Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json)
Hash identifier: mZF5z1nEXcw944s86KRESjUU5ugt1QxeKcgqvcToA2w=
Subject key identifier: 18:A6:90:85:01:96:B4:39:69:79:62:1C:55:5A:8C:EF:39:7C:1B:38
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 019677FB23071BFE9685AB779862319D4240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
Manifest number: 0163
Signing time: Sun 27 Apr 2025 16:01:09 +0000
Manifest this update: Sun 27 Apr 2025 16:01:09 +0000
Manifest next update: Mon 28 Apr 2025 16:01:09 +0000
Files and hashes: 1: 1-FEZQAYxKOGbZtNoqgp3TsBstBI.roa (hash: mWm1xa0GsvGR4VAPAVWmqUQ/c+wTEHDE2Bz7si4FFW8=)
2: Hc3x7cMMhQ2pFoiy2saJ4XllrVE.roa (hash: B1k+alzkgyWX1Dzf52yEQFBGvjvNE4DrGgKVq+glwN0=)
3: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: Avw0yiGOkkUp1bG1Knno2LB48EsKEb3o+JvGRrY0w3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:23:07:1b:fe:96:85:ab:77:98:62:31:9d:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Apr 27 16:01:09 2025 GMT
Not After : Apr 28 16:01:09 2025 GMT
Subject: CN=18a690850196b4396979621c555a8cef397c1b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e5:85:d6:2f:60:f1:95:a7:5b:2f:1c:71:5d:
00:b3:28:e5:c5:7d:fe:98:5a:b4:b1:7c:33:72:84:
8a:5d:8a:55:93:75:60:ed:94:4e:9c:5e:b2:04:da:
23:51:3f:47:db:a5:cc:7b:21:63:9c:19:8c:e8:2a:
1d:bd:c2:75:85:43:0d:f3:86:7e:27:ea:90:f6:97:
2f:e1:a4:4a:94:77:a2:5c:bd:ff:f9:56:ea:f5:ab:
4f:83:d8:9d:8c:73:9b:4e:d4:7b:93:34:13:77:65:
4b:c2:e0:43:60:0b:ee:66:d6:17:44:73:d4:4c:a4:
a2:01:cf:cf:08:f3:45:25:c8:26:b7:b1:03:ec:52:
08:9e:67:bb:a5:4d:47:85:f8:8b:0e:c8:3f:0b:e3:
2a:27:d9:8d:fe:f5:c1:e1:47:90:ed:5c:95:01:96:
c8:8d:3e:73:c9:f3:26:2d:87:79:3c:76:86:31:6c:
4c:f1:95:32:a2:02:6c:0e:ac:87:99:11:9f:f4:7a:
16:2b:90:52:0d:e3:e7:1a:fa:83:bd:99:db:37:ab:
4a:3b:2d:6a:80:99:2a:1b:94:62:87:6d:9b:7e:1e:
ee:da:47:8f:56:4e:ec:fc:53:de:d7:d9:4f:8b:d8:
90:cd:5b:5d:65:34:0c:56:1e:84:e2:66:02:43:0f:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A6:90:85:01:96:B4:39:69:79:62:1C:55:5A:8C:EF:39:7C:1B:38
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5f:25:0d:8c:ad:14:f0:a9:46:3d:03:3c:af:70:00:a2:01:
cd:14:c0:f0:95:c9:1c:60:78:4e:ea:6e:3d:65:2b:69:57:91:
59:6e:25:f1:d2:8d:53:71:0b:c7:e7:ac:97:bc:33:70:e7:32:
3b:f3:b2:2c:25:bc:2c:92:84:4a:2d:cb:97:f1:69:0e:97:bf:
16:27:55:55:24:95:26:46:ec:65:82:c8:0a:95:b5:30:55:f3:
a8:b5:73:16:f2:c9:8b:28:fa:c7:31:a4:06:be:1f:07:98:20:
ab:bb:c8:7c:94:62:d5:a2:be:ef:89:dd:49:92:48:c9:ea:d2:
d6:af:8d:6c:e0:ae:30:05:0a:3c:ee:c5:dd:9e:ab:78:72:5b:
e0:1b:8d:f3:45:8c:20:13:19:36:05:9f:ba:ad:69:96:d0:4f:
79:f9:ab:30:a3:ee:c3:de:b7:b4:bf:2a:25:e6:f3:d4:a4:73:
1a:f4:5b:da:f9:f2:9a:43:3d:3e:81:98:b7:cf:40:30:8c:bd:
e1:bf:5b:0a:54:9d:79:34:9c:65:03:39:89:a7:c4:bb:82:0f:
70:74:2a:b4:7b:3e:04:ca:9f:1d:8e:8d:c5:2b:bd:b0:fa:4e:
00:7a:86:d9:c8:44:16:86:30:0a:e4:39:b7:54:0b:c9:df:5c:
cf:7f:e2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:15:23 2025 by rpki-client