Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
File: aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft (raw, json)
Hash identifier: Uen9xFMbmXgY1Kloo2pcgCxhhb6Jfn6zxam5YXrhRiE=
Subject key identifier: AA:E1:44:54:6A:B1:2C:47:E1:66:95:CF:0C:1F:8E:84:EA:44:CB:C8
Authority key identifier: 69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
Certificate issuer: /CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Certificate serial: 0196767A03CE6AD4763FCEAC220D368E3184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
Manifest number: 0C23
Signing time: Sun 27 Apr 2025 09:00:29 +0000
Manifest this update: Sun 27 Apr 2025 09:00:29 +0000
Manifest next update: Mon 28 Apr 2025 09:00:29 +0000
Files and hashes: 1: aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl (hash: WXZ1IlssKHg5lbykEssydHFM1WP5GBziJ5pJJ5kI48k=)
2: jT8P4HyIvKh8r7FQFBaidUndh0Q.roa (hash: Wroxjw87hFNcZdv8/bJmsCuX0IjtBBcn8Xp1138BSK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:03:ce:6a:d4:76:3f:ce:ac:22:0d:36:8e:31:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Validity
Not Before: Apr 27 09:00:29 2025 GMT
Not After : Apr 28 09:00:29 2025 GMT
Subject: CN=aae144546ab12c47e16695cf0c1f8e84ea44cbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7a:ab:c0:84:ef:a5:29:a4:9e:e3:5e:9a:be:
d7:80:13:9f:84:df:a7:c8:44:42:10:15:80:0e:8a:
79:c5:d5:74:b1:de:be:1d:8b:a3:4f:19:46:a0:4e:
52:d7:62:d4:86:5b:b1:84:06:cc:66:04:56:7a:ec:
aa:ef:9b:57:87:94:ea:b4:4f:05:b5:22:ac:06:76:
96:39:ec:ac:12:e6:fd:8b:56:18:5a:da:b5:25:11:
20:d6:f1:6b:b8:e0:09:ca:08:7a:e1:78:72:57:e7:
1c:98:16:11:87:e2:59:3b:14:10:36:b5:90:de:29:
19:ce:bc:26:44:dd:fe:aa:64:d0:77:83:86:1c:11:
dc:dd:59:c7:c7:00:e3:1f:10:a9:05:dc:dc:14:16:
b6:2e:ad:b1:c8:1a:01:e1:96:3e:f1:cd:d7:2a:14:
17:49:e1:d6:b8:c6:b2:ad:f2:f8:57:cb:81:35:a7:
36:8f:77:44:1e:e7:7c:b2:0d:ed:da:a5:5c:81:53:
63:71:11:09:ab:f9:43:25:f6:ae:78:b7:75:60:71:
4d:b6:79:dc:50:64:44:ad:91:d6:2f:30:49:53:f4:
a7:96:ce:50:2a:bc:8b:09:24:a8:69:b8:81:a0:a8:
60:34:ed:1d:18:d7:03:6d:bf:93:26:66:2d:04:ff:
05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E1:44:54:6A:B1:2C:47:E1:66:95:CF:0C:1F:8E:84:EA:44:CB:C8
X509v3 Authority Key Identifier:
keyid:69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:09:0b:b1:8f:5f:14:c8:44:ab:31:d1:53:50:7a:38:e1:e8:
bc:71:0e:c2:2c:60:3c:2b:d5:7e:e7:8c:77:42:61:a3:f9:56:
27:2a:04:59:fd:07:63:48:5c:7e:9a:fd:4a:35:b9:b5:8a:1c:
bc:d2:d6:ab:71:0d:50:6a:42:3f:56:97:53:be:a9:ac:f4:ec:
ae:ea:52:00:1d:09:79:dd:e9:58:c8:d3:d5:70:cf:2f:82:1e:
e5:51:7f:3f:9c:27:43:35:5e:59:90:d2:1e:b7:d6:95:4c:c0:
aa:f5:c5:2d:94:ad:e1:24:ed:ee:aa:39:91:2d:14:5d:67:ed:
48:77:b1:91:6f:73:04:e0:07:2d:42:16:1f:f0:93:e8:fa:70:
42:5f:8a:e8:8d:36:05:3c:9b:54:cf:43:ef:a0:85:82:45:25:
74:d5:ef:04:81:1d:6d:52:ea:48:41:87:2e:d3:be:c4:a4:9d:
c5:3f:ae:46:9c:a6:5e:31:1c:0c:1b:b0:86:9c:13:a9:11:b6:
52:56:c2:ec:17:b1:10:c7:6f:52:c3:9e:18:f3:1b:3b:26:51:
21:8c:cf:d8:c6:38:91:23:b3:4c:2a:01:64:87:89:0e:dc:32:
03:ce:95:83:9b:06:5a:59:c2:76:cf:55:f6:fd:e9:ac:da:c4:
91:d0:cc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:18:30 2025 by rpki-client