Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
File: aia56N9dpWmFTGGvcU2zA0krYvE.mft (raw, json)
Hash identifier: hT5rTyaXupDAY2AUiA1KzyEKg2ClyYR6RjwVx27Hz+Y=
Subject key identifier: C5:1E:D3:8D:3D:4A:D0:FD:63:2E:C4:30:C5:43:B8:53:FB:86:D3:60
Authority key identifier: 6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
Certificate issuer: /CN=6a26b9e8df5da569854c61af714db303492b62f1
Certificate serial: 01967868E9BAA3EAF17EE55BD731936DA3CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
Manifest number: A3
Signing time: Sun 27 Apr 2025 18:01:03 +0000
Manifest this update: Sun 27 Apr 2025 18:01:03 +0000
Manifest next update: Mon 28 Apr 2025 18:01:03 +0000
Files and hashes: 1: OXOnare6dVM-zLYHWOSVEGQTw18.roa (hash: dcwy2HRQRShbBLQYZ7Zn1DYc8vKW+hy7H3ObhuzMkSQ=)
2: aia56N9dpWmFTGGvcU2zA0krYvE.crl (hash: ilurfMMkbZij5r7rRPFZ7TNNkbIHHnodEDVpcxAZ4FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:e9:ba:a3:ea:f1:7e:e5:5b:d7:31:93:6d:a3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a26b9e8df5da569854c61af714db303492b62f1
Validity
Not Before: Apr 27 18:01:03 2025 GMT
Not After : Apr 28 18:01:03 2025 GMT
Subject: CN=c51ed38d3d4ad0fd632ec430c543b853fb86d360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8a:8f:ec:2d:a8:ef:d7:bd:44:dc:f4:df:3b:
eb:59:dc:7b:ed:2a:23:78:95:03:4c:b9:f2:e9:54:
f7:a5:c4:c3:66:61:07:e1:f0:20:99:b1:13:bc:c5:
54:0a:31:42:50:3f:b7:b2:27:7b:e0:a5:a1:2c:36:
c5:9f:e8:e5:88:e3:66:a0:a6:7c:18:c2:7e:43:98:
95:0e:f8:53:bd:72:e8:b2:1f:ea:7c:c8:b3:19:1b:
43:65:45:96:91:a1:85:98:b5:5f:b2:03:68:08:88:
b0:4e:38:fc:32:c8:d0:4e:9c:3e:d3:bf:ae:5a:e8:
e4:78:52:3a:77:7e:ac:ce:cd:70:ce:ed:f9:63:f6:
bc:2b:b5:85:75:ec:bf:a2:b6:34:ca:8c:1c:c4:bf:
ca:11:fb:55:61:a6:bd:34:1b:bb:7c:84:6e:81:3b:
4e:2b:1d:3a:d2:cb:ec:95:3d:e5:98:2d:98:90:4b:
ec:f6:9c:2c:34:bd:0d:d6:4f:e7:c4:e7:71:ce:d5:
8f:70:e0:9e:a7:5f:75:63:b5:43:bc:b3:da:5c:0a:
7d:f1:77:19:bd:f2:ee:3d:b7:b0:ca:bf:25:6e:5e:
49:db:f9:b8:33:c9:55:85:51:76:ad:84:4d:ab:96:
9a:ce:67:46:30:53:78:53:e8:1d:af:01:06:d8:61:
60:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1E:D3:8D:3D:4A:D0:FD:63:2E:C4:30:C5:43:B8:53:FB:86:D3:60
X509v3 Authority Key Identifier:
keyid:6A:26:B9:E8:DF:5D:A5:69:85:4C:61:AF:71:4D:B3:03:49:2B:62:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aia56N9dpWmFTGGvcU2zA0krYvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d4ee39-80b4-4239-8c39-051b00f858ed/1/aia56N9dpWmFTGGvcU2zA0krYvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:89:c4:3b:56:0c:dd:49:e7:40:e0:c8:b2:70:9a:11:32:5a:
68:df:34:7f:f2:a5:e6:1b:2a:a3:03:3b:ff:e3:31:88:87:01:
29:ea:df:e5:a7:05:10:8d:ca:7a:a8:69:55:3c:09:2f:44:00:
3c:57:82:ed:78:1a:9a:95:2c:52:71:a9:4f:4d:fa:0d:4d:d1:
60:de:b2:ac:fb:fa:7f:b0:41:69:91:ad:03:41:ac:85:70:2a:
87:2f:7f:a5:fa:f8:ac:ca:a9:a3:c0:0f:f5:f5:00:5d:b7:9f:
4c:53:8e:9a:2b:5f:5a:c4:8c:a0:40:ec:13:54:75:3c:dc:00:
63:3d:26:8d:65:5c:84:b2:92:0c:d9:47:bf:ef:04:20:f3:fa:
93:23:1d:e8:98:ab:ac:cf:40:e4:9f:2c:47:7a:eb:ed:4b:bb:
78:69:3f:17:82:0d:74:06:c1:b1:b9:4d:ab:52:a0:4f:47:0e:
df:2d:06:4e:a5:03:49:47:db:f8:99:cd:10:43:84:51:34:3a:
d4:6f:cc:7d:1d:ef:7e:24:57:f7:f3:21:2a:4f:58:86:73:d4:
0b:6e:b1:d8:63:9e:cd:a5:6d:09:bf:c1:c7:02:39:fc:88:09:
45:65:1a:50:8f:c2:9e:30:03:71:90:7d:fc:f4:f9:aa:a0:0b:
8b:43:5a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:01:16 2025 by rpki-client