Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
File: aWIqGq33nnEdHn5DGfcywLLagB4.mft (raw, json)
Hash identifier: H6ExjxlZP3Lid5HlUpi2CbzQiFUOLs5H3WY5rFbJ9gU=
Subject key identifier: 53:80:C2:73:C5:D6:77:22:4D:7D:C6:DF:1F:B5:A3:FB:55:69:97:0F
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 01967E33B263E89B56A4F4AAF558C635A220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
Manifest number: 1516
Signing time: Mon 28 Apr 2025 21:00:39 +0000
Manifest this update: Mon 28 Apr 2025 21:00:39 +0000
Manifest next update: Tue 29 Apr 2025 21:00:39 +0000
Files and hashes: 1: P1en3sohe2DbyNzA71GiPNHyPMA.roa (hash: V8PIuABmlXR/9zmJ4CmVSW6y4BQ+AXThzkLiJ6dRREE=)
2: aWIqGq33nnEdHn5DGfcywLLagB4.crl (hash: 8ODw/LSjylM4g/RCEjqQjnLi9f0f47LKKTWP1AjyCLA=)
3: jXfDa-UQ8MNojbhvL1jcAxZ-2LA.roa (hash: 2Itp3B8O+5dmTKgGLY+BCEZM9Sy2Ho8d4oe+RtL2s4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:b2:63:e8:9b:56:a4:f4:aa:f5:58:c6:35:a2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Apr 28 21:00:39 2025 GMT
Not After : Apr 29 21:00:39 2025 GMT
Subject: CN=5380c273c5d677224d7dc6df1fb5a3fb5569970f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:26:0e:2c:ea:4e:ad:03:d8:0a:da:c1:01:
42:0b:63:96:78:35:5c:4b:d7:42:59:e6:d6:b4:b2:
fd:20:4f:b9:82:e4:3c:54:91:87:16:4a:48:41:1c:
04:51:f5:03:5a:ad:48:49:43:f8:ad:d8:96:25:e3:
16:49:43:70:1a:72:99:9a:52:68:29:26:62:03:d2:
fd:53:38:77:fb:7a:77:70:15:d1:33:10:99:d7:a6:
01:8d:4f:91:c3:cc:cd:7e:01:1b:4b:99:8e:d1:c8:
3b:5b:a2:b5:85:fe:1e:54:90:e1:0a:2b:73:86:64:
33:88:5a:b3:12:97:7d:7d:7b:37:58:09:16:9b:bb:
8e:a8:45:1d:a3:22:b8:06:4b:c2:b2:1d:2e:bd:53:
c8:cc:a8:1e:9b:b6:1d:f2:8f:cf:aa:99:e5:ab:06:
6a:19:12:29:58:74:07:8a:31:96:dd:de:b9:73:20:
c6:ab:fd:f2:bb:db:93:d2:ee:fb:23:c3:79:c4:c8:
c3:16:c6:cb:19:82:a8:be:ec:37:7a:5c:28:c6:c3:
1b:e1:22:60:ba:e8:ae:bd:52:f9:05:59:6d:95:30:
ad:05:a1:8a:1b:4c:e1:d7:4d:23:7f:77:3f:02:2c:
dd:53:42:59:ea:ae:74:0e:7a:ee:13:bb:c9:f7:4c:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:80:C2:73:C5:D6:77:22:4D:7D:C6:DF:1F:B5:A3:FB:55:69:97:0F
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7e:93:57:1c:f9:33:2d:a8:50:77:3e:3e:a0:24:f1:0d:0e:
43:4a:d6:a4:49:fe:b9:e9:d9:f1:9b:cb:65:71:d7:a5:b7:d7:
54:29:d5:4a:5c:85:43:03:57:3c:6d:5d:89:ea:13:99:0b:c2:
88:12:5a:55:ed:27:47:9f:c3:66:e5:1f:e2:42:3a:27:61:a4:
4e:3b:55:65:8a:ee:03:98:8f:94:82:c5:cb:05:76:a6:6c:36:
61:1b:70:d5:17:99:47:4d:a9:46:cc:c8:ae:c6:98:eb:4b:2d:
3d:e1:5f:12:bd:c3:5f:34:ac:ce:60:a0:c4:bf:8a:fc:9a:bf:
3b:02:86:8c:68:ee:eb:bd:19:78:d1:59:e2:a1:2b:bc:d0:e4:
40:77:ef:e6:ac:03:27:c0:bc:67:c3:a9:97:43:f2:95:da:57:
70:ba:fb:04:05:0e:e9:ce:26:6e:bc:9c:6a:48:50:6c:1d:96:
0c:fd:7d:0e:c4:2c:0b:91:8c:f1:74:dd:8f:7e:ba:88:91:10:
ce:e4:15:b2:0e:30:91:88:8c:9b:a1:4d:70:1c:ad:0c:33:af:
65:52:a4:0b:c1:55:27:c4:00:4f:f6:02:ec:ba:26:e9:e9:00:
ca:07:8b:80:6b:51:fd:1b:9d:47:fd:44:68:02:66:c8:be:02:
c1:30:e7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:50:58 2025 by rpki-client