Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
File: are5zuAEMA6v4JvxL8ttod0wpNc.mft (raw, json)
Hash identifier: TPhYdyAuA9KaVTVGmte/gGstQaOc1EfvSvjckTiserY=
Subject key identifier: 50:AC:98:F8:9D:A6:A5:64:AC:51:57:C7:00:6E:43:22:22:5A:60:1B
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Certificate issuer: /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial: 019677557DDB0B910E151162ADED9C734F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 13:00:13 +0000
Manifest this update: Sun 27 Apr 2025 13:00:13 +0000
Manifest next update: Mon 28 Apr 2025 13:00:13 +0000
Files and hashes: 1: BFGJmraQBgGavzIeZHO0bfSXFRI.roa (hash: e3IZCe3SbuLp2264XxRVhIYJHbqFuU1UA3gCIN6FJhs=)
2: are5zuAEMA6v4JvxL8ttod0wpNc.crl (hash: uyAjLEaFyXgBIDVx4Un+4SUnQVTP/5A0+v4ZsMqvu0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:7d:db:0b:91:0e:15:11:62:ad:ed:9c:73:4f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Validity
Not Before: Apr 27 13:00:13 2025 GMT
Not After : Apr 28 13:00:13 2025 GMT
Subject: CN=50ac98f89da6a564ac5157c7006e4322225a601b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:ec:13:b7:86:b4:62:d4:e1:a7:de:57:c7:
72:e7:c8:68:6c:1b:b3:a6:34:b5:63:65:dc:c4:0b:
ad:dc:05:49:47:06:7a:bb:b2:f5:bf:3f:84:6c:fc:
ae:87:50:ca:7a:87:e7:28:78:30:5a:21:8c:09:9b:
c5:e3:31:ed:22:fa:4d:b8:83:98:29:f4:45:cf:c5:
fc:80:2c:f6:53:77:b8:da:5b:95:12:8f:e0:09:e6:
09:d1:69:bc:23:17:c6:00:dc:0a:18:e6:3e:be:15:
09:fc:5b:a2:ae:0b:79:a2:54:08:85:37:d8:c5:fc:
af:4a:49:1d:c2:6f:41:ca:07:b5:55:12:bb:5b:d0:
1d:95:24:b3:57:0a:94:e2:2a:7a:db:b1:11:5d:79:
99:cf:1d:dd:04:51:1b:33:92:f6:ab:e1:82:67:29:
70:73:8e:e4:67:cf:c3:38:21:6e:7a:e4:7d:e3:58:
80:bd:ad:d8:f9:06:72:65:5d:88:51:e1:39:fd:75:
85:a2:dc:0a:e2:8b:93:89:8e:d7:5b:15:53:25:d2:
54:ab:a0:f8:83:62:47:4c:38:a4:b6:44:b3:f7:81:
1f:e1:58:a6:68:fe:ed:33:1c:6f:54:9b:6a:25:2a:
98:73:b7:f3:c8:d2:2b:58:52:47:27:57:64:bc:f6:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AC:98:F8:9D:A6:A5:64:AC:51:57:C7:00:6E:43:22:22:5A:60:1B
X509v3 Authority Key Identifier:
keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:98:6e:23:4e:76:29:49:e6:01:fe:2d:12:47:54:ae:23:e0:
58:ea:aa:f9:db:eb:95:0b:4d:eb:6b:50:80:84:9d:18:c8:7a:
3e:f6:fd:c4:ef:60:58:25:e3:ce:a0:91:0c:66:55:e5:34:62:
6c:58:74:d5:4b:9d:52:dc:3c:fc:a0:07:42:3f:cc:ff:04:f1:
ec:d2:3a:0f:44:18:2c:60:0b:c3:20:69:e2:29:7a:0a:5f:5f:
f9:d4:68:2c:07:ae:ab:23:16:cc:86:fb:38:9a:2c:f8:02:9b:
8c:bd:9b:84:42:5e:f5:b5:25:85:19:fc:42:e4:9b:4b:d3:cc:
fc:d0:8d:05:cb:a6:a1:e0:85:55:80:5c:64:ac:f4:37:24:a8:
6d:63:19:b4:cb:b1:bb:f2:df:ad:0e:9a:98:48:4e:e0:99:9e:
83:06:ae:2e:5d:14:ca:dd:f2:c1:c3:13:1e:c1:58:4a:22:09:
36:69:af:4f:01:b0:25:56:74:14:54:ee:ee:bc:52:45:9e:0a:
3c:eb:30:17:23:58:fa:2a:71:2e:78:20:b6:d2:b4:04:78:b8:
c4:85:fa:be:54:79:67:c8:4d:dd:fb:5a:c9:7b:c2:d0:38:40:
6a:2d:5e:8a:d5:9e:8b:69:9c:1c:4d:b3:9c:da:41:84:7e:94:
ed:40:88:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:24:05 2025 by rpki-client