Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
File: aZuxClVyF1sDo8fL--k4t7FEGsA.mft (raw, json)
Hash identifier: cUqrvdLkW5xBVrZMyPG5br+lWsXiobDheFOJHSPIiDo=
Subject key identifier: 2B:D0:6F:FA:32:B4:74:43:D5:ED:DE:1C:86:AE:22:B2:50:1E:67:FE
Authority key identifier: 69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
Certificate issuer: /CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Certificate serial: 019680223432DDB436531DF2CE6476F44C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
Manifest number: 066E
Signing time: Tue 29 Apr 2025 06:00:47 +0000
Manifest this update: Tue 29 Apr 2025 06:00:47 +0000
Manifest next update: Wed 30 Apr 2025 06:00:47 +0000
Files and hashes: 1: N5yHtSmIzjdux70VxbibkigJnPs.roa (hash: 9gzwKXozjeocMD7/cGK25SjjWM/umahL9QM8Kbeipak=)
2: aZuxClVyF1sDo8fL--k4t7FEGsA.crl (hash: /FF4XYkjyBuIv7t0f+td8ayknfDrU0w2CeYQ32RoGaM=)
3: ha1GFGgyrmpD4R8KeDnEZpxuKqs.roa (hash: nTt2LcLEhACSb9mIP1F5UH8NEmx1EFCAvtQLB71m5zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:34:32:dd:b4:36:53:1d:f2:ce:64:76:f4:4c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699bb10a5572175b03a3c7cbfbe938b7b1441ac0
Validity
Not Before: Apr 29 06:00:47 2025 GMT
Not After : Apr 30 06:00:47 2025 GMT
Subject: CN=2bd06ffa32b47443d5edde1c86ae22b2501e67fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:b3:4f:16:6c:4c:e7:2b:18:74:61:89:bf:
6b:4c:26:2e:28:b7:2f:cd:73:0c:10:a3:8d:43:4b:
77:e2:21:5b:c8:18:f6:11:28:b6:c2:71:3e:4c:82:
17:15:5c:b5:f9:3b:ba:20:a7:49:10:04:c7:4a:ab:
e8:49:29:ca:a1:60:b1:14:1e:94:2f:d4:18:bb:44:
ef:c3:9f:b4:d0:5c:c1:85:44:91:6f:95:29:fe:c7:
81:b2:0e:69:ee:e1:67:a6:49:f4:f1:1f:e3:8a:8e:
99:97:ea:22:d1:68:8b:cc:11:28:46:4e:f2:68:a8:
7d:ce:18:ac:95:74:8f:7b:4a:da:7d:cb:ed:72:56:
b1:4d:1f:e7:99:8e:74:6d:a7:53:aa:2c:da:ff:fa:
4c:7a:37:85:d1:02:17:f3:ba:ee:24:89:82:ad:40:
82:6e:63:0c:fe:de:21:ea:d8:e7:62:e0:ce:82:8c:
77:96:ad:3c:58:e2:69:fc:ca:2d:d5:b8:0a:bc:e0:
83:49:30:24:35:f8:e5:32:c6:70:54:23:e6:bd:cc:
80:d9:a6:de:50:21:8b:33:80:ce:13:d9:d4:28:9d:
79:54:36:b6:33:54:05:cc:78:d9:c7:b5:31:b9:24:
42:5b:23:a0:98:d1:62:f1:9b:2d:d5:e2:0c:ec:ae:
87:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D0:6F:FA:32:B4:74:43:D5:ED:DE:1C:86:AE:22:B2:50:1E:67:FE
X509v3 Authority Key Identifier:
keyid:69:9B:B1:0A:55:72:17:5B:03:A3:C7:CB:FB:E9:38:B7:B1:44:1A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZuxClVyF1sDo8fL--k4t7FEGsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfa07b-87c2-452a-bd0c-8aae43063bca/1/aZuxClVyF1sDo8fL--k4t7FEGsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3a:3b:14:10:07:aa:31:f3:cb:50:1a:2c:19:01:ce:8e:04:
c7:dd:18:24:b8:f7:6c:fc:8d:6f:34:eb:90:c4:6b:c6:ee:2b:
29:44:e8:a4:e6:cb:64:60:ab:b6:0f:ab:56:53:6a:d4:49:1a:
d2:83:6f:98:cf:bf:5e:93:0c:c5:eb:98:5f:73:4f:19:6f:f4:
45:b4:b9:52:aa:28:de:58:62:30:65:b6:4a:7e:da:71:79:1b:
5c:a1:a9:48:37:a1:9b:66:19:2c:1b:6b:79:b6:b2:28:42:16:
78:be:ab:4c:53:00:13:11:e0:7f:7d:9b:26:b4:24:7f:09:d0:
83:1e:6d:37:81:f4:47:83:fb:b3:67:ae:37:1c:c7:cc:f2:e4:
b3:31:58:13:b5:bd:60:46:77:c4:67:2f:36:72:7b:7d:3e:17:
d0:bc:01:ba:14:29:1f:d0:75:83:33:a4:bb:a5:f6:d4:f0:b0:
d7:9f:8c:f8:4a:15:f3:93:7a:fb:22:b0:de:a1:45:f2:8d:af:
a4:64:71:9a:0c:e8:50:5e:42:da:a9:cf:cb:34:4c:7a:49:91:
33:ad:e7:5c:82:20:95:03:1a:5b:4d:34:22:96:7c:45:72:50:
fd:50:e7:b3:4d:fa:6c:74:cc:cb:db:4b:55:16:88:fc:15:5d:
9f:ca:11:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:36:26 2025 by rpki-client