Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
File: AahezixTn1hQ-nAfLUWiEn3IZ1U.mft (raw, json)
Hash identifier: LfCSFYvoqDWzlf+9s9DaqAAG+7TI9173/VKHsGxzBEo=
Subject key identifier: 25:02:D2:75:55:14:C1:51:50:4C:D2:E4:84:46:98:FB:70:8D:C1:4F
Authority key identifier: 01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
Certificate issuer: /CN=01a85ece2c539f5850fa701f2d45a2127dc86755
Certificate serial: 0196760C3A98940BBD552CA70A2A1A27BFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
Manifest number: 07B4
Signing time: Sun 27 Apr 2025 07:00:34 +0000
Manifest this update: Sun 27 Apr 2025 07:00:34 +0000
Manifest next update: Mon 28 Apr 2025 07:00:34 +0000
Files and hashes: 1: 1YtqoFQLtfGDiVmHDelz4DRg3EU.roa (hash: IK9E4boh47Pzwtuw3Las8hTZNUl+rwA5t6hlkkr2bx4=)
2: AahezixTn1hQ-nAfLUWiEn3IZ1U.crl (hash: X76X0Lo7xlOC5A5Ps7hCDbgFcNu0jni0PNxoHOzpZY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:3a:98:94:0b:bd:55:2c:a7:0a:2a:1a:27:bf:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a85ece2c539f5850fa701f2d45a2127dc86755
Validity
Not Before: Apr 27 07:00:34 2025 GMT
Not After : Apr 28 07:00:34 2025 GMT
Subject: CN=2502d2755514c151504cd2e4844698fb708dc14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:16:d6:fe:d1:59:ef:41:80:09:d2:5d:ad:
00:4b:3c:f9:73:a1:e0:63:aa:70:a6:d7:d7:22:df:
47:7a:8c:ad:b9:47:18:7f:72:cd:86:04:f8:63:4c:
f3:4c:30:61:04:dd:98:27:8b:4c:49:d5:87:0d:68:
13:41:d0:4a:8d:8f:94:f2:13:1c:d6:7a:03:5b:10:
a4:85:3b:52:48:ea:48:a7:7b:cd:69:c4:0d:b7:8b:
63:c8:b9:76:86:b1:4b:cd:f5:1f:39:31:90:d4:40:
72:e6:b7:c3:8b:f2:d2:e7:3f:da:75:e8:4f:20:d9:
d3:a3:9f:fa:7a:07:97:9f:95:ca:dd:e8:80:30:60:
d3:33:5f:e6:96:8b:1d:f1:ba:95:46:6f:23:0f:33:
07:e9:ea:e5:9e:66:f9:a4:96:71:9d:19:26:c2:5f:
02:13:87:3b:02:28:4c:d2:0e:2b:c3:ae:63:13:d9:
95:9a:3f:b2:f9:af:89:e1:67:52:a9:9a:0e:2c:67:
4f:ff:54:ac:70:ad:40:21:e3:52:d7:de:67:30:a9:
8c:0a:39:22:03:cd:39:cf:a7:a2:ef:56:0f:e9:e3:
71:eb:43:b1:ed:1e:9c:9c:f2:91:e8:d8:a9:5a:9c:
b8:89:50:9a:b6:38:42:ac:ef:eb:8c:84:24:de:f7:
33:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:02:D2:75:55:14:C1:51:50:4C:D2:E4:84:46:98:FB:70:8D:C1:4F
X509v3 Authority Key Identifier:
keyid:01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9d:1a:7e:3a:ae:0b:79:7d:6d:d7:62:85:0b:82:4a:34:5a:
6b:54:44:28:66:69:4c:28:55:b2:ac:8f:1c:04:60:08:42:63:
37:92:db:2d:ce:16:26:5c:20:81:16:a9:86:c3:1c:39:7d:a0:
08:5d:33:71:9f:d3:7f:12:00:23:68:6f:8e:a6:d1:f2:a1:0d:
e4:dc:cf:b9:33:0c:2b:2f:85:af:98:71:b3:91:ab:0e:d7:67:
a1:b6:28:fc:bc:2e:dc:cf:05:22:d4:62:d1:db:7d:93:67:18:
19:79:88:f9:c5:be:02:08:4a:c6:d8:13:39:85:b8:28:35:01:
e0:81:08:80:30:54:4d:52:f8:9b:9e:87:cb:3e:c0:a3:b9:b1:
ca:4a:8b:f6:31:4a:33:66:d6:4c:86:07:64:02:03:b4:04:d4:
03:9f:50:8f:8a:1b:68:f8:ae:92:7d:12:8d:02:1d:24:27:e0:
72:b9:bc:69:5c:c2:bf:f8:0c:a7:ab:a1:a7:d4:80:11:13:36:
46:f2:06:fd:39:04:91:fd:8f:c2:90:d6:74:36:df:23:da:2a:
cd:59:17:0f:d2:1e:53:51:45:08:d4:58:40:32:dc:2c:03:7d:
2e:a4:d6:66:b5:57:25:e6:83:a4:18:be:49:c3:04:cb:46:f4:
ff:11:71:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:39 2025 by rpki-client