Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: 7wG+WstaAyvc/ae4y9X86hMAeyd70fzYZCm9jykMBO8=
Subject key identifier: A4:61:82:C8:F9:C2:29:0A:95:52:62:42:18:95:83:A1:63:09:93:4F
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 0196835A243D5367FB812843458B6BFAEA64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0A8B
Signing time: Tue 29 Apr 2025 21:00:44 +0000
Manifest this update: Tue 29 Apr 2025 21:00:44 +0000
Manifest next update: Wed 30 Apr 2025 21:00:44 +0000
Files and hashes: 1: 9An93QZ5VcdXnM-SpuqFZ7HTYmU.roa (hash: FvzvcUzn3akzojaHHdMGtSYsI1uUN+lMDojMlOkLqXs=)
2: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: quSz0JxAh0VGSbz7QjLdudVXpkgJBGCqHsDHw2Atg4g=)
3: RAD4tK02ktN0fOfQsDIg0oXzowM.roa (hash: zP2Pk53gLmd7JDeyZonVGODT/lrmnaflf5tGkA0jXzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:5a:24:3d:53:67:fb:81:28:43:45:8b:6b:fa:ea:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Apr 29 21:00:44 2025 GMT
Not After : Apr 30 21:00:44 2025 GMT
Subject: CN=a46182c8f9c2290a95526242189583a16309934f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:01:59:de:6e:4a:8e:ef:03:e1:65:5d:33:4e:
f6:83:24:bd:49:70:63:1d:f4:2a:2e:d2:52:f7:ba:
09:f4:2a:e3:0e:fb:3f:23:81:b6:4d:20:35:c0:00:
e0:1a:3b:6f:25:f0:bf:c1:fc:4c:d5:f5:f3:e2:21:
70:ef:74:56:6b:ab:c8:3c:67:4d:61:bd:80:6c:7b:
05:a7:cc:b8:fb:dc:f9:b0:b5:e0:40:b8:de:70:49:
05:8d:c8:b5:52:0f:20:8c:a0:3f:63:06:2d:5e:19:
89:0c:e0:bf:71:c4:2a:2a:57:ea:66:90:ec:40:36:
a3:cd:1b:50:3c:bc:bf:fa:24:ee:bd:5e:49:03:eb:
22:ca:5f:3f:21:02:11:a5:03:44:8a:e8:b0:d6:47:
34:82:5e:1c:b9:81:b6:96:f4:15:a9:aa:41:69:14:
7b:6f:0c:73:91:ef:78:6a:f1:70:6c:26:84:8e:fc:
f2:13:62:ee:77:68:b3:30:df:65:d8:e4:61:19:c5:
1a:2c:32:49:f0:b9:36:51:d5:7b:6b:57:71:c8:bd:
14:ac:9f:a4:ce:8b:71:2e:7d:e4:e0:cc:22:8b:33:
5b:91:7d:12:31:8e:12:0b:05:23:b4:44:72:f0:15:
90:49:1c:66:78:f1:86:37:7e:78:60:92:3a:8b:28:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:61:82:C8:F9:C2:29:0A:95:52:62:42:18:95:83:A1:63:09:93:4F
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:99:e1:94:2c:23:cd:d2:71:87:6e:ce:28:62:16:f4:63:7b:
28:47:91:6f:e0:07:74:22:d9:4f:62:4b:83:e7:25:05:cc:15:
15:50:d2:ac:e5:57:76:23:55:65:1a:4a:f9:5b:f8:42:c9:0b:
84:aa:1d:56:f3:b7:e9:0e:fb:dc:3e:ab:2b:3b:33:23:b5:0a:
83:15:f0:13:9c:23:5b:c1:e2:3e:5f:63:30:49:b5:74:89:35:
b9:21:b9:a4:a2:92:ce:ab:0b:e2:d7:ef:52:44:89:1e:8a:b5:
02:00:17:c2:76:31:62:58:a6:f2:97:af:3c:1d:bb:aa:8e:4e:
a0:19:4d:98:75:32:b6:c7:fd:20:a9:75:c5:42:1f:49:af:a0:
87:6d:98:e3:81:eb:11:9e:d9:cb:20:bb:b5:c4:ab:b6:64:59:
bc:aa:e7:d8:ae:a2:77:e2:93:74:5e:b4:3f:0c:a0:cb:95:40:
ef:20:74:13:d8:91:87:51:33:72:40:a1:c7:0d:a7:34:87:a0:
4c:11:9c:15:6f:ec:6f:f4:95:ef:d8:e2:69:d4:92:22:d5:78:
8b:d5:d2:d8:ac:98:42:b0:95:ab:f2:c5:37:4d:4d:26:ce:a2:
48:b3:1f:36:f3:d1:12:87:b6:91:b2:a3:09:da:92:61:34:e4:
84:47:30:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:41:33 2025 by rpki-client