Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File: AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier: +8Gs5/B3gEByBWCac+jIklSSH280dRP3tusp2GwNeCU=
Subject key identifier: DD:26:0C:60:96:0B:A8:AA:E2:E1:FE:04:81:28:3B:48:BD:31:14:B3
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 01968436018B63887BC874FA9E2DE73D1C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number: 151A
Signing time: Wed 30 Apr 2025 01:00:53 +0000
Manifest this update: Wed 30 Apr 2025 01:00:53 +0000
Manifest next update: Thu 01 May 2025 01:00:53 +0000
Files and hashes: 1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: 6OtWoUMQsaaZwqtdzLpdktwoU1hPqIW3Fz9dUlU+znE=)
2: fudoZ6TJp9dp16Pww5r5a49f_qw.roa (hash: WSDqUxIZJlZyyACmY/UreISdxVZNSP6rtPlIwpgLS+I=)
3: glbAf6IutJeA1wA9zcIVkw-1mp0.roa (hash: ESJ6dYFBwvP8YpbvVt0/saN/BWXL7V+r0E/HCTFScAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:36:01:8b:63:88:7b:c8:74:fa:9e:2d:e7:3d:1c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Apr 30 01:00:53 2025 GMT
Not After : May 1 01:00:53 2025 GMT
Subject: CN=dd260c60960ba8aae2e1fe0481283b48bd3114b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:50:59:a9:bc:18:cb:01:49:95:cc:e9:c5:
d8:50:15:ec:02:67:85:b5:37:6e:1b:f1:ff:7b:df:
ac:a2:00:c8:43:f7:6d:30:bf:38:cd:ed:b6:54:9d:
d6:d3:cc:89:73:45:36:b3:4b:67:f7:14:fe:2d:09:
05:a9:ff:75:17:64:25:90:ef:f0:2c:56:5f:83:9f:
1e:08:fe:c7:0c:9f:60:de:6f:d8:6a:72:a8:34:81:
67:08:48:1e:d8:b2:17:a8:99:f3:e8:3f:27:d4:6b:
bb:70:f1:0f:f6:d1:94:79:d4:b7:ad:bf:5d:03:fb:
0a:16:14:56:bb:ce:43:05:b0:e1:0d:2b:75:66:09:
82:36:23:84:b7:82:36:01:7f:11:90:7f:a2:f3:19:
f9:2e:b0:3c:41:a1:5d:b8:80:f0:f0:cf:10:e7:f5:
ef:45:2e:9a:72:84:3a:4d:d0:b4:6f:0f:13:00:3b:
b6:df:64:ad:d3:22:2a:8c:00:9b:b5:63:b1:96:a7:
79:7c:47:fa:6a:83:dc:2e:00:b7:d9:46:59:52:bd:
e9:59:70:02:e0:29:38:73:6c:98:25:ec:da:71:83:
6e:21:1b:31:ee:a3:8c:b8:4e:0b:e8:ab:00:98:f2:
4e:14:f2:c6:e4:9e:3a:6c:e4:4c:c3:7b:14:0e:a5:
6b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:26:0C:60:96:0B:A8:AA:E2:E1:FE:04:81:28:3B:48:BD:31:14:B3
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:54:e6:17:82:9f:df:14:c4:17:96:87:1d:0c:13:0e:04:1e:
ea:20:69:1e:cd:1e:a9:d2:84:4c:ff:0d:07:b6:e9:c7:a7:cc:
1f:4c:01:c8:1d:db:3c:cf:8e:13:a9:d2:5b:fe:75:a2:79:af:
4b:b8:32:9a:c2:e2:fd:68:14:91:50:ae:e6:dd:6c:2b:57:ee:
58:96:31:2a:b5:5a:7f:2d:16:e9:31:d6:e9:72:46:a4:fa:c6:
fb:25:e8:82:fe:6e:cb:fd:c8:c9:67:9c:8d:c5:7f:bf:3a:ae:
41:64:7e:fc:b5:94:06:49:76:f9:c7:e6:83:c4:36:b4:dc:03:
a4:21:c6:83:3f:9e:43:b5:f7:98:4e:80:fb:42:97:2f:cd:10:
f4:1a:d1:78:ed:2a:09:8e:98:fc:c0:a2:97:7c:22:cb:3a:62:
1a:7f:04:19:13:28:93:3b:ca:80:98:06:a7:e4:b5:15:76:14:
ec:36:45:f0:35:05:5d:4b:0c:7d:0d:9d:ae:53:45:dc:fc:09:
2a:c4:8f:ed:cf:c2:5c:9b:18:e2:91:cf:95:3f:ff:b7:73:6d:
6a:20:6e:86:28:41:85:a7:92:41:98:72:19:6e:23:7e:32:b1:
fc:ae:07:60:94:25:62:e4:68:e1:fe:21:52:4f:56:8f:6d:78:
fd:75:a4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:34:34 2025 by rpki-client