Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
File: aQetffrtuWAyDtF0BxUki4lasIQ.mft (raw, json)
Hash identifier: 8UDM/ZxYggeJfrn4sgmrGZFQRByvDuNZJ9xYfDBICqc=
Subject key identifier: AE:97:76:22:50:C5:1A:7B:40:78:37:70:88:DA:5E:83:18:55:56:3E
Authority key identifier: 69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84
Certificate issuer: /CN=6907ad7dfaedb960320ed1740715248b895ab084
Certificate serial: 0196767A421E6391D3C3F8AEDEA962191D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
Manifest number: 0391
Signing time: Sun 27 Apr 2025 09:00:45 +0000
Manifest this update: Sun 27 Apr 2025 09:00:45 +0000
Manifest next update: Mon 28 Apr 2025 09:00:45 +0000
Files and hashes: 1: aQetffrtuWAyDtF0BxUki4lasIQ.crl (hash: Hpyq1taGU5z1b23qtRan0zIJoY1G0JOtN+aU7Onj7Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:42:1e:63:91:d3:c3:f8:ae:de:a9:62:19:1d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6907ad7dfaedb960320ed1740715248b895ab084
Validity
Not Before: Apr 27 09:00:45 2025 GMT
Not After : Apr 28 09:00:45 2025 GMT
Subject: CN=ae97762250c51a7b4078377088da5e831855563e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:f0:b4:6f:5e:f8:98:15:99:53:0e:e5:a2:
93:48:9d:43:5f:bc:69:6b:2a:92:cd:c3:c3:30:36:
e2:8f:5f:1b:fa:06:da:b4:48:ce:dc:40:f3:c6:8a:
06:2b:90:b5:86:80:f5:70:22:bb:72:b9:c2:8e:11:
ff:57:ae:3c:5a:cc:29:49:68:f7:af:08:52:4b:36:
f3:9b:b4:39:d3:65:09:c4:d0:a8:00:60:b4:58:04:
d4:01:73:7b:90:e2:9a:ed:8c:30:24:ff:47:42:ff:
d5:21:38:31:1a:34:67:23:cb:66:49:92:ce:c8:56:
66:38:f1:3b:9a:8d:aa:56:0e:f8:a6:e2:8e:a3:a7:
f6:48:50:dd:60:fe:ac:ba:1a:8e:5e:fd:e5:ec:23:
e5:cf:15:a3:75:1a:28:1d:0d:16:a3:0b:23:80:b3:
1f:a5:8c:8c:b6:41:20:70:d2:5a:75:7b:ad:ea:93:
d6:fa:ee:90:6b:54:58:16:e1:43:c3:39:d8:52:17:
43:84:ee:b1:ec:0c:c3:83:7a:db:cd:de:43:35:f1:
22:ff:66:37:ea:ec:fd:91:9c:4e:ed:0c:73:45:6e:
ef:a2:92:d9:e8:05:e1:82:d0:77:f7:df:05:94:41:
15:fb:02:f3:7c:d7:6f:8b:a2:5a:74:e2:be:ae:12:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:97:76:22:50:C5:1A:7B:40:78:37:70:88:DA:5E:83:18:55:56:3E
X509v3 Authority Key Identifier:
keyid:69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c4:28:f0:2c:80:b5:40:c1:d5:7b:a4:6e:4c:5d:6a:83:cb:
dd:fe:9a:c8:88:9e:00:e3:ff:2f:7b:05:36:04:b5:21:9b:eb:
1a:22:22:1c:92:5e:86:b7:88:d0:b8:16:9e:da:2a:90:30:54:
92:94:0a:5e:e9:e3:da:00:a2:3c:6e:42:c4:5a:7e:82:28:43:
36:d1:49:3f:f4:14:f5:b9:e5:6a:6d:df:28:d4:fd:75:1d:9b:
21:f9:74:b1:26:2b:78:a0:3c:fa:5b:5d:01:55:be:bb:b0:82:
be:a7:75:b4:a2:7b:79:22:05:bb:58:6a:c2:67:cc:35:08:7d:
10:89:bf:87:00:5f:13:de:09:67:cc:d9:ae:d9:c6:21:95:eb:
3b:70:29:14:1c:f9:4f:09:e7:fa:35:21:00:f7:ea:e1:be:a9:
a7:d6:a4:c8:41:68:3c:04:47:8d:04:64:c6:be:f7:4a:74:76:
b1:97:12:ba:d1:da:35:91:54:c0:bb:e5:f3:9b:0a:bd:55:4f:
b1:bf:b4:88:e7:5f:a3:9c:8d:76:99:93:98:bd:f8:73:51:2f:
32:85:d6:71:cd:10:56:ea:b8:6f:9e:27:4c:9d:c9:33:12:e8:
04:73:bc:b7:03:c3:14:03:12:cc:43:9d:4c:61:04:33:54:19:
c9:ca:4e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:35:28 2025 by rpki-client