Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
File: aqso6A3xrWqgQDFbhOMmqiOgQXw.mft (raw, json)
Hash identifier: 4v+e9uMe5DUHyX9KY0TgbbGCoq4BDUL36dZi/RNBS9Q=
Subject key identifier: 82:FE:FA:2A:E8:27:B9:FC:8E:23:16:31:6E:BE:60:F6:5E:89:F2:82
Authority key identifier: 6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
Certificate issuer: /CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Certificate serial: 019683FFA41198726100784815FCA00B7A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
Manifest number: 0680
Signing time: Wed 30 Apr 2025 00:01:31 +0000
Manifest this update: Wed 30 Apr 2025 00:01:31 +0000
Manifest next update: Thu 01 May 2025 00:01:31 +0000
Files and hashes: 1: aqso6A3xrWqgQDFbhOMmqiOgQXw.crl (hash: OVo42L4mNulzdbxeRIwRWsnJfgAb6Wm3quZwY+6qtE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:a4:11:98:72:61:00:78:48:15:fc:a0:0b:7a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Validity
Not Before: Apr 30 00:01:31 2025 GMT
Not After : May 1 00:01:31 2025 GMT
Subject: CN=82fefa2ae827b9fc8e2316316ebe60f65e89f282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:9c:3e:90:e0:9a:ab:85:f8:dc:f9:51:c0:
7b:78:b3:dd:bc:15:e2:34:d6:62:81:8b:b2:0e:3c:
28:cd:a6:9f:36:d2:21:26:ac:24:5f:fb:ee:7a:3b:
f9:0b:8c:37:fc:f2:b4:22:20:aa:88:5a:ac:55:67:
ba:ce:86:f5:2c:67:03:f2:c6:22:13:01:66:63:d7:
60:f9:c2:ea:b3:30:ff:fb:44:13:e2:04:11:a8:65:
8c:b2:26:be:ba:39:fa:64:37:6c:81:11:9b:e9:31:
d9:1a:4c:08:19:03:a9:3c:14:35:9b:16:76:d8:d3:
6b:44:47:4b:2f:84:c3:c4:d0:79:0c:37:85:63:85:
5f:c0:9f:54:d4:52:9e:21:f6:46:03:e8:f0:d3:47:
d5:f2:e4:b9:d2:6d:cb:f4:02:86:0b:43:c9:5b:56:
86:71:1a:ad:81:aa:1e:62:53:74:10:e4:73:1f:16:
bc:f6:e1:0d:97:b7:2c:8b:01:bc:50:2f:09:c6:38:
c3:e2:b5:3e:4f:e3:ec:5d:76:84:e2:c0:05:fb:a4:
e6:14:9d:af:ee:f0:c0:ea:b4:56:9d:89:7e:90:88:
ce:51:cd:26:b4:dc:c2:52:cd:9c:9b:a5:07:4b:ec:
69:f6:e0:c2:84:cb:ef:e0:dc:b9:5b:a8:1a:3e:0b:
fa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FE:FA:2A:E8:27:B9:FC:8E:23:16:31:6E:BE:60:F6:5E:89:F2:82
X509v3 Authority Key Identifier:
keyid:6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:08:be:63:1c:0d:f4:53:2d:92:1b:15:3d:c6:dd:b3:80:7c:
e1:2a:a2:67:b5:86:cd:f4:d5:e6:c5:a6:95:b2:07:9a:1f:e5:
90:bc:26:d5:c4:47:6e:35:b6:f8:e0:d6:64:26:29:b5:a6:4f:
ee:19:ff:fe:db:0b:76:06:f6:ed:48:fe:86:f4:46:08:89:e1:
e0:59:44:5b:7f:ae:ef:58:ac:7a:31:34:0c:7d:6f:29:f9:8b:
fd:54:df:b9:40:82:8b:ef:08:fc:35:48:27:a4:3d:c7:20:e3:
10:66:bc:4d:58:04:1d:b4:47:00:22:2c:02:0e:93:64:1c:1a:
dc:43:b7:91:33:cd:83:ba:a3:d5:36:b3:29:e9:a2:17:9d:b6:
3c:99:c7:54:95:62:ce:50:a4:ce:8c:c2:ad:c0:26:13:4e:69:
9f:7b:3b:7e:4d:3c:10:e4:d6:aa:89:22:d2:22:4f:39:3c:05:
c4:e1:07:84:ba:a9:87:3c:a6:d8:71:ba:09:d5:09:35:68:92:
e9:8a:67:46:8f:ed:f5:97:dc:9b:4c:f9:15:85:36:b6:15:1c:
c5:da:a9:5a:f9:cd:6a:59:d5:fa:47:0b:00:9d:d2:65:6c:bb:
24:c7:d0:ee:61:d9:17:e5:0d:f5:9f:2a:fb:8d:6d:64:af:de:
cd:0a:13:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:14:51 2025 by rpki-client