Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
File: aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft (raw, json)
Hash identifier: KsQ4+wiF1PTYPASqmno1ovQINVka5H9OWVvd+MkwgeQ=
Subject key identifier: 06:17:F0:3E:CA:B8:8B:0E:7F:4E:2C:5E:D7:7B:77:DB:23:0F:1D:0E
Authority key identifier: 69:82:9B:44:8A:D8:F9:63:A0:EC:FF:8B:22:16:CA:9C:E9:CE:6F:41
Certificate issuer: /CN=69829b448ad8f963a0ecff8b2216ca9ce9ce6f41
Certificate serial: 01968BEEE9DF170E43C4B5BC55B56E606F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
Manifest number: 0553
Signing time: Thu 01 May 2025 13:00:12 +0000
Manifest this update: Thu 01 May 2025 13:00:12 +0000
Manifest next update: Fri 02 May 2025 13:00:12 +0000
Files and hashes: 1: WhLENsO2y4UEzkuswA1wx41c4K4.roa (hash: qqWz2hpUFCfdOvnndjkfI9tgPQ2D7KLxkWgnxyi1reI=)
2: aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl (hash: I1Bwd8v7k++EJQIu5T/lgSA+aTfh39lSOcbMFoidUak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:ee:e9:df:17:0e:43:c4:b5:bc:55:b5:6e:60:6f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69829b448ad8f963a0ecff8b2216ca9ce9ce6f41
Validity
Not Before: May 1 13:00:12 2025 GMT
Not After : May 2 13:00:12 2025 GMT
Subject: CN=0617f03ecab88b0e7f4e2c5ed77b77db230f1d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:15:7e:cd:53:93:fd:21:05:a8:a2:15:c4:
e6:81:b5:8d:ea:f6:e5:b9:3b:a4:af:cc:3c:3c:ab:
49:85:4f:d4:ec:09:e8:b5:78:01:30:4d:72:83:c7:
bf:5b:be:77:be:e6:77:0a:89:92:e1:36:07:bf:14:
a6:37:9c:b1:c6:80:21:3b:4e:a2:28:5a:d6:f7:cb:
e6:ac:8f:33:fd:c7:71:a7:73:67:e3:4c:9e:2a:56:
88:94:6b:75:16:b5:a9:8d:85:43:29:46:39:ee:96:
44:08:de:83:60:d9:e4:2a:65:18:70:8c:78:08:a2:
31:70:d7:f1:7b:a1:e4:fb:72:7f:d1:a4:1f:35:cc:
1f:08:a9:61:9c:ae:79:4c:29:c3:b7:53:84:b4:84:
1b:ab:c6:de:3b:65:ea:3d:78:16:e7:bf:a0:03:3a:
17:a4:a5:10:a0:ae:69:5c:4d:6c:7d:fa:fb:3c:fc:
a3:ff:15:3e:ba:2f:58:48:a1:53:95:fb:3f:ae:dc:
da:27:0a:3f:0e:7e:21:f8:54:9b:05:b1:2a:6c:da:
8d:4d:11:49:39:6c:33:08:57:95:3b:3c:84:75:c2:
99:cd:e4:13:43:ee:4f:33:bb:4f:15:56:53:4d:45:
dc:29:8c:4a:ec:ca:02:42:41:c3:79:9e:4b:99:11:
b9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:17:F0:3E:CA:B8:8B:0E:7F:4E:2C:5E:D7:7B:77:DB:23:0F:1D:0E
X509v3 Authority Key Identifier:
keyid:69:82:9B:44:8A:D8:F9:63:A0:EC:FF:8B:22:16:CA:9C:E9:CE:6F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYKbRIrY-WOg7P-LIhbKnOnOb0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/590e2f-decc-4887-8e03-e76b54466654/1/aYKbRIrY-WOg7P-LIhbKnOnOb0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:af:2e:d3:a3:6d:d2:fa:78:f2:63:ca:48:8e:ca:ec:2f:26:
b7:0d:0a:46:8f:ca:7e:46:dc:1b:74:cd:0a:c2:95:20:db:72:
65:f8:7a:bb:86:fd:1e:89:4b:c1:38:11:30:c7:f0:a1:4e:58:
ca:d0:5f:b5:41:2a:70:69:f8:98:35:01:06:ff:ba:67:8b:a1:
9e:59:17:6e:bb:86:78:c4:55:84:ab:15:40:ec:c2:0b:a6:8d:
10:1c:ce:f8:71:43:7c:56:94:00:49:a2:48:38:9e:fa:4c:d9:
03:b8:b3:e7:bd:1c:95:7b:82:fc:74:ff:50:92:1d:6f:62:cd:
58:c6:36:62:e5:3d:ef:b4:87:17:2d:fc:63:d4:16:39:67:85:
74:dd:06:b4:e5:be:93:8c:1b:c5:07:29:2a:fc:65:75:df:d1:
d7:3d:7d:b0:e2:13:df:ce:1b:5f:cf:ea:97:83:7e:75:1b:ad:
af:3e:33:8e:31:86:c8:54:85:7d:b6:cc:91:90:13:6a:b2:84:
f8:6c:39:23:04:c5:ac:f4:63:44:2f:c8:d8:13:bd:cc:cc:c9:
ba:c5:87:aa:48:53:49:27:de:e5:8b:19:fc:87:d4:b5:c8:4a:
95:e8:e6:d1:53:d3:f3:08:64:af:ca:9b:fc:4f:41:97:33:d0:
23:b9:d4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:41:39 2025 by rpki-client