Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
File: aVxTfSZW203Qw8Mv6YGzx3FEPls.mft (raw, json)
Hash identifier: 9ovFMxy3qNx6gcmQ0G+HxF4BMzxfMMixvDs18w59rgc=
Subject key identifier: C5:2B:AE:DD:6A:51:D0:D0:5D:96:F2:1C:3A:E1:A6:26:E8:DB:63:55
Authority key identifier: 69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
Certificate issuer: /CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Certificate serial: 019679B247E130E7BE55E639F0578C807C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
Manifest number: 0C2D
Signing time: Mon 28 Apr 2025 00:00:49 +0000
Manifest this update: Mon 28 Apr 2025 00:00:49 +0000
Manifest next update: Tue 29 Apr 2025 00:00:49 +0000
Files and hashes: 1: Hk8OntQ5zqlTFn040DQPSldzYiE.roa (hash: KP+8WLsncYNj0fRydYrCKf8Ah12qAHLXgrBdfpvlTN0=)
2: aVxTfSZW203Qw8Mv6YGzx3FEPls.crl (hash: KfSGoeuOWel54//zEzsKXo4PxW39JXvzyLAF1mZY27c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:47:e1:30:e7:be:55:e6:39:f0:57:8c:80:7c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695c537d2656db4dd0c3c32fe981b3c771443e5b
Validity
Not Before: Apr 28 00:00:49 2025 GMT
Not After : Apr 29 00:00:49 2025 GMT
Subject: CN=c52baedd6a51d0d05d96f21c3ae1a626e8db6355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b5:bc:2e:fd:f0:72:fa:19:f9:da:b8:34:b5:
f8:f5:82:d7:23:7e:16:82:54:c3:1e:de:4d:66:38:
67:92:28:6d:39:13:55:ac:23:4d:c5:a8:dd:4d:fc:
cd:dc:c5:20:54:a9:90:ed:81:00:8d:24:a4:de:56:
14:7f:fc:6e:03:ea:2b:a0:60:ee:3e:41:7d:34:b4:
f7:0c:4a:50:1f:da:c8:91:a4:8c:56:7e:20:d8:5f:
f4:41:d6:4a:ad:82:03:29:1d:51:30:df:fe:7f:ff:
2e:1e:91:8b:19:2b:46:b8:55:2e:47:fc:df:10:a0:
e9:4a:e6:16:cc:08:25:07:9c:72:cd:74:7c:55:1b:
a9:e2:14:99:70:e0:b2:58:4c:d8:cd:51:0e:4c:74:
07:c6:d6:23:32:d8:a2:8f:53:f8:0e:a0:23:f1:73:
7f:74:30:85:7c:6f:0f:e3:b4:a5:5d:aa:1f:9c:55:
a7:0a:a8:6a:7b:6e:87:6c:f2:e3:8d:b4:19:ac:41:
e5:8a:bd:91:96:19:5c:33:07:52:5d:b0:d0:ec:0d:
30:6c:b2:4c:4a:a9:84:95:2e:5d:a3:96:92:0c:c1:
24:de:ba:f6:ef:c7:f8:1f:f8:34:6b:d2:09:a5:bc:
22:01:2a:b0:fd:67:aa:e5:5c:26:30:6c:0a:80:be:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2B:AE:DD:6A:51:D0:D0:5D:96:F2:1C:3A:E1:A6:26:E8:DB:63:55
X509v3 Authority Key Identifier:
keyid:69:5C:53:7D:26:56:DB:4D:D0:C3:C3:2F:E9:81:B3:C7:71:44:3E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVxTfSZW203Qw8Mv6YGzx3FEPls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a94966-03e5-42ea-ac26-a8beb5657d76/1/aVxTfSZW203Qw8Mv6YGzx3FEPls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b4:c6:ac:da:05:17:1f:b8:48:eb:17:eb:be:47:a9:e9:a0:
18:22:1a:cf:57:fe:06:67:c8:fc:ee:cf:c5:ad:15:a7:42:ac:
42:d4:f5:d0:f0:06:93:59:e6:c6:99:41:66:91:7d:4c:9d:b0:
dc:cf:f8:34:d9:1c:9c:75:e5:f0:cd:ce:21:6e:6c:fe:f6:f3:
28:b0:10:e8:c4:e5:f3:47:f9:02:92:10:80:49:03:26:7f:59:
63:3d:f1:e9:23:75:9e:cb:cf:6b:ec:e3:ef:98:7a:f9:a6:59:
40:82:fd:bf:05:5b:3f:e9:ac:ef:84:3b:c0:f5:cc:56:b9:52:
b6:78:8e:35:1f:f3:48:ec:56:42:f8:ee:03:0a:d4:6c:55:9f:
30:42:5a:30:e7:c6:8d:f7:59:fb:a1:e9:7b:ea:5a:d6:13:23:
ff:97:d3:70:00:37:1e:6f:16:cc:8a:6f:4d:ae:d7:3c:56:9e:
40:d0:19:12:56:8b:e5:7d:a0:86:a2:00:72:a5:40:b4:7a:46:
6e:4b:61:7c:1f:ad:25:f1:59:74:81:9b:59:fc:97:be:c0:27:
c4:fc:e4:51:29:d1:87:49:6b:82:a3:32:ce:e5:40:91:bb:5d:
11:04:6e:bd:84:16:b6:5c:40:06:05:47:79:86:51:a0:9f:a3:
f6:0c:a8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:25:42 2025 by rpki-client