Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
File: 0aiWnX4yy_knZkstxDa5bnFJpis.mft (raw, json)
Hash identifier: sIREe9+yYJcxKEOV66tnG23WY8J/uaQHlD9EfiEQBpk=
Subject key identifier: A6:11:70:62:4D:A6:29:6C:81:BC:E3:BE:13:BA:0D:80:38:2D:01:C6
Authority key identifier: D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B
Certificate issuer: /CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b
Certificate serial: 01968E15030F427D578ED7128F75D81F3DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
Manifest number: 0E52
Signing time: Thu 01 May 2025 23:01:03 +0000
Manifest this update: Thu 01 May 2025 23:01:03 +0000
Manifest next update: Fri 02 May 2025 23:01:03 +0000
Files and hashes: 1: 0aiWnX4yy_knZkstxDa5bnFJpis.crl (hash: d/2cpUn9V0+WPxhtdnQDI6Jn94vXGPrbuPFFvFk5qf0=)
2: p1fyn5poKGi3v6udklaZLK6DaPs.roa (hash: ksuBLRSUua1zFmd4JmcnhcAsP8MWyD8OR/dcK6d/pkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:15:03:0f:42:7d:57:8e:d7:12:8f:75:d8:1f:3d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b
Validity
Not Before: May 1 23:01:03 2025 GMT
Not After : May 2 23:01:03 2025 GMT
Subject: CN=a61170624da6296c81bce3be13ba0d80382d01c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:4e:96:4e:cb:ba:70:3e:8d:14:e8:78:7d:
a9:79:da:dd:7b:d0:77:c4:fe:9c:f3:06:9f:89:53:
49:e4:d9:28:30:45:61:f0:11:3a:c4:4f:f4:c5:fe:
39:06:11:ec:10:9e:8d:8c:eb:59:d0:0b:b9:ec:57:
d6:df:2e:5d:56:49:b5:48:af:dd:c3:85:de:12:2f:
bf:73:a2:7d:15:ea:49:39:51:0e:e9:92:53:85:2d:
13:17:31:f9:46:2f:6c:62:29:63:1c:c4:a1:73:8f:
8b:76:49:83:84:6d:70:98:d6:4a:b4:6e:f5:63:40:
6d:d9:13:68:9f:3c:63:fb:b8:a1:a7:a5:9c:57:8a:
d2:f1:67:5f:bf:86:f7:a6:6d:9b:77:f3:d3:fe:6c:
69:4d:8c:c6:31:94:21:6a:cd:9b:80:6f:8e:3a:4b:
64:0b:28:da:19:b7:62:86:11:46:e2:e7:aa:39:5a:
05:e3:97:e0:6a:37:e7:8d:6e:cb:90:55:8b:5f:1f:
b0:88:32:5c:87:8d:98:7b:cc:35:ab:a1:43:10:bc:
f7:49:d6:ee:20:d1:71:83:ac:08:66:7f:1a:d4:21:
79:6c:bb:91:a1:60:a5:a1:ce:0f:33:4d:10:77:79:
05:de:12:7f:24:aa:84:fa:ca:50:3e:57:fb:3f:67:
21:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:11:70:62:4D:A6:29:6C:81:BC:E3:BE:13:BA:0D:80:38:2D:01:C6
X509v3 Authority Key Identifier:
keyid:D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:86:72:f6:ba:95:b9:e8:59:3a:bf:38:26:8c:e5:33:1c:98:
7f:80:4a:2d:e9:b5:43:30:de:18:9e:49:e5:bb:e6:57:93:33:
27:e0:e8:80:b2:04:cb:ee:1e:b2:ad:7c:77:d1:25:2c:38:56:
e7:7d:9d:b5:9d:43:2e:1b:e8:0b:47:7b:cc:13:10:9f:63:8d:
8b:93:35:fb:53:c9:14:24:6d:64:0c:0f:dc:ce:6b:6c:a3:64:
9f:74:87:1f:a5:ec:4a:a0:cf:34:2b:32:65:de:b4:a1:95:4b:
66:36:43:b2:23:33:fd:c4:4f:8f:49:35:34:1a:77:2a:f0:5e:
3f:1c:21:76:c4:9b:5b:f7:8b:62:04:f4:de:b6:e4:fb:c6:06:
6c:c6:3e:1c:ee:f4:75:98:55:0a:61:f5:08:ec:c2:79:bf:50:
9a:d9:4b:8e:33:c5:d5:e6:bd:12:b0:83:28:c9:b4:4a:32:9e:
53:a4:6c:e6:83:4d:b2:13:17:60:48:7f:20:81:73:12:fb:b9:
df:cb:09:d4:e7:e2:8d:04:1e:ba:92:92:ed:b9:9b:44:b4:97:
9b:86:24:8e:ab:1f:ab:82:7d:7e:25:6e:40:e5:85:3b:4e:cf:
39:a8:12:9f:f6:9f:32:db:ff:df:6d:a3:35:e3:5d:b4:24:82:
c5:0d:72:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:01:13 2025 by rpki-client