Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
File: A-aapu504w79uBm5yxvyHnhub6M.mft (raw, json)
Hash identifier: Wm7CnhiI6EwUnsXRgbeSci9N4XaJew5tqZQRNBVLUk8=
Subject key identifier: 0B:31:E0:D7:17:F7:6E:B4:EA:0F:03:06:CB:2F:14:95:AD:D5:7D:5B
Authority key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
Certificate issuer: /CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Certificate serial: 019686FFB5B4C18E9D5BFA69479530D1693A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
Manifest number: 03B4
Signing time: Wed 30 Apr 2025 14:00:27 +0000
Manifest this update: Wed 30 Apr 2025 14:00:27 +0000
Manifest next update: Thu 01 May 2025 14:00:27 +0000
Files and hashes: 1: A-aapu504w79uBm5yxvyHnhub6M.crl (hash: H2DsAES5/+4P7VUIT5O5m8fThwuJWOlfuKaUMGeb4Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:b5:b4:c1:8e:9d:5b:fa:69:47:95:30:d1:69:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Validity
Not Before: Apr 30 14:00:27 2025 GMT
Not After : May 1 14:00:27 2025 GMT
Subject: CN=0b31e0d717f76eb4ea0f0306cb2f1495add57d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:85:10:93:ee:3f:0c:eb:9c:d7:8d:b6:a9:
b5:e1:58:de:31:43:cd:d9:44:86:95:85:bb:4c:80:
92:0f:0b:61:69:dd:bd:b9:72:7d:3f:d7:aa:83:91:
a0:00:e9:47:02:60:a6:4d:e9:54:f9:56:0d:02:6b:
78:7e:3e:51:10:a3:07:38:b5:ca:a9:fb:89:aa:3a:
6e:0e:70:70:49:d0:3d:c8:0f:25:58:3c:a9:58:2f:
82:d7:0c:17:8f:ce:1f:11:6f:60:5e:ff:5c:9d:35:
0c:75:ed:e8:26:d0:18:f5:28:d6:2d:05:cd:75:8e:
69:c9:07:ca:e4:c0:e3:e2:f2:be:66:5f:f0:07:8b:
4d:15:70:6e:85:86:a8:8e:74:3a:a1:24:c7:7b:b5:
c1:50:8a:42:44:e6:08:41:f1:22:b5:61:69:b3:20:
8c:5c:0a:2f:e1:d6:35:1a:51:fc:39:f8:d5:b0:74:
c9:bf:8a:33:6d:12:12:49:49:91:cc:84:88:10:84:
c0:57:27:84:22:b4:ea:ce:be:ac:32:a2:cf:5d:01:
70:4e:d1:a7:20:60:72:62:ba:5b:2b:76:d7:be:b3:
ea:4d:d2:bf:86:7e:aa:72:5a:c1:11:e4:65:05:36:
90:d1:47:04:fd:79:de:fe:af:fe:c7:d9:9a:d2:01:
c1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:31:E0:D7:17:F7:6E:B4:EA:0F:03:06:CB:2F:14:95:AD:D5:7D:5B
X509v3 Authority Key Identifier:
keyid:03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b9:f1:7a:fc:85:ec:82:8d:78:96:7b:fd:34:7c:a1:e0:9e:
ea:86:9f:1e:b0:6c:78:26:7a:24:d3:bd:b9:b6:c8:47:d6:a9:
73:a2:5d:7d:52:53:04:fe:6f:f4:54:1a:d4:e9:b1:3b:0f:62:
e9:f6:d6:ee:12:a6:a0:ae:50:8d:70:05:d3:70:ae:48:ac:d5:
44:46:33:14:3a:a2:05:df:fe:34:fe:c7:2e:a1:a5:92:b3:6a:
d6:52:7f:f0:1a:23:3d:4b:20:e9:41:4e:87:41:35:64:c5:7b:
27:69:8b:f3:ee:79:12:b3:01:1d:8c:61:9d:d7:18:ee:21:45:
b7:2a:d3:43:ed:d6:16:85:d4:5b:32:20:99:ab:90:d9:0b:1d:
41:c0:31:f1:f0:b7:d6:c7:b9:26:84:97:74:2c:17:2b:a6:97:
8e:31:71:17:92:a8:fa:eb:5f:a4:ad:53:cf:ae:87:b7:f0:29:
e5:d8:95:fe:34:9f:38:de:69:e0:bc:0f:4c:79:11:04:0f:b1:
30:89:4d:1e:4e:8c:9e:20:27:e2:d0:84:4d:b0:b8:6c:e3:04:
03:67:e3:58:ab:57:0a:a6:93:ae:c5:84:c9:52:36:66:b4:69:
99:a5:85:99:4c:f5:ec:9d:60:87:af:b5:ed:cf:9e:78:af:3c:
96:ea:af:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:40 2025 by rpki-client