Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
File: rrdjIcjUae47oCOSCzcszaXeng8.mft (raw, json)
Hash identifier: WV6H8/q0JFEcHFUwP9kewT9i/IcEylTYer2FaP9vzQ0=
Subject key identifier: BB:68:A4:FE:49:70:90:06:B4:55:3A:65:A8:89:CC:84:59:93:8B:77
Authority key identifier: AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
Certificate issuer: /CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Certificate serial: 019674C27BDD024A4AED10481D3151A55A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
Manifest number: 06B2
Signing time: Sun 27 Apr 2025 01:00:24 +0000
Manifest this update: Sun 27 Apr 2025 01:00:24 +0000
Manifest next update: Mon 28 Apr 2025 01:00:24 +0000
Files and hashes: 1: a9ofITqqYa60yp597jFNJiFfkDk.roa (hash: +VNpTQzKJJZj8EZ6senrGu1+xne4/xLouiN0wCmmxbU=)
2: rrdjIcjUae47oCOSCzcszaXeng8.crl (hash: syrd5myJgvzZHRlNrcL9njPMJnqBSfjMbqbFK5ZKKtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:7b:dd:02:4a:4a:ed:10:48:1d:31:51:a5:5a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Validity
Not Before: Apr 27 01:00:24 2025 GMT
Not After : Apr 28 01:00:24 2025 GMT
Subject: CN=bb68a4fe49709006b4553a65a889cc8459938b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:af:0d:8a:93:bc:51:10:4c:3e:50:5f:1c:
47:b9:6e:d2:39:86:29:95:65:e1:4f:70:e6:6f:e3:
d7:58:12:97:bf:ca:44:09:84:e2:d4:37:7c:bd:5b:
38:39:b6:ab:27:2b:08:dc:aa:b4:1f:01:35:e5:0b:
1d:e9:64:53:24:09:e4:a8:0d:19:e3:bd:79:27:80:
b6:0f:9c:8d:fd:10:d6:66:58:9b:41:10:f8:d1:e9:
74:e7:5f:69:d0:db:7d:3e:80:9e:95:4a:fd:76:29:
7c:16:54:2f:dd:60:95:95:7e:fb:dd:e9:cb:20:ea:
6e:ae:ac:5c:49:09:c6:48:85:0a:1e:7a:9c:08:5d:
53:6f:bf:82:75:61:84:fd:40:81:a3:8c:ad:84:35:
94:01:a3:43:84:10:1b:ab:b2:1c:d0:7d:84:19:e0:
e7:1d:67:12:7f:15:b8:79:f9:fd:b4:b9:7b:b0:a9:
36:c2:a3:45:af:b3:e8:3c:f6:a3:eb:aa:49:4f:6f:
9b:0d:82:ad:ea:c2:b4:51:e8:66:68:8b:de:cf:e7:
20:a8:35:44:7d:fe:85:d0:36:10:7c:0b:48:7e:1f:
0f:c6:24:52:74:15:7f:73:4c:0a:ee:1b:e5:60:e3:
54:59:ec:ae:7d:ff:c4:c9:fa:b0:59:70:c2:21:a5:
35:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:68:A4:FE:49:70:90:06:B4:55:3A:65:A8:89:CC:84:59:93:8B:77
X509v3 Authority Key Identifier:
keyid:AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8e:4f:ad:b8:ef:d1:67:f6:0f:e5:e3:d3:d3:3d:fe:6d:ad:
a9:f8:57:0f:5d:8e:e9:4e:27:9c:98:e4:b1:04:65:70:53:c9:
93:74:ac:7b:da:7e:90:4e:9d:54:c6:a3:ae:b5:0d:19:42:4c:
42:ec:ef:d8:41:03:15:93:eb:11:47:49:0c:14:4e:2b:5e:c1:
cd:f2:bb:2a:b7:9d:25:24:cb:a6:d2:2c:c8:9e:92:9b:37:0c:
e7:e5:67:28:b5:fa:ef:f6:39:55:df:79:94:8a:a7:bf:9a:a2:
07:9a:8e:e3:d9:9e:ad:d6:14:d2:b6:5e:a5:c8:09:fa:59:61:
c2:66:3c:9d:74:2f:38:46:2b:3a:f5:49:62:39:2c:5b:2b:7f:
f3:fb:81:e2:3b:6d:37:97:cc:da:9a:11:26:71:a0:84:bc:4a:
f6:e0:43:4c:30:2a:c6:9d:61:b8:81:dd:34:2e:94:85:d1:d6:
1b:af:54:f2:f2:4c:a2:a7:71:14:22:62:7f:e9:9f:d1:69:83:
8d:8f:1d:0b:cb:a8:3e:21:a7:5b:c3:28:d0:a9:a8:fc:2e:68:
6e:8e:92:36:f2:6a:61:46:4d:88:7b:09:e3:a0:54:aa:d5:da:
dd:99:f2:04:82:09:7e:ad:4a:a5:47:83:f0:6e:f9:cf:b9:c5:
a0:ea:2c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:51:02 2025 by rpki-client