Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
File: AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json)
Hash identifier: TzXKe+rh8buFw+Hcb2rMISaRxiNEFGzT07CyRW3kP3Q=
Subject key identifier: 4B:EB:21:25:40:F4:A4:1D:C4:F0:90:32:C4:9A:FC:B8:F9:FF:EF:E8
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Certificate issuer: /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial: 019676E7B6D5C898F3DF4938961960CD2661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
Manifest number: 0730
Signing time: Sun 27 Apr 2025 11:00:19 +0000
Manifest this update: Sun 27 Apr 2025 11:00:19 +0000
Manifest next update: Mon 28 Apr 2025 11:00:19 +0000
Files and hashes: 1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: 07wOVxbGL+ckWD8f10sUvJwQJd/p4TPH945DPNpWo/g=)
2: qZ_vGww3miBwhmiPJQ4AD0HWpSo.roa (hash: /yOCjsEAUpbowyN4y+pICuqKMk+5ErunDXEzQRSdLQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:b6:d5:c8:98:f3:df:49:38:96:19:60:cd:26:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Validity
Not Before: Apr 27 11:00:19 2025 GMT
Not After : Apr 28 11:00:19 2025 GMT
Subject: CN=4beb212540f4a41dc4f09032c49afcb8f9ffefe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:73:0b:fe:d4:21:7c:61:4e:fa:bb:11:87:
89:55:06:52:df:46:bf:19:aa:e5:35:cb:8b:81:d4:
8e:57:1f:b9:41:93:77:1e:86:e4:24:b0:00:ba:74:
93:89:3c:ac:b4:69:4b:61:70:dc:49:d1:87:c8:17:
20:b7:2c:62:72:75:f5:54:92:74:fd:4d:c9:70:44:
bb:6d:2d:dc:e0:e2:1b:46:fa:2a:ed:5f:41:25:c4:
b5:b8:28:79:86:85:c3:40:a9:b2:24:f0:ae:bc:45:
7a:a2:27:c4:fa:9d:05:78:6f:e6:35:84:b7:a1:e7:
d2:c7:5d:92:bc:8c:89:81:b1:74:6f:af:45:ae:d3:
c0:eb:85:aa:1e:bb:e7:62:49:76:90:60:1b:9a:bd:
a4:49:61:3d:f6:a3:52:54:9e:7c:e3:9f:5c:86:f0:
9c:f3:91:5b:50:1d:e4:22:95:e2:e5:8d:7a:14:3c:
6a:e8:cb:6e:d4:69:cb:6f:ff:c9:6d:4c:ab:55:2c:
03:f9:45:1f:b5:46:77:0c:25:2a:e7:44:45:e5:f6:
00:75:cb:93:9c:59:00:a8:ba:62:99:b5:ae:97:6e:
ab:8d:a0:34:55:44:7a:26:66:4e:0c:c1:1e:99:d6:
36:61:59:bd:87:62:27:82:84:29:f5:24:d8:1c:17:
bc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EB:21:25:40:F4:A4:1D:C4:F0:90:32:C4:9A:FC:B8:F9:FF:EF:E8
X509v3 Authority Key Identifier:
keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:09:c2:cb:7a:21:95:9f:f2:08:78:91:3d:17:45:43:ae:10:
54:49:43:68:43:0a:9a:0e:6f:77:a6:11:3a:47:6b:c6:b7:3e:
36:e6:ed:42:ed:bc:a9:5e:30:54:c9:6d:6f:b8:98:3e:ff:24:
ba:13:83:11:f3:41:33:5a:72:9c:0b:10:32:1d:32:39:bb:e8:
17:e8:f5:5b:27:9f:0d:fd:16:f1:a5:1b:7b:dd:5e:61:d3:33:
15:d8:f8:20:e7:0b:96:09:21:99:1a:9c:79:d8:2c:26:88:9d:
02:3f:9e:fa:67:a8:00:ba:b0:3f:15:e8:f7:46:93:22:6d:21:
7a:51:bf:86:91:84:ee:05:2c:c3:c8:ad:1e:fe:72:74:c2:66:
3e:29:66:bc:1a:f7:a8:5d:da:2f:34:d3:ce:df:06:58:be:eb:
80:9a:b0:50:a0:68:93:db:e9:a9:32:3a:f8:e0:15:7f:1c:e8:
40:59:c1:a8:d9:f2:f8:f6:8a:98:dc:d9:87:d3:81:eb:01:77:
5c:74:32:32:35:6d:b6:7d:bb:26:a7:7a:06:b8:a2:b1:3f:12:
11:56:e7:ec:59:a9:36:95:94:c6:09:ec:0d:bc:64:00:e2:4e:
99:dd:77:ae:b2:06:5e:51:8b:e7:0a:e1:8c:2c:cc:72:25:38:
62:b9:f9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:48:45 2025 by rpki-client