Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
File: aq57yNMxY8xLbdoXGjh_-YAioPY.mft (raw, json)
Hash identifier: xwIubn7+Tau3FNL08evEppmpj73RIk6UjcWi7/NYun0=
Subject key identifier: 81:11:2D:62:6B:F6:E9:B2:57:0B:DF:10:43:A6:34:F1:2C:A9:E5:8C
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Certificate issuer: /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial: 0196888019ADC6C8D703C58146F60CA8C864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
Manifest number: 1314
Signing time: Wed 30 Apr 2025 21:00:18 +0000
Manifest this update: Wed 30 Apr 2025 21:00:18 +0000
Manifest next update: Thu 01 May 2025 21:00:18 +0000
Files and hashes: 1: aq57yNMxY8xLbdoXGjh_-YAioPY.crl (hash: pi5v9cX7i5iZMtkFb1/2alaznNW44GXJeESf0TJYNvM=)
2: gQqJELq1-EV3FBRQEAYd71OCUP8.roa (hash: bKz/Il/boauhNtFoORiL2V0u7PFpV3gpz4FiQkcwVo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:80:19:ad:c6:c8:d7:03:c5:81:46:f6:0c:a8:c8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Validity
Not Before: Apr 30 21:00:18 2025 GMT
Not After : May 1 21:00:18 2025 GMT
Subject: CN=81112d626bf6e9b2570bdf1043a634f12ca9e58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:a8:51:6e:c0:d8:c3:8c:5e:f6:0c:9a:9f:
aa:d3:f0:d2:d3:1d:c6:d9:ef:bf:6e:6c:48:94:8d:
01:2e:0e:3f:e7:82:34:89:d0:ac:71:06:00:65:8b:
32:4a:4c:58:b3:4e:e6:b5:ed:89:e7:75:95:27:e2:
36:a4:4e:0d:9e:4c:ab:b8:48:e0:a0:fa:32:b1:4d:
e8:0c:eb:0c:70:fd:04:3d:fe:7b:fc:c3:36:00:2f:
33:14:95:35:73:38:96:72:95:43:57:cc:54:a2:6e:
17:69:d4:03:91:ed:18:30:9d:ce:b7:bb:b3:59:8b:
69:70:57:bd:30:30:37:02:63:fe:06:54:f4:e6:d6:
ad:78:e8:a1:a9:0c:90:50:e7:6a:c1:17:4e:53:0e:
7a:aa:49:bc:71:ad:ba:a6:0d:30:c1:7c:a3:8d:73:
7a:4c:4c:8d:c6:51:81:05:6f:13:09:1c:6d:bf:dd:
f3:92:e2:e1:9b:dc:8e:3d:c4:a4:8f:d4:84:3f:aa:
bd:b5:77:4a:df:14:53:26:c8:0d:fc:f3:95:ea:cf:
70:36:24:c5:d5:22:be:66:d5:60:46:a6:de:f2:21:
d7:45:2a:18:41:f3:c9:89:42:6d:8e:e4:2a:f4:d2:
19:cb:fc:b2:74:46:a4:e2:56:67:b4:87:3d:42:e8:
9e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:11:2D:62:6B:F6:E9:B2:57:0B:DF:10:43:A6:34:F1:2C:A9:E5:8C
X509v3 Authority Key Identifier:
keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:54:a6:36:cb:5c:5c:39:1c:35:82:8a:90:bd:78:08:e6:06:
87:f1:ef:d6:96:21:60:60:7f:d8:c3:a0:9f:13:2a:ef:18:4c:
a6:1c:ee:cf:bd:3d:ff:f2:50:09:91:ea:d7:56:90:6d:66:b5:
02:4b:ad:25:8e:08:25:f7:74:bb:55:0f:2c:9d:b9:a7:26:d4:
3a:3d:02:05:9f:c1:db:9a:87:17:a7:4b:fc:7c:6b:4a:f0:0c:
84:f4:37:97:4f:c0:49:ba:47:75:75:86:a0:9b:bc:bf:1a:a4:
5d:f4:fc:46:49:66:7e:f6:a0:f0:96:dc:01:df:c4:98:6a:15:
2a:9c:66:e9:47:15:4d:06:41:47:69:4d:8d:c9:fe:39:a9:63:
e5:db:94:a9:18:17:f2:fa:c0:58:7a:ef:7b:2e:9d:1c:1d:b7:
cf:85:59:0c:63:50:9b:9f:42:c5:8b:7f:f3:69:d9:48:0d:e3:
4f:77:ad:6f:87:b2:73:13:d0:1c:8f:c3:b1:b0:b7:0d:af:d7:
19:ed:d3:65:28:4d:3a:50:cc:83:54:52:62:5d:71:4f:19:ee:
3e:79:d0:56:f7:29:2f:32:9f:0d:78:4a:70:97:55:96:f2:b0:
d6:4c:6c:6c:4d:e5:f4:a1:af:2b:8e:c9:1d:07:b9:00:b1:e8:
99:b4:04:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:09:43 2025 by rpki-client