Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
File: aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft (raw, json)
Hash identifier: LbMHH4trD658MoDVBblGymZxfDVBFw034dfsEfPL8ak=
Subject key identifier: CB:69:70:ED:F0:22:B1:B8:45:BB:CC:F5:9D:40:75:32:29:AC:48:4D
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 01967378CCB1E8B0401DC151A1DA306C4B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
Manifest number: 03FB
Signing time: Sat 26 Apr 2025 19:00:18 +0000
Manifest this update: Sat 26 Apr 2025 19:00:18 +0000
Manifest next update: Sun 27 Apr 2025 19:00:18 +0000
Files and hashes: 1: 1-7Y0vxgGjFDrArJxbSZiKPHjpLI.roa (hash: bOO4FlKJWXEQJjLmaOoP7m2UMLj2WLiNGPSaCEd5lyU=)
2: aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl (hash: wo7xsP9p5BElNKFR0gJzFzlQba8W1wM4oGT+GyPG5k4=)
3: fxSPTs_KrZKa-NlCbE6u4smq6IQ.roa (hash: 9pMUqI23+lfSB11w0dNCq2uY/O6yUaZq0tlanY1cD7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:78:cc:b1:e8:b0:40:1d:c1:51:a1:da:30:6c:4b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: Apr 26 19:00:18 2025 GMT
Not After : Apr 27 19:00:18 2025 GMT
Subject: CN=cb6970edf022b1b845bbccf59d40753229ac484d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:52:52:8b:4a:49:d0:db:08:0a:b2:6d:b5:
11:0d:c8:8d:97:e0:0b:25:4f:9b:d1:1a:4e:54:90:
aa:3c:d7:24:7d:dc:5b:49:e2:55:2d:a0:6d:71:27:
65:97:db:5a:e0:dd:92:78:9e:f4:f2:6e:68:f1:69:
30:11:c3:a7:e6:be:66:2d:4c:dc:c8:19:0c:9a:49:
42:c2:a4:8b:e6:ac:d1:8f:61:35:0b:d0:ee:da:5a:
14:45:f5:2d:d0:fc:27:6f:f2:ea:c6:60:fc:a4:14:
21:81:5e:d0:ea:ff:f9:a3:a1:75:c7:98:e4:74:2e:
60:fb:2c:c4:28:67:e7:7a:ca:40:e1:00:a3:87:25:
d5:e8:89:11:b7:9a:56:68:e7:99:cf:bb:df:de:49:
f4:74:e6:d1:c7:cb:b5:da:be:48:cc:36:fe:6c:00:
89:3f:2b:a8:13:42:be:e4:57:90:0f:30:b0:38:85:
5d:f0:68:e1:f6:87:15:c9:6b:8f:8f:96:09:fb:75:
f7:e1:d3:66:ed:e9:4a:95:f4:79:bb:53:96:cc:f5:
62:90:18:dc:e7:08:5f:78:e6:1e:10:a8:fb:32:e5:
f8:62:e7:8e:58:92:8c:32:05:a1:50:3c:0a:ea:93:
6d:1c:ac:35:46:45:1b:5b:b1:9a:06:7d:ad:ce:14:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:69:70:ED:F0:22:B1:B8:45:BB:CC:F5:9D:40:75:32:29:AC:48:4D
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:cb:bf:39:5f:20:fe:5f:b4:b7:98:61:8d:65:18:3c:85:e7:
24:c7:03:d1:68:66:78:c5:3f:44:2c:8d:78:60:7c:38:c5:52:
bd:c5:5f:03:cb:e8:ce:a0:35:2e:f9:25:d5:4f:57:82:3d:0e:
e2:35:ac:48:5c:87:34:47:c5:d4:22:01:3a:23:46:2f:64:ca:
d6:5d:54:5c:b1:38:28:86:d2:00:ed:c8:70:24:4d:d8:1c:a2:
56:e2:87:e0:43:f4:87:a7:bc:22:d1:dc:96:5e:13:e0:55:f5:
63:20:e2:f2:f4:e3:c1:f8:78:ee:82:fc:dc:5b:71:75:6e:6e:
67:87:b3:9d:c2:e0:80:06:8d:59:da:e5:9f:e4:74:a8:cd:3f:
c4:e5:5f:09:d0:76:7a:75:fd:9a:95:a7:80:f4:87:99:a6:fe:
fd:ce:09:57:da:b9:ec:0e:57:8b:f1:59:67:fe:bc:68:18:0a:
bc:aa:b3:ba:cf:d2:26:fd:4e:bc:20:83:d6:c3:f6:76:dc:ed:
df:50:fd:c0:6e:9f:00:b5:ed:69:49:86:97:62:dc:69:fe:08:
2d:ee:26:39:20:68:c0:6a:e8:a1:d3:de:ad:e3:60:22:30:33:
c8:fd:04:21:c0:fa:99:3c:2e:e2:04:23:f8:00:54:ee:0f:6d:
a0:74:fa:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:29:17 2025 by rpki-client