Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
File: A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft (raw, json)
Hash identifier: SsELrahbh00ku/VRULIKJ2n+5nnQoxrl9t/uLMdcfZI=
Subject key identifier: 91:C9:B9:31:B0:46:9F:F8:C6:7B:CF:7E:D4:B9:73:9F:75:91:21:DE
Authority key identifier: 03:A5:E9:5A:BB:91:D6:4D:73:B9:14:8C:0A:AF:59:B3:AF:3F:4E:6A
Certificate issuer: /CN=03a5e95abb91d64d73b9148c0aaf59b3af3f4e6a
Certificate serial: 01968623DFDF189FF46D035C2717528F7AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
Manifest number: 14AA
Signing time: Wed 30 Apr 2025 10:00:19 +0000
Manifest this update: Wed 30 Apr 2025 10:00:19 +0000
Manifest next update: Thu 01 May 2025 10:00:19 +0000
Files and hashes: 1: A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl (hash: aF5kVXvtmqJVMj4yDgk8UOO5l9jbh2NxTbYwOU7zE5s=)
2: HE3ngXhibuMNnlUTqhNdyzJzI7E.roa (hash: vbHlj5WYFjRLuQiS72fylFam6l6ufmPPLhOlt+s0Jhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:23:df:df:18:9f:f4:6d:03:5c:27:17:52:8f:7a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a5e95abb91d64d73b9148c0aaf59b3af3f4e6a
Validity
Not Before: Apr 30 10:00:19 2025 GMT
Not After : May 1 10:00:19 2025 GMT
Subject: CN=91c9b931b0469ff8c67bcf7ed4b9739f759121de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:b1:66:a9:f9:a2:07:7b:b4:69:5d:73:04:
0a:cf:cc:05:25:b4:6e:89:75:86:47:32:1b:15:b0:
6f:e2:4c:40:c6:ac:d7:61:a8:1e:64:73:2a:24:0a:
5f:06:b6:e6:a4:16:4f:b6:f8:ae:1a:5a:ee:75:b5:
79:0e:cc:4f:c1:38:be:8e:5b:af:78:c3:03:3c:4c:
1b:de:58:24:3c:3d:c3:2a:11:18:ca:25:60:94:32:
59:1d:ed:ab:0a:73:41:2e:8a:44:03:86:13:da:63:
e1:5d:6c:7a:8d:ee:b3:81:b5:be:1b:26:0a:e4:1c:
a3:a4:8a:66:9a:a8:d5:5b:9c:c5:91:21:49:f0:27:
eb:7a:90:96:29:d2:5f:f3:9f:89:bc:fb:e7:43:93:
95:04:c7:b7:0f:8e:51:ee:00:11:c6:79:b8:e3:7a:
24:04:a3:bf:f2:cb:26:8f:2c:46:08:af:d4:0d:70:
64:41:38:71:b9:07:cd:29:75:0f:d9:9d:ca:18:aa:
47:9f:c4:a3:46:09:c0:80:5a:f8:6b:9a:dd:28:9f:
00:c2:2e:0c:00:e6:2c:bc:25:2a:fa:da:44:30:fe:
05:cb:2b:db:2c:52:37:bb:d0:a5:31:e4:65:93:64:
39:8b:03:f3:14:19:fb:f7:37:1e:2b:4b:d4:c5:3a:
5f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C9:B9:31:B0:46:9F:F8:C6:7B:CF:7E:D4:B9:73:9F:75:91:21:DE
X509v3 Authority Key Identifier:
keyid:03:A5:E9:5A:BB:91:D6:4D:73:B9:14:8C:0A:AF:59:B3:AF:3F:4E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:65:36:ec:27:f8:7a:89:51:01:85:8b:66:ee:fb:72:a0:f1:
24:0f:42:54:ef:1c:52:8a:ca:6b:90:1c:e6:67:22:c7:71:d8:
a9:e1:29:d1:aa:5a:e4:1a:a1:29:7d:91:00:99:c2:ca:90:16:
ad:9a:94:40:2a:14:15:fc:50:69:42:d6:34:8f:d5:2e:8a:49:
a4:f9:d2:9b:36:0b:5d:a0:8f:08:86:42:4f:6b:30:6e:db:a8:
8e:e3:91:14:15:58:81:4a:9c:ea:1c:4d:76:6f:a0:19:c8:f1:
6c:83:43:da:e6:29:10:7c:5d:51:7c:ea:85:3e:bf:59:30:8d:
d5:72:35:9f:3d:f3:32:1e:22:ac:cf:22:cc:2f:4a:d3:cd:53:
db:e0:35:6b:a8:67:70:c0:c8:75:4d:11:dc:0e:75:50:83:a8:
90:be:3c:ee:91:46:92:5d:e2:f9:11:d5:33:cb:17:8f:0e:c5:
de:e3:32:70:60:38:38:a7:5a:36:ad:15:3f:13:dd:71:0a:a5:
97:f3:15:89:15:cc:6e:bb:d6:43:8b:e8:3e:44:61:3c:65:5b:
4f:55:ff:7d:71:56:4e:a5:5b:bc:c3:0a:d2:7f:ac:31:22:c6:
17:68:18:e2:50:41:5b:9a:b3:fd:59:89:76:c5:1d:cd:15:9f:
a2:13:d6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:31:08 2025 by rpki-client