Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
File: aX6mCsoN2uXt37wmDLfaJhYk6R0.mft (raw, json)
Hash identifier: fUWbph2XnDgBq4i7duPhdX6rs1jAINhovxp7vJxz4B4=
Subject key identifier: AA:8F:97:1B:3B:EF:A4:50:55:60:FA:D7:A7:F1:D9:8E:A8:81:99:D2
Authority key identifier: 69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
Certificate issuer: /CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Certificate serial: 019679B1DD501B3D6A5BD0D7B87D6159010D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 00:00:21 +0000
Manifest this update: Mon 28 Apr 2025 00:00:21 +0000
Manifest next update: Tue 29 Apr 2025 00:00:21 +0000
Files and hashes: 1: 9peR5n5QXeylxwcwhSYgLjf27HA.roa (hash: mj+nyCVjal6tZvMkRYNWl96UMmHuvQTDEtFMDTf8UoI=)
2: aX6mCsoN2uXt37wmDLfaJhYk6R0.crl (hash: aThwiDrKU4dzqgmXkjM/T+KEXO+FF4s6R63f17epfyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b1:dd:50:1b:3d:6a:5b:d0:d7:b8:7d:61:59:01:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697ea60aca0ddae5eddfbc260cb7da261624e91d
Validity
Not Before: Apr 28 00:00:21 2025 GMT
Not After : Apr 29 00:00:21 2025 GMT
Subject: CN=aa8f971b3befa4505560fad7a7f1d98ea88199d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:c5:a6:77:2f:4e:76:00:95:ca:e1:48:85:
22:d2:00:62:fb:06:c1:3c:9e:a3:63:74:44:3b:6b:
79:5d:c7:09:8e:d2:56:74:0f:d7:03:e6:eb:b8:50:
6e:59:20:5e:e9:37:83:96:e5:ee:30:b2:45:65:da:
a0:14:b9:d4:2a:ac:59:07:87:61:fb:b5:fc:44:33:
1a:9b:15:70:a9:32:ea:09:8d:68:f3:98:d6:83:23:
67:71:92:f0:7e:df:f1:ec:65:b6:9e:11:fb:69:6f:
e3:a2:6e:d3:87:c0:ee:e2:a9:f2:13:ca:5d:72:a5:
8b:97:b4:60:4a:b8:d3:aa:f3:86:6a:f6:95:69:b9:
6e:5e:92:30:97:8c:e7:ad:a1:e5:0e:3c:d8:11:93:
aa:d4:c6:78:86:4a:36:77:3c:f2:e2:9f:1b:b0:94:
45:38:a0:9b:dd:94:ab:60:69:9f:f0:69:07:bc:8c:
b9:e1:5f:3f:3f:9e:da:0f:91:bb:c2:e2:6b:b3:32:
06:5b:4e:7d:ed:c9:f4:71:7d:1d:1b:02:ee:e1:a1:
5c:e0:94:c9:bf:ac:b2:a9:4c:43:5c:ad:2e:a3:fd:
0e:98:96:c2:25:22:eb:e5:72:a4:d1:ab:2c:d6:0a:
d9:9e:42:25:d5:05:26:27:31:ef:ff:f3:9f:84:87:
87:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8F:97:1B:3B:EF:A4:50:55:60:FA:D7:A7:F1:D9:8E:A8:81:99:D2
X509v3 Authority Key Identifier:
keyid:69:7E:A6:0A:CA:0D:DA:E5:ED:DF:BC:26:0C:B7:DA:26:16:24:E9:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aX6mCsoN2uXt37wmDLfaJhYk6R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fb4934-a937-4324-9f17-eead3b8bccb9/1/aX6mCsoN2uXt37wmDLfaJhYk6R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4d:27:d6:0c:be:c5:7d:6c:61:99:17:28:0f:ea:00:e4:d6:
51:5d:8b:84:75:e6:d8:bb:9a:18:38:88:f4:2a:01:2f:a3:8d:
20:fd:44:fe:48:98:6a:84:42:ec:b7:37:48:6e:eb:54:70:0b:
f0:3b:9f:22:30:81:4e:ea:d8:7a:09:e6:0b:3b:f1:63:78:16:
44:7b:7f:f7:d2:53:04:c7:53:98:98:2b:2a:6c:87:7e:32:ad:
26:c8:62:f6:c8:26:56:91:bd:2a:64:90:d6:f5:41:19:fd:f2:
5b:13:29:52:aa:b4:eb:36:85:fc:f1:78:ac:73:63:66:94:46:
62:6e:c2:25:35:8f:dd:43:5a:6c:99:a9:c5:76:9a:5f:29:4e:
e9:6e:80:3a:1c:7c:2f:f6:1e:b5:a5:4b:44:ee:f3:e0:56:a0:
d8:7f:4a:86:71:9e:62:b0:2c:c4:4d:ee:ac:67:3b:6a:65:b0:
26:be:03:83:c2:2f:4b:3a:7d:d3:d5:40:1d:ae:d4:99:dc:2a:
8b:cf:33:e7:12:fb:77:a8:09:ce:5e:68:51:20:70:de:a7:29:
5a:6e:49:b3:0a:26:22:78:02:e6:b1:eb:87:9a:02:e9:61:32:
b8:33:d4:62:cf:54:f8:32:56:38:1e:14:3d:a0:75:f9:47:db:
9e:05:35:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:08:08 2025 by rpki-client