Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
File: AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json)
Hash identifier: 4rsLtFBpCqAxcQ/x+NCOsuYht6xIIkPB2hb/AityFYE=
Subject key identifier: 0D:45:FA:1B:3F:00:92:F7:68:3D:EC:43:8F:B9:B1:1F:56:82:74:95
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial: 019678681F0671BD546BB51FFCF2B5B235A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 18:00:11 +0000
Manifest this update: Sun 27 Apr 2025 18:00:11 +0000
Manifest next update: Mon 28 Apr 2025 18:00:11 +0000
Files and hashes: 1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: OJmnEQ+Jdot4SYcDFvWAQ9smussjSsMTzFKyfuGYfac=)
2: MgGDvxLOtMPwXMbYQuh7K6Nu5E0.roa (hash: R8z9BxbXd7Dke2ejYNt/dzLTxcDWFrg7+4k/8QPKV/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:1f:06:71:bd:54:6b:b5:1f:fc:f2:b5:b2:35:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
Validity
Not Before: Apr 27 18:00:11 2025 GMT
Not After : Apr 28 18:00:11 2025 GMT
Subject: CN=0d45fa1b3f0092f7683dec438fb9b11f56827495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:5b:df:21:3b:10:48:62:79:5b:cb:02:2e:
28:1a:c4:47:1e:15:34:ae:57:1a:66:2a:4d:48:2a:
77:d8:71:86:44:ad:0d:5e:ce:8c:c2:e4:64:7a:35:
99:69:53:c4:31:d3:90:9b:f1:03:77:a9:47:09:8b:
21:85:b2:45:4b:1e:06:2a:2f:ba:34:97:4d:42:d2:
73:a8:51:01:73:c9:42:dd:f7:e0:a7:ca:60:35:2f:
9c:90:b5:be:53:b6:3a:78:45:7b:08:1d:64:f8:2d:
da:f7:c8:a7:58:22:87:ac:ac:82:0f:38:6d:fc:19:
fa:92:fa:30:b0:c5:42:5a:42:79:e5:88:0b:47:2d:
d8:72:3b:21:09:95:31:67:fd:88:a8:eb:bc:ed:1b:
93:64:a9:13:70:1f:26:02:92:09:9b:a9:27:31:01:
ba:fa:a2:38:2f:e6:9f:93:ec:9d:2f:d4:af:95:22:
2f:3c:da:1a:7f:24:f3:c1:69:28:d0:d8:e9:ee:d3:
90:da:44:33:20:2b:83:57:a5:02:14:05:bb:9b:3d:
64:8c:0e:b1:7c:d8:a7:0a:33:d2:e0:53:2a:65:e6:
7e:79:73:03:76:64:b8:91:82:d3:18:54:d9:e4:db:
51:4a:57:d6:a5:f4:46:d6:af:2d:74:a8:a8:3b:94:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:45:FA:1B:3F:00:92:F7:68:3D:EC:43:8F:B9:B1:1F:56:82:74:95
X509v3 Authority Key Identifier:
keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3a:7c:ba:58:6c:0c:99:88:5e:81:b0:0d:dd:12:5c:da:98:
20:f4:5c:26:a9:98:b6:2f:88:36:18:a4:fc:e6:3a:9e:af:4b:
92:28:57:43:16:24:30:5e:52:43:95:a7:4e:72:4e:46:63:20:
48:5d:80:4a:8a:43:e6:98:ef:1d:14:48:c4:54:5f:70:c2:29:
97:2d:81:fb:51:d6:b4:91:8e:d9:24:ff:63:c1:c5:d1:d9:8b:
dd:9c:ee:89:e9:e5:18:df:12:d0:57:3e:d4:ee:8f:81:4c:e2:
f2:3d:5f:e5:c8:f9:b6:af:1c:43:f8:61:23:5d:a3:a5:6a:9c:
f6:46:a7:51:29:95:9c:96:e3:8a:c0:e5:01:41:8a:44:59:6c:
fb:c2:b0:b0:6a:c9:51:80:c0:8a:f8:c9:d1:a8:2f:75:49:9c:
f8:08:cc:6b:cc:3c:8e:f2:0a:90:3b:c4:1b:dd:1f:8f:6c:bf:
8a:0c:a1:1a:0d:05:cf:0c:1b:df:82:7a:a7:61:e2:86:2f:a0:
66:01:a3:4a:ae:24:4d:29:59:54:57:5e:b9:cd:59:9f:0d:e6:
02:09:e8:6f:26:f6:bf:87:5b:f3:dc:1a:28:17:be:b9:8a:22:
b2:a2:19:fa:48:fa:d9:81:27:48:40:03:ac:df:a0:d3:13:db:
f6:20:e0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:59:07 2025 by rpki-client