Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: Yid2Aleq9NjNMhZCt8Zn2cAFMH/9PSmPlJ3b6Pfe1nM=
Subject key identifier: 68:7F:43:46:FE:41:01:CF:12:AA:AF:3E:FF:16:F4:87:7B:5E:FC:27
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 01968210E9837277D93FCA0E545A071DEDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 0673
Signing time: Tue 29 Apr 2025 15:01:08 +0000
Manifest this update: Tue 29 Apr 2025 15:01:08 +0000
Manifest next update: Wed 30 Apr 2025 15:01:08 +0000
Files and hashes: 1: 2ThSREv_WIoD2G2ZXnXTglHuGxQ.roa (hash: s1DwOtOnPcZDQ1RwreTVQg44ZJzwzwNbU2JFNCOH/jY=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: eG/wX2Qv/3q/fveWmfJ8KW2RsHV7/IhCPsbK5GD+nP4=)
3: umZiORkStDdX-o9DnnT4OvBeIOE.roa (hash: Le853vZPtOeUlzPmDkRLXQM7/w7zBId+Eilqr9YxNG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:e9:83:72:77:d9:3f:ca:0e:54:5a:07:1d:ed:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Apr 29 15:01:08 2025 GMT
Not After : Apr 30 15:01:08 2025 GMT
Subject: CN=687f4346fe4101cf12aaaf3eff16f4877b5efc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:a0:b3:3e:2d:53:33:fe:bf:c9:6e:a7:db:
8a:73:99:06:70:1b:b6:af:a5:43:73:ec:ed:04:be:
90:22:86:ef:68:e5:64:91:e9:bc:5d:70:d3:56:62:
e6:79:2f:59:09:66:57:f5:21:dc:cd:60:58:10:c7:
6a:ac:af:bb:28:e1:d3:14:b4:b3:98:0b:b7:0a:db:
b4:4b:01:be:66:7a:cb:d6:5f:52:3a:97:b2:8d:a0:
44:c6:b4:b8:d6:b7:32:5a:60:9b:28:7c:4d:13:95:
1c:49:8d:65:20:13:07:2b:cf:af:ec:88:16:b7:03:
db:88:1a:89:83:81:e3:91:af:e1:1d:5e:9d:7b:e4:
b5:75:06:11:bb:83:af:6a:f3:cb:c4:74:3f:ec:de:
2e:82:0c:4c:86:52:af:1c:f5:d4:9c:31:5e:aa:3c:
91:ee:16:e5:0a:24:8b:f7:d2:22:da:04:25:35:58:
1e:22:c0:23:fc:07:89:31:0a:30:2a:4d:de:e0:b5:
4d:00:c5:21:48:15:08:91:e7:c2:8f:52:44:20:83:
e7:5d:e1:af:cd:4d:d7:b6:16:e5:72:2b:5c:c8:ab:
80:45:ab:dc:e2:b4:6d:cd:f0:40:38:8c:3a:d1:a3:
17:ce:49:37:a7:80:74:2e:7c:da:8b:c8:95:df:db:
07:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7F:43:46:FE:41:01:CF:12:AA:AF:3E:FF:16:F4:87:7B:5E:FC:27
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ef:22:77:8e:66:07:c6:eb:92:6a:f4:ee:ad:62:ad:b8:82:
65:23:54:3a:24:53:da:75:22:5d:6d:1a:83:11:39:e3:74:bd:
07:02:11:c1:29:eb:49:90:72:b3:0c:30:2d:3c:38:97:ba:2f:
32:7c:69:30:e5:b6:09:b0:58:b2:57:9d:48:5b:2a:df:a9:92:
54:3e:54:25:64:7f:98:a8:50:e0:92:52:6e:76:cc:92:ef:42:
e9:d1:b1:31:8e:f4:92:61:c1:ab:ba:b8:fc:8b:6f:95:ed:32:
71:5b:7c:37:c8:aa:2e:69:71:a0:42:ae:7a:2b:71:a4:39:ce:
8e:5c:f2:0a:90:b1:87:9c:54:76:c3:27:ef:c4:2f:a7:b2:ad:
45:87:41:5d:f6:35:f0:a1:a7:ed:98:29:93:d0:9d:de:02:22:
df:8d:eb:f3:b8:86:3f:4c:9f:67:d8:73:07:50:05:bd:68:02:
03:0a:f3:45:59:ca:ec:d9:d8:8c:a5:14:61:fe:00:86:c0:c3:
b1:89:82:35:d7:f4:16:87:9a:37:81:89:61:1b:4c:2e:25:8b:
9d:36:63:c7:96:77:16:26:bd:ce:59:17:bd:08:b0:a4:cf:2a:
df:da:69:0a:b7:4a:e9:c7:5f:8e:fe:fc:70:d3:2b:9a:d9:31:
44:54:cf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:33:13 2025 by rpki-client