Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
File: AA0P7izVZpZcoI21UGY8sgtBI0M.mft (raw, json)
Hash identifier: X7+hqylUhGGRjqSVpJZbM8G1D46Gd56hbAFWzBVBOL4=
Subject key identifier: CD:B9:92:A6:41:A1:48:F5:6A:79:91:C2:43:30:E3:25:2F:9E:59:6D
Authority key identifier: 00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
Certificate issuer: /CN=000d0fee2cd566965ca08db550663cb20b412343
Certificate serial: 019674FA2AB725D2C5F0B518F9DB10C740AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
Manifest number: 0AD9
Signing time: Sun 27 Apr 2025 02:01:14 +0000
Manifest this update: Sun 27 Apr 2025 02:01:14 +0000
Manifest next update: Mon 28 Apr 2025 02:01:14 +0000
Files and hashes: 1: AA0P7izVZpZcoI21UGY8sgtBI0M.crl (hash: TKwj6AqFQzj5G/ej47ZpUudAZbAeiwezwPkDPeNm+jo=)
2: c2eVtCtVjsi6i3vPHgLATuNVfoM.roa (hash: tozwRqmwgoJZSoOdc4bKHZ1xB9xQYRcf64jJhmtl4S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:2a:b7:25:d2:c5:f0:b5:18:f9:db:10:c7:40:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000d0fee2cd566965ca08db550663cb20b412343
Validity
Not Before: Apr 27 02:01:14 2025 GMT
Not After : Apr 28 02:01:14 2025 GMT
Subject: CN=cdb992a641a148f56a7991c24330e3252f9e596d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:5b:15:f8:42:81:d0:d0:dd:fa:42:cc:ab:
c6:44:d0:39:e3:77:86:d7:68:a1:a8:d9:eb:e0:b9:
5a:12:ae:4b:d6:13:29:74:b3:dd:37:b8:9b:db:a9:
5b:3b:78:a6:d2:60:82:8a:8b:9a:a3:f3:56:09:c7:
8c:f3:ca:58:b9:78:8a:90:58:5e:e8:4a:3c:ce:dd:
06:97:f6:7d:68:18:94:5c:87:e0:a0:aa:f6:be:2c:
14:3b:46:d6:f0:cb:2a:3d:c0:bb:96:bf:c3:8a:eb:
ca:f4:94:93:2f:3a:85:18:1c:ff:9b:a6:2b:ca:69:
9b:24:0d:50:6e:38:65:59:7c:00:38:dd:eb:51:2d:
fb:66:89:99:26:d6:a2:6b:2b:92:53:ee:13:96:52:
4c:d0:f0:58:cf:a8:4e:58:a8:fc:f8:a8:7b:c9:b0:
50:0b:b4:f6:6b:ec:bf:4b:32:1e:1d:6f:cc:c3:b5:
a6:7e:40:50:86:2c:42:67:93:fc:0e:fb:3f:59:dd:
5b:6a:00:8e:a4:ff:ba:c3:3a:ea:f1:71:c3:ea:b5:
fa:6e:69:c4:5e:76:c7:f4:f8:7b:79:33:37:fc:29:
53:ee:05:1f:df:a0:81:19:ef:9d:0d:69:b3:59:4f:
f0:5f:59:85:f5:02:43:d6:13:4d:e6:97:3d:d6:46:
a3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B9:92:A6:41:A1:48:F5:6A:79:91:C2:43:30:E3:25:2F:9E:59:6D
X509v3 Authority Key Identifier:
keyid:00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:89:d6:29:e7:32:98:05:1c:56:7e:29:a1:64:f0:3a:4d:d0:
36:d3:ac:df:6b:20:e2:a7:64:bf:b3:dc:5d:01:3f:33:e7:ed:
16:1e:a6:df:98:37:56:8c:d4:e1:de:ef:13:a5:5e:90:d0:7d:
85:a0:03:59:f7:78:e9:fa:90:9e:09:33:c2:4c:9d:3d:71:7e:
95:80:50:30:ec:2f:d0:69:b6:40:82:73:5b:c1:b5:4a:ad:0e:
f3:02:6a:0b:9b:28:d6:3f:2d:04:c0:9f:e2:6a:24:cf:34:de:
be:81:23:d6:10:38:63:b5:85:36:7b:e7:6a:13:15:a0:e8:9e:
39:0b:a7:12:76:85:c4:8b:08:71:67:a2:21:36:6c:72:db:4c:
89:2a:18:e4:f6:a9:a1:a0:ec:a3:9a:b2:6a:9d:f2:bc:cc:0d:
28:71:27:86:a3:9e:10:25:b9:43:fa:c8:1d:c5:ae:b5:62:00:
c9:75:7a:80:bf:5d:d0:21:28:2c:a3:41:03:a6:6f:54:ad:2a:
25:71:37:00:0c:f9:9a:ff:9d:88:00:be:a8:86:91:e7:ff:22:
a7:ab:d4:7e:90:e5:8d:5f:86:4e:4b:49:f3:52:dd:20:6f:91:
6b:bf:74:c0:4e:aa:74:a4:ba:31:83:9e:20:d5:d9:19:e9:21:
38:ff:31:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:22:18 2025 by rpki-client