Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
File: aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json)
Hash identifier: 0H1QCKYUi2H/duSXBu/lMfAnW3UX8ZVaYRrSqJnPFGw=
Subject key identifier: 46:98:63:AD:F7:3B:54:ED:C7:FB:EB:64:41:F0:31:14:2D:51:D2:86
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Certificate issuer: /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial: 01968B4A6663317E55DF52164BE07030680B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
Manifest number: 151C
Signing time: Thu 01 May 2025 10:00:30 +0000
Manifest this update: Thu 01 May 2025 10:00:30 +0000
Manifest next update: Fri 02 May 2025 10:00:30 +0000
Files and hashes: 1: 1LWuminfGd450btHCMbnnbPQ_ZE.roa (hash: TISDdBpwKFkkTeSDLc72qwKWM7K/Xn5/55e5YUo0nnQ=)
2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: v/Ce4uThcB9cccbydJCi7wknZ31fPRpLcZDQbjDmzww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:66:63:31:7e:55:df:52:16:4b:e0:70:30:68:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Validity
Not Before: May 1 10:00:30 2025 GMT
Not After : May 2 10:00:30 2025 GMT
Subject: CN=469863adf73b54edc7fbeb6441f031142d51d286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:3d:9f:3b:65:8e:e9:d3:d8:95:2a:6f:6c:
e6:b3:51:eb:46:fc:b7:fd:eb:2a:81:48:97:e7:59:
7c:72:ef:8a:dd:0c:0b:f5:3b:ed:1f:ab:e2:ce:cb:
74:2d:54:73:10:7d:d4:03:d7:67:bb:8b:18:b2:59:
b2:66:81:0d:75:3a:10:d9:47:db:41:4b:af:f1:7b:
00:55:83:9a:94:1c:9e:d9:7d:f6:93:a7:f2:f3:6b:
06:23:c6:43:b5:36:8e:d2:38:80:fb:e3:6c:f9:61:
4a:08:c4:4f:ac:4e:28:b0:e7:f3:eb:2f:e8:66:e2:
e1:94:e0:d6:06:51:dc:c8:c9:65:f6:cf:79:22:15:
5f:47:c6:38:57:e1:0a:b8:20:83:aa:39:a1:8c:82:
22:58:13:20:fb:b8:93:9f:a9:3e:97:b7:6b:18:7d:
08:2e:cd:a4:5b:e1:fb:05:a8:11:ce:eb:d9:29:5e:
ea:46:bd:48:44:49:12:e6:18:15:17:78:20:56:d6:
9f:7c:e3:bd:1b:0b:dc:0a:01:a1:e2:b7:e2:62:3f:
8b:c4:76:25:df:fe:43:ed:2a:c9:76:4d:54:59:37:
ae:f7:93:12:76:50:6e:b8:d7:34:fb:30:d1:10:83:
1d:6f:b8:13:9b:6a:78:df:ea:d2:9e:3d:ed:53:15:
f4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:98:63:AD:F7:3B:54:ED:C7:FB:EB:64:41:F0:31:14:2D:51:D2:86
X509v3 Authority Key Identifier:
keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:36:b2:25:bd:7b:10:e2:87:ae:58:d3:8d:f5:d8:27:dd:2f:
d7:b7:c2:c5:e0:c9:45:d0:b3:68:70:7c:33:4f:88:8e:62:d1:
14:0c:ab:52:ae:7f:c1:f6:77:7f:ef:72:db:00:d6:fe:d2:2f:
55:ee:4c:15:aa:66:1b:33:e9:25:98:08:0f:89:19:a0:62:f1:
96:84:b5:d3:a7:b9:d6:83:b3:f6:72:81:1a:8e:51:00:8a:70:
0e:fa:e1:5c:3d:01:d0:c1:a5:4d:6a:0a:64:d6:29:0b:eb:7d:
81:b4:4e:3f:d4:22:e6:1a:72:20:50:d1:a9:f4:8f:c3:f7:ff:
46:b5:a8:dd:c3:7f:21:dc:6a:ea:02:57:27:92:94:99:10:4d:
46:d1:84:be:c7:12:1f:9b:15:65:6f:dd:f9:38:1d:c3:f7:1b:
9c:53:c6:bb:95:a4:97:93:e0:53:d3:3a:85:33:68:17:a7:13:
a7:ab:15:df:28:0e:55:33:63:cb:93:5a:11:29:d5:85:df:97:
3a:e6:4d:74:49:ab:3d:93:f8:b6:04:2c:19:bc:8e:c0:85:46:
1e:87:d0:49:83:a6:fa:92:5d:81:52:d9:eb:27:4c:4a:74:01:
4a:ee:d4:07:1c:fb:8d:9e:cc:bc:09:95:89:2d:59:39:a9:fe:
8f:8c:84:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:44:33 2025 by rpki-client