Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
File: AexQyzOuGGDUzF-2fkPTkwQiS08.mft (raw, json)
Hash identifier: JykDlPQl/1FCEWc/99ltgEgwmhxhvTc4XoHFpWqdIUQ=
Subject key identifier: 55:1F:AD:1C:A9:A0:8D:3E:44:7F:66:C2:D2:CB:98:E0:48:7C:20:E6
Authority key identifier: 01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
Certificate issuer: /CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Certificate serial: 01967F7D011F68B7D3444BB53A9B1BBFA525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 03:00:20 +0000
Manifest this update: Tue 29 Apr 2025 03:00:20 +0000
Manifest next update: Wed 30 Apr 2025 03:00:20 +0000
Files and hashes: 1: 8xuwdhGvmNX9MjR3WUx0PqC9jUc.roa (hash: p+ehqHvmDvZknC0O2O+zo8Q1VoLVTXJKDz/p25JgCzc=)
2: AexQyzOuGGDUzF-2fkPTkwQiS08.crl (hash: woAxkmB7NLRqe4dFckZP5NEBjacH3+v1ZEUKveuAI/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:01:1f:68:b7:d3:44:4b:b5:3a:9b:1b:bf:a5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ec50cb33ae1860d4cc5fb67e43d39304224b4f
Validity
Not Before: Apr 29 03:00:20 2025 GMT
Not After : Apr 30 03:00:20 2025 GMT
Subject: CN=551fad1ca9a08d3e447f66c2d2cb98e0487c20e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:6b:76:07:04:8e:18:71:f3:2b:d8:36:f5:
d5:18:f6:2d:f0:bd:b9:2b:9d:34:6a:d4:89:52:78:
f0:1a:58:6a:f3:ae:05:3a:01:bf:ea:19:d1:cd:f2:
2f:36:2f:6f:75:19:12:14:63:88:b9:a0:ad:2b:ee:
07:56:cd:fa:39:53:2f:45:36:de:70:41:e7:d6:26:
4e:05:cb:ed:a1:69:8a:fc:b1:55:38:fc:a2:41:5f:
37:e5:b8:89:c8:a9:d4:1a:ad:6a:db:35:bf:68:c2:
2b:d6:66:93:01:b5:99:14:6f:46:31:ee:d5:65:28:
49:37:5e:40:32:74:2b:8d:1c:f9:c8:cf:2b:8d:15:
70:ed:63:f8:7a:04:9c:e2:c4:d0:45:6c:23:f2:18:
df:69:5d:c6:44:ac:bc:c0:83:fe:c3:f1:89:f2:6b:
f0:fc:29:83:df:af:0f:62:54:d1:39:65:0f:38:43:
22:e7:f0:61:bd:9d:0b:d5:1c:c8:81:c4:7b:d2:45:
d0:d6:7d:bf:8b:28:03:f3:87:26:c9:f9:52:f3:87:
11:d6:d3:56:5f:be:06:05:45:45:66:6a:5a:f5:1b:
0e:89:20:66:89:13:e7:b2:5d:75:65:75:ac:8e:cf:
ee:ad:26:a4:3e:f5:1c:ed:c3:83:ac:34:69:b7:f5:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1F:AD:1C:A9:A0:8D:3E:44:7F:66:C2:D2:CB:98:E0:48:7C:20:E6
X509v3 Authority Key Identifier:
keyid:01:EC:50:CB:33:AE:18:60:D4:CC:5F:B6:7E:43:D3:93:04:22:4B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AexQyzOuGGDUzF-2fkPTkwQiS08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7f3cc9-6be9-40b2-8a14-130698a5959c/1/AexQyzOuGGDUzF-2fkPTkwQiS08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ab:7e:7e:7c:a7:e7:7c:c7:35:5c:95:05:a3:fc:08:3c:5a:
3d:a3:38:5d:cc:b0:2c:b5:06:2e:53:f5:a2:95:cf:fb:32:2d:
2b:cb:2d:4f:c2:d0:c5:b9:52:a4:ad:9a:81:15:3a:b2:a6:53:
99:ee:47:4e:f7:67:ca:22:bb:d2:e1:c1:ec:ad:65:7c:d4:05:
aa:98:c8:d9:a2:19:8b:f8:8b:d2:a4:41:4e:c4:15:1b:76:7b:
be:19:ab:e3:8c:c9:0a:0a:61:b7:ab:8e:f8:40:39:dd:6a:49:
38:6e:ee:32:ff:ea:25:1d:83:e5:ad:c1:f9:37:5d:6d:86:38:
9d:1e:69:f8:ff:6b:05:a8:7f:bf:41:e9:c5:d8:38:4a:95:40:
18:75:4f:4c:1d:5e:1d:6a:cc:b2:45:2f:06:08:a6:00:97:89:
4f:3a:eb:ad:84:03:27:d9:39:1c:5d:f2:b6:5c:3b:ae:4e:61:
d0:d6:05:24:e3:f9:58:ca:99:d1:8f:77:db:ab:60:03:cf:01:
10:96:3f:6d:66:2c:0b:0b:f4:5d:c0:95:58:79:59:27:23:e9:
93:9a:8f:92:9b:86:01:c7:d3:13:1e:c4:8e:0b:ba:dc:e7:24:
97:08:bd:cf:4e:93:72:24:cb:a6:bd:a0:6f:50:46:47:25:1e:
bf:15:2a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:00:47 2025 by rpki-client