66:5c:45:43:10:77:d1:6b:cd:1a:45:e0:5a:41:ba:4d:12:
be:56:5d:ba:9b:de:da:c5:96:cd:95:0f:09:83:ed:8d:52:4e:
b2:a6:1a:95:98:57:04:cf:c6:bc:a7:0e:7b:1e:f5:a0:05:61:
27:d1:bf:64:57:e4:dd:a4:56:39:25:8a:84:87:26:a2:6a:df:
94:31:2f:58:24:70:28:4d:8f:a5:10:93:d7:8b:4c:59:7c:0a:
ab:46:db:c5:3e:9a:a0:96:fe:ed:92:f3:d2:10:d2:35:34:9f:
62:ac:dc:9b:f1:12:a9:ca:1f:d9:6b:e3:17:b6:aa:3e:81:d1:
e5:c4:12:e0:1c:65:5c:0a:27:7d:e4:19:34:42:e1:36:6c:7d:
0f:05:b7:e2:97:ce:4c:ae:f2:34:3b:21:0a:14:34:93:3a:64:
1d:26:7b:99:fb:76:a2:48:fc:54:f5:f8:f6:a3:85:b0:2c:87:
0d:e0:25:89:db:65:51:cf:6f:cc:c5:c1:a4:ae:d1:e3:1c:66:
f9:f9:73:6f:82:fb:57:d9:ea:c3:99:e6:29:9b:8b:a5:29:69:
be:d0:48:0f:d3:d0:44:6b:76:c0:85:91:13:eb:7a:71:f1:74:
10:4f:dd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:25:45 2025 by rpki-client