Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.mft
File: AonuzqJ5QTJX2JCMJVaKvrivhnc.mft (raw, json)
Hash identifier: zc3e/l58rvanPbUgxfSaKfZGAXFudmvpd1cuNGfAKkc=
Subject key identifier: CC:FE:84:1F:6B:CC:92:06:84:A2:D4:C4:92:3C:F8:20:90:88:80:07
Authority key identifier: 02:89:EE:CE:A2:79:41:32:57:D8:90:8C:25:56:8A:BE:B8:AF:86:77
Certificate issuer: /CN=0289eecea279413257d8908c25568abeb8af8677
Certificate serial: 01967A56BA3C6E62C420A8A17C5978E0F82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AonuzqJ5QTJX2JCMJVaKvrivhnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.mft
Manifest number: 0A88
Signing time: Mon 28 Apr 2025 03:00:26 +0000
Manifest this update: Mon 28 Apr 2025 03:00:26 +0000
Manifest next update: Tue 29 Apr 2025 03:00:26 +0000
Files and hashes: 1: AonuzqJ5QTJX2JCMJVaKvrivhnc.crl (hash: 8J3oht9BM4dKdPOjLTfVusxuHhLzZ1Nb6IvShzAPxM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AonuzqJ5QTJX2JCMJVaKvrivhnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:ba:3c:6e:62:c4:20:a8:a1:7c:59:78:e0:f8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0289eecea279413257d8908c25568abeb8af8677
Validity
Not Before: Apr 28 03:00:26 2025 GMT
Not After : Apr 29 03:00:26 2025 GMT
Subject: CN=ccfe841f6bcc920684a2d4c4923cf82090888007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ec:b7:b9:22:9c:b0:8e:ef:00:1a:2e:78:fa:
e1:a9:8c:27:64:af:68:76:0f:e0:d4:51:e6:2a:03:
05:92:d0:b1:f6:3f:b4:5c:4f:2a:a6:1d:34:52:bf:
68:88:44:b6:52:e0:54:f9:d8:54:32:08:b6:77:c1:
32:f9:6e:bb:84:44:0e:15:05:fa:b0:a7:cd:8d:27:
4b:88:23:74:76:b6:1f:15:16:d5:ae:cf:06:8a:e6:
c0:3f:5f:d6:bd:7a:ab:28:0b:9e:ba:7f:68:37:3c:
dd:97:cd:cb:f6:49:ab:dd:dc:65:73:20:5d:c5:c9:
6c:f8:c6:7f:45:0d:23:f3:6d:79:63:ff:d1:e2:f8:
84:25:57:43:ef:43:53:de:1e:ef:6b:16:d4:84:0e:
72:40:6d:54:5e:9d:90:ab:7f:1e:06:b9:e8:5c:d4:
90:e3:70:b3:e8:a3:c5:a7:a6:eb:99:8f:59:75:ed:
81:86:90:04:b3:1b:8d:b4:82:db:3b:a9:92:65:fc:
3e:10:e2:07:bd:8f:4f:6f:d7:2a:52:ee:f9:49:ef:
48:97:11:f7:68:a6:8e:ae:27:af:a9:21:af:e5:f1:
1b:93:1b:9c:a1:5a:f9:c5:b9:fa:73:4b:96:43:eb:
a6:db:eb:59:3c:55:e5:be:56:1f:3c:9e:4f:5d:0f:
1b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FE:84:1F:6B:CC:92:06:84:A2:D4:C4:92:3C:F8:20:90:88:80:07
X509v3 Authority Key Identifier:
keyid:02:89:EE:CE:A2:79:41:32:57:D8:90:8C:25:56:8A:BE:B8:AF:86:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AonuzqJ5QTJX2JCMJVaKvrivhnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/22b88b-1fbf-40f4-ada5-270929d05192/1/AonuzqJ5QTJX2JCMJVaKvrivhnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f9:f8:36:4d:42:37:53:f9:5d:d9:11:6b:9d:e4:fc:9b:38:
82:6d:5e:66:48:45:63:ca:d0:05:9f:14:4f:1b:81:64:88:a3:
ae:de:45:d1:aa:1b:a3:14:01:d0:d9:17:a8:eb:f3:e8:44:0d:
98:70:ac:84:a2:1a:37:38:2f:61:cc:a0:65:2b:fc:7f:6f:28:
73:3a:7a:d4:ed:12:06:32:71:f7:5a:2e:9e:82:40:11:0f:67:
79:1d:17:88:4f:ab:be:2a:94:4f:f9:a5:ea:2e:cb:47:e1:ff:
ff:b6:85:57:b0:7a:90:00:ff:ac:cd:45:03:24:9b:2f:c7:43:
40:ed:b1:48:0d:19:ec:75:a2:3f:b8:b9:53:5c:d7:ee:8e:fb:
4e:a4:6e:62:fa:2a:59:d2:7a:8f:15:c6:63:6c:4a:3a:fd:81:
ec:51:3a:81:e3:21:37:0d:4b:0b:14:44:35:a4:83:35:9d:7e:
a0:4f:cd:bd:4e:9a:66:dc:2c:ff:65:b2:41:62:e6:19:98:ef:
d0:1b:fe:75:6b:94:af:c3:3a:64:fd:b0:65:d0:24:e7:fe:26:
44:9f:27:85:c1:a5:7b:c6:f2:c8:d7:08:5b:2d:43:42:f0:e8:
e2:d6:08:06:d4:e4:3f:90:55:11:38:2b:22:84:58:cb:5f:bc:
6e:de:ee:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:02:08 2025 by rpki-client