Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
File: aYVKV6sNijySLI9qeaqP6KaiwJ4.mft (raw, json)
Hash identifier: lR9DpF8B0dOKrifL++nBHg1AUnOsEKDfop1AiSeu2wQ=
Subject key identifier: B0:23:02:44:57:6D:9C:AE:D1:12:2E:E8:88:21:F8:95:36:97:06:2C
Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
Certificate issuer: /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Certificate serial: 019690DEB73B155379A51BBC1977FCB9B57A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
Manifest number: 0F7F
Signing time: Fri 02 May 2025 12:00:37 +0000
Manifest this update: Fri 02 May 2025 12:00:37 +0000
Manifest next update: Sat 03 May 2025 12:00:37 +0000
Files and hashes: 1: 8criSeClq2Eu3zzop6X6ae-0yfY.roa (hash: nOinS53G7GkxN9bqxtcws3EdTvx5t+9T2IsaBWfXBg8=)
2: aYVKV6sNijySLI9qeaqP6KaiwJ4.crl (hash: Et0i04nWRwgzeSidSPR7UtDKIJl1BcElaAZJLZ137iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:de:b7:3b:15:53:79:a5:1b:bc:19:77:fc:b9:b5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Validity
Not Before: May 2 12:00:37 2025 GMT
Not After : May 3 12:00:37 2025 GMT
Subject: CN=b0230244576d9caed1122ee88821f8953697062c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:d0:a0:9c:99:7c:ac:21:22:95:fa:e7:05:
1a:d7:51:9c:da:1f:10:aa:85:01:d6:31:93:19:4d:
e0:b3:bc:fb:04:07:97:a5:1a:c8:f3:29:bd:92:82:
19:15:e5:31:8d:34:84:73:df:b6:9f:0b:f6:6d:28:
c7:82:05:45:07:07:5e:9c:bb:89:f6:39:b4:67:f6:
9b:4c:7b:ec:ae:b0:70:7d:05:97:cf:46:57:fd:24:
c8:25:c2:a9:54:05:42:a8:f4:01:83:78:5b:b6:7c:
19:9a:3c:88:db:b3:e3:66:3e:f1:6b:02:24:c5:50:
23:71:56:c3:83:cb:56:fb:ce:80:0c:80:34:bd:71:
62:de:44:df:09:6d:20:1f:61:b7:c5:cd:61:3e:73:
26:91:79:65:18:05:91:42:2d:5c:87:7f:f3:4f:a4:
39:16:28:ad:ae:16:86:1d:6b:90:15:1e:25:f5:45:
e5:40:11:5b:f0:70:cf:aa:e2:69:4b:ea:6f:5c:75:
33:92:a3:f3:16:97:52:c9:98:1d:28:97:64:b0:c8:
6b:45:f6:5c:2e:0f:dc:43:30:48:78:76:59:f1:b3:
0b:b0:dd:0a:0b:81:bd:45:e5:36:bb:e1:a3:95:c2:
09:85:b4:a6:93:f1:e1:36:b2:df:0c:62:d5:61:53:
96:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:23:02:44:57:6D:9C:AE:D1:12:2E:E8:88:21:F8:95:36:97:06:2C
X509v3 Authority Key Identifier:
keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:82:c2:7f:1e:b2:78:a5:44:69:dc:bd:fe:f4:30:0c:cb:70:
92:60:e9:81:56:f4:aa:40:db:2b:70:0d:14:f3:b2:85:31:ab:
9f:f5:6e:cb:5f:41:6d:4e:a6:6d:de:6c:e6:84:53:3c:15:46:
c4:c0:6d:6b:e9:b7:2f:fd:a4:42:f7:a3:8b:8a:cf:e6:2d:a7:
8e:8f:50:7d:7c:1f:15:8b:b1:66:46:c0:9c:f0:f2:2e:42:e0:
5c:6e:0f:21:a7:e0:33:28:59:09:ac:a7:0d:0b:cc:2f:9f:3a:
54:2d:d2:2a:f7:ac:66:5e:f3:70:cc:87:9b:dc:3a:b7:30:2a:
8b:57:db:57:66:7e:ba:55:21:b4:f9:d7:dc:9c:56:fa:68:13:
b5:9c:da:9f:e2:9f:43:9c:ba:a4:17:a8:f9:02:74:43:4e:35:
fe:09:18:28:7d:3c:4c:12:f0:76:2c:64:63:f1:10:6b:ae:2d:
a8:6b:67:78:67:ca:25:55:65:2e:54:2d:9d:26:b0:01:aa:c0:
9c:cb:2b:6d:69:8e:5a:a1:c1:87:23:9e:62:55:63:01:42:b6:
ae:d8:d5:4c:30:67:b6:4d:80:0e:d5:75:03:d1:4f:b1:9c:40:
65:f6:7e:19:c9:ba:5d:11:72:1e:e0:49:49:04:e0:4b:cb:22:
c4:1d:31:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:20:09 2025 by rpki-client