Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
File: aTHX56mXSaOF6usn-FCridqPLuA.mft (raw, json)
Hash identifier: Ho1PI3dUSZFw0EdtQ/yNe/6rZFfLqwV3LHjyem2WmVE=
Subject key identifier: 0B:B0:19:74:08:94:D9:A3:4C:1D:86:15:F2:78:A7:79:A0:0C:D9:17
Authority key identifier: 69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0
Certificate issuer: /CN=6931d7e7a99749a385eaeb27f850ab89da8f2ee0
Certificate serial: 0196748BE5AFAA71C8EE2CD46AC241162078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
Manifest number: 044B
Signing time: Sun 27 Apr 2025 00:00:47 +0000
Manifest this update: Sun 27 Apr 2025 00:00:47 +0000
Manifest next update: Mon 28 Apr 2025 00:00:47 +0000
Files and hashes: 1: NluQuRsgOiFaIXTWt3y3rez6Bh4.roa (hash: JKkT06F430W2THw9Cv6TXAFRcJ7i7LHFoCLoKhmOqSc=)
2: aTHX56mXSaOF6usn-FCridqPLuA.crl (hash: yWvzdnFO2HANQ3sWp62+5/JOlaChQycvkGzu1GueDd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:e5:af:aa:71:c8:ee:2c:d4:6a:c2:41:16:20:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6931d7e7a99749a385eaeb27f850ab89da8f2ee0
Validity
Not Before: Apr 27 00:00:47 2025 GMT
Not After : Apr 28 00:00:47 2025 GMT
Subject: CN=0bb019740894d9a34c1d8615f278a779a00cd917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:48:54:0e:ef:c2:34:d7:f6:69:18:54:26:0b:
b1:01:ef:a5:92:c7:d2:bc:ce:2c:75:c2:7d:1b:eb:
46:25:01:9f:6b:bb:77:13:ba:60:14:db:83:ef:83:
52:1b:1d:b8:41:d0:06:55:6a:ee:9d:6e:d8:fc:35:
8a:38:41:91:9e:0e:2f:8a:c6:4a:81:c9:e9:4b:c4:
a4:cf:89:16:2e:f8:8c:00:90:27:2e:dc:b1:1f:7f:
21:f0:37:0c:0e:b3:90:50:54:2d:33:ab:a9:85:ac:
0f:ac:57:40:b9:be:aa:38:dc:b8:9c:79:c4:b0:b5:
57:bb:60:cb:30:1f:9f:68:ec:15:9b:d7:c7:ab:6e:
76:4f:93:44:a5:5e:6d:ac:97:b7:cb:e6:8f:02:24:
2a:11:e0:f8:d9:23:c2:1a:62:97:11:9e:1b:ae:39:
84:2e:7e:23:87:77:70:8f:c8:f1:3d:15:94:b8:ad:
2a:ae:2f:ea:19:d8:b0:ce:f7:9b:13:7c:e1:90:46:
c7:cf:2b:8f:71:81:b0:8f:80:dd:02:9a:97:b5:32:
32:6e:07:f1:4c:11:d0:7b:96:06:24:77:47:1f:e3:
98:df:62:0d:78:5d:ea:10:cf:61:b5:d5:30:e3:1c:
05:26:77:6c:f2:dc:50:c9:17:08:b6:b9:c8:01:e0:
32:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B0:19:74:08:94:D9:A3:4C:1D:86:15:F2:78:A7:79:A0:0C:D9:17
X509v3 Authority Key Identifier:
keyid:69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c2:f7:77:c8:f1:85:e4:e2:62:90:27:cd:25:64:65:41:ce:
22:96:11:cc:96:89:79:81:53:a9:f5:b7:6d:ef:a3:d0:fd:2f:
e3:59:02:37:a8:82:a7:ca:9b:6c:84:00:7d:c3:9d:d1:ee:05:
2a:c7:db:d4:00:37:86:5a:c3:b8:35:cb:2c:08:82:c6:c7:94:
79:14:e3:42:07:bc:82:80:67:7f:66:47:8e:d8:a2:a1:d3:f3:
a5:a9:e9:a3:01:43:3f:b7:2e:c3:1d:44:10:8d:03:8c:ef:b9:
7a:a8:63:c8:f8:c1:27:e1:cb:2c:8a:29:a0:64:f9:f9:7a:52:
16:9c:a9:40:c2:b8:f7:6a:92:b4:ea:a5:9c:b0:49:51:de:56:
cb:96:6b:16:5f:b8:d2:cf:db:96:6d:c6:8f:72:c9:d9:d2:f6:
13:df:62:65:0c:78:aa:71:d5:44:e3:34:b1:c0:2b:6f:b6:2a:
8b:6d:ea:6c:b8:be:1a:fb:0f:a0:93:bd:0a:45:3c:01:1e:62:
a5:46:5f:7a:9a:b1:24:d9:70:cd:32:54:16:71:2b:1b:76:80:
eb:e2:5e:e6:c7:6b:36:8d:0f:88:46:f7:11:47:69:2f:72:14:
e0:15:5b:d9:40:50:1f:2e:f4:ed:b9:4e:3d:aa:e2:43:1c:fc:
08:da:bb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:36 2025 by rpki-client