Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
File: aAkoqR-PfmOX5sZdDgtmKReW01I.mft (raw, json)
Hash identifier: 0XVt65g9T4T+rnyH89f4SiVYd5qlbgrsuKSH3LDz59o=
Subject key identifier: D0:75:19:63:F0:21:C3:FB:AF:F7:00:91:C0:C2:C1:F9:8E:47:B0:02
Authority key identifier: 68:09:28:A9:1F:8F:7E:63:97:E6:C6:5D:0E:0B:66:29:17:96:D3:52
Certificate issuer: /CN=680928a91f8f7e6397e6c65d0e0b66291796d352
Certificate serial: 0196737954AD1E97D39A65CAF08D61609D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
Manifest number: 10D1
Signing time: Sat 26 Apr 2025 19:00:53 +0000
Manifest this update: Sat 26 Apr 2025 19:00:53 +0000
Manifest next update: Sun 27 Apr 2025 19:00:53 +0000
Files and hashes: 1: aAkoqR-PfmOX5sZdDgtmKReW01I.crl (hash: Hr2xxRpaJRFlg480WBzxsptGZSGQ0p3okJNVjCsto30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:54:ad:1e:97:d3:9a:65:ca:f0:8d:61:60:9d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680928a91f8f7e6397e6c65d0e0b66291796d352
Validity
Not Before: Apr 26 19:00:53 2025 GMT
Not After : Apr 27 19:00:53 2025 GMT
Subject: CN=d0751963f021c3fbaff70091c0c2c1f98e47b002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cb:d6:cb:d2:e0:0d:0f:b7:c8:43:3d:6a:df:
4c:52:01:55:a1:8d:27:84:75:fd:5d:c9:d6:fb:c3:
44:8f:09:6b:50:15:43:18:b9:e1:62:50:17:d3:27:
30:85:50:e8:1f:78:1e:56:17:e3:f4:4d:e4:50:ca:
df:4e:aa:ac:c7:e1:62:ee:e0:01:9c:b8:b9:c8:88:
48:04:e9:9e:4e:28:1e:10:eb:22:ce:81:a7:b1:82:
0b:94:81:30:38:df:8a:9e:22:1c:11:33:a0:f2:41:
ae:63:73:43:b5:3d:a4:34:d8:e8:e4:79:8b:4b:eb:
5a:44:d8:7a:5b:ba:75:03:94:55:36:2d:96:71:5b:
74:84:b8:33:ae:81:22:cd:7c:43:c4:00:cd:e8:09:
40:27:47:6c:89:99:bd:94:79:ce:11:2b:54:68:a5:
84:8f:ad:06:a0:4b:dd:23:7d:1c:7d:a5:a8:c9:be:
04:87:a8:aa:51:bd:86:d0:d9:57:36:0f:0a:26:32:
85:05:fc:ab:d7:2f:dd:f6:17:33:11:21:f1:aa:2f:
ee:77:f0:14:42:7f:3b:e7:3f:73:ec:74:53:42:b2:
7e:d9:19:c2:02:9b:61:ec:8a:24:4a:c9:11:0e:a6:
d7:f3:52:71:5e:c7:25:a8:b6:ba:6f:75:e8:bd:a0:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:75:19:63:F0:21:C3:FB:AF:F7:00:91:C0:C2:C1:F9:8E:47:B0:02
X509v3 Authority Key Identifier:
keyid:68:09:28:A9:1F:8F:7E:63:97:E6:C6:5D:0E:0B:66:29:17:96:D3:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:cb:fe:48:4d:75:2a:f6:0d:aa:89:b0:71:95:c8:ca:d6:6b:
18:c3:79:f3:6e:fc:6a:12:91:11:8d:fa:b1:8a:69:0a:95:81:
cd:b8:7d:b0:26:68:c3:69:49:82:90:12:3b:8f:f0:4a:f2:df:
43:bc:e0:ad:91:67:29:ba:0d:ec:43:08:d2:6c:be:b2:52:78:
63:55:5a:8b:5c:28:ea:f5:27:f6:15:50:22:4f:9d:ed:2f:dc:
2c:7f:55:d6:b1:af:88:4a:3f:63:49:98:fe:55:4b:7a:2b:5e:
f6:3d:af:02:d0:0a:8d:e6:61:a5:48:d2:39:71:90:be:c2:9f:
1d:78:a7:0b:87:f0:ea:5a:cd:93:57:77:7a:38:f6:91:fe:37:
a5:27:2a:19:e0:ad:26:1e:cb:da:b7:cf:22:ee:4f:a7:a7:cd:
a5:a6:5b:15:92:56:4e:87:0a:77:68:5e:c1:3b:52:42:32:ec:
04:51:01:52:93:68:48:e8:48:21:a6:a2:2f:a0:67:73:4e:17:
62:4c:4c:ac:cb:5c:b7:9a:9c:bc:08:7b:a1:e4:31:65:08:c9:
fb:f3:f2:3f:65:e1:7b:de:3c:2f:2e:e9:8c:62:98:e8:55:93:
54:4a:93:bb:14:92:b2:d5:8b:d0:df:43:e9:7a:3b:cf:1d:b8:
89:b5:50:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:51:37 2025 by rpki-client