Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
File: A5aaE8t8Nxi9NxdxJijnqxszsKU.mft (raw, json)
Hash identifier: ezfVjEfJ2/DFsUt2TDMngG/5iy5Bexig6wQMbGfKyGQ=
Subject key identifier: 41:69:F7:4F:06:D1:08:5B:DE:03:58:8C:6B:0A:EB:66:07:3B:15:47
Authority key identifier: 03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
Certificate issuer: /CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Certificate serial: 019699AB3914044A1CE220009846C72C897D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
Manifest number: 094F
Signing time: Sun 04 May 2025 05:00:57 +0000
Manifest this update: Sun 04 May 2025 05:00:57 +0000
Manifest next update: Mon 05 May 2025 05:00:57 +0000
Files and hashes: 1: A5aaE8t8Nxi9NxdxJijnqxszsKU.crl (hash: 7vRXAjSNbkKOaV2O+3sEeYIUp4IAQo+/UqqgLI01jUQ=)
2: MK6Wt26ubZnx8uPGofYFajPlEuM.roa (hash: pNoc6zxMnN0pQF1kB42eiM3UzngOuAJOl2Ggh4EWIBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:ab:39:14:04:4a:1c:e2:20:00:98:46:c7:2c:89:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Validity
Not Before: May 4 05:00:57 2025 GMT
Not After : May 5 05:00:57 2025 GMT
Subject: CN=4169f74f06d1085bde03588c6b0aeb66073b1547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:a6:2f:2f:d4:28:39:80:ff:bd:69:d3:24:
ab:d1:99:47:cd:8f:72:af:d4:00:31:44:8d:50:32:
72:7e:5d:16:7f:a1:b3:8c:98:a5:c3:9a:04:a1:d3:
cd:b1:8e:f4:86:b4:45:0f:a1:2c:d4:e9:62:5e:3c:
b3:c9:10:a8:15:9a:47:6d:c5:3d:d1:a5:71:f2:02:
75:a9:54:a2:2b:a0:98:de:dc:9d:88:15:d5:a5:e6:
e4:30:8f:7a:18:2d:4d:10:f6:38:87:21:4c:d3:f7:
3b:49:bb:cd:3a:e8:f6:05:e2:18:75:28:02:2e:85:
33:06:6f:35:ed:53:b8:af:4d:cd:76:81:d2:4a:67:
8c:f0:5a:d1:df:11:4b:79:5c:bd:2b:9f:2d:d6:90:
32:07:ed:37:35:74:6f:94:1e:c3:3b:8b:ba:09:38:
e6:a4:cf:fa:80:19:eb:96:41:0d:ce:f0:42:6b:4f:
1a:97:ea:9f:c3:00:e9:e1:be:d8:ba:f3:f5:7e:1b:
29:6e:d9:10:cd:24:c6:39:05:a9:81:36:c6:be:38:
00:5e:c2:8d:20:f9:65:ba:84:4b:34:d2:89:79:05:
c5:75:ce:1d:10:87:a2:e1:73:0c:a6:84:37:75:a5:
30:05:e9:ee:15:73:78:a9:52:76:4c:9c:18:d1:ff:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:69:F7:4F:06:D1:08:5B:DE:03:58:8C:6B:0A:EB:66:07:3B:15:47
X509v3 Authority Key Identifier:
keyid:03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b6:1d:b8:dd:2b:25:09:57:75:df:88:38:e0:2c:9d:70:84:
e3:92:c5:59:55:ad:7c:28:78:98:09:a3:c9:6e:cb:23:60:51:
83:bd:e4:59:a4:72:cc:e1:c6:d8:07:5a:c9:ad:46:88:b4:ff:
7e:f9:99:4b:5f:87:41:88:86:1f:54:4d:e2:ee:cb:d0:f5:a7:
5a:60:25:f6:68:3c:88:3a:97:6d:dc:00:34:54:bc:e4:f2:42:
1e:04:3e:a7:9e:4a:47:a0:7b:31:38:01:fe:d1:5a:4f:21:b4:
9c:d6:14:77:e3:3e:c9:b6:30:95:a0:43:05:c3:87:c7:35:7c:
95:ee:1f:21:64:ec:5e:25:60:1d:e6:6a:40:89:99:32:01:66:
81:31:fb:f2:2c:57:25:5b:fe:65:75:a8:a3:52:03:bd:ae:5a:
85:0b:c5:d0:cd:48:d5:26:04:2c:3a:d6:8e:d8:ee:55:06:f9:
71:04:7e:3a:e6:72:d8:5e:ec:ce:33:36:b6:42:51:45:31:09:
7d:65:17:39:31:f8:b3:9a:d3:55:39:0d:67:87:04:84:75:79:
61:3d:54:33:ff:ed:81:06:90:fd:29:6d:4d:32:17:32:a6:d3:
5f:63:e0:83:82:4f:fe:49:1e:3c:83:67:ca:7b:80:17:c8:5b:
7d:4d:18:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:49:20 2025 by rpki-client