Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
File: aFeXIsOgywwzUcWV36PX6tgfFr8.mft (raw, json)
Hash identifier: k8m0VnTXB3iKmAZe0ukYUWolzOsMppJAanrLizRl7nU=
Subject key identifier: 7F:60:75:53:45:D0:99:CD:A1:88:AC:89:50:B5:F7:23:3C:B8:8D:8A
Authority key identifier: 68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
Certificate issuer: /CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Certificate serial: 019682474F6FEB5DD9CCAAAA5ACCE73F4279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
Manifest number: 151B
Signing time: Tue 29 Apr 2025 16:00:33 +0000
Manifest this update: Tue 29 Apr 2025 16:00:33 +0000
Manifest next update: Wed 30 Apr 2025 16:00:33 +0000
Files and hashes: 1: 5kpPrp0PsQaLwN-0f4M5ORyJaIo.roa (hash: sRLtBcmB7NMgyGt87xrsnTDd/kvjgxEDyhMytt8u1mY=)
2: aFeXIsOgywwzUcWV36PX6tgfFr8.crl (hash: DjnXAwHQ3yfG5iP20JcmOUa9eKOWHwEuV8z2cl1lqM0=)
3: gAJowYToxXMF7RF5vvsMOYJumzQ.roa (hash: YtzVb80baHUBbI1OM11pUhHuNDyKujzR+uDb+twlqdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:4f:6f:eb:5d:d9:cc:aa:aa:5a:cc:e7:3f:42:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68579722c3a0cb0c3351c595dfa3d7ead81f16bf
Validity
Not Before: Apr 29 16:00:33 2025 GMT
Not After : Apr 30 16:00:33 2025 GMT
Subject: CN=7f60755345d099cda188ac8950b5f7233cb88d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:d7:a6:a9:f8:f6:3d:51:95:4f:10:75:78:
01:ed:d1:69:7d:55:d4:d5:6d:1b:d2:bd:fb:2e:24:
a0:ed:3d:38:56:8c:b2:ba:02:c1:66:c1:c5:94:90:
92:64:4f:b8:18:f5:4b:4c:be:91:89:b0:3d:52:36:
4c:00:4c:c6:b3:3b:8e:87:af:9e:da:c0:9d:47:3b:
49:cd:33:8b:33:a2:87:8c:14:7b:42:53:9a:ca:58:
a9:02:ba:56:47:27:9f:35:b7:82:15:79:da:d7:10:
36:47:da:11:c3:87:72:b5:0b:2e:2b:79:82:18:bb:
91:c9:0c:69:c6:a3:ff:f7:d0:0a:e6:cf:6d:13:98:
00:7f:21:fa:36:a7:75:81:ea:2a:d3:8c:5a:e4:4d:
bb:93:2d:9f:78:55:7f:4d:79:a5:7d:39:48:bc:c4:
ed:6e:21:80:ff:e4:e8:2d:ca:ef:f7:47:13:d7:f0:
de:da:a6:91:76:5a:38:68:d9:c3:b7:1d:03:ba:da:
d9:a3:ef:60:cb:32:f3:1e:7f:f0:49:24:c9:40:85:
54:8c:25:70:26:6d:45:54:70:83:1a:12:59:86:62:
4c:3a:74:02:c5:a3:4f:98:07:71:6c:e4:11:c4:2e:
e4:21:7d:8b:84:60:00:aa:52:7a:0b:99:88:94:dd:
e7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:60:75:53:45:D0:99:CD:A1:88:AC:89:50:B5:F7:23:3C:B8:8D:8A
X509v3 Authority Key Identifier:
keyid:68:57:97:22:C3:A0:CB:0C:33:51:C5:95:DF:A3:D7:EA:D8:1F:16:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFeXIsOgywwzUcWV36PX6tgfFr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/fa836c-1cd3-4ba7-b598-9f5597b56b76/1/aFeXIsOgywwzUcWV36PX6tgfFr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d8:3c:75:b0:4d:40:81:98:a7:e3:10:fd:2b:5e:fd:c6:e6:
42:6d:90:3a:09:19:fa:1b:41:35:2b:21:b9:e7:ef:be:bb:6b:
64:9e:f6:48:2f:de:f7:69:22:c3:17:8e:64:ed:98:75:c2:09:
6b:57:6d:d5:b5:16:45:54:65:09:d8:6e:12:f3:55:86:9d:87:
bd:bd:55:54:bd:21:17:0c:91:16:d6:ec:fe:62:64:fc:51:51:
c6:e9:07:33:b3:2c:9f:ab:0a:27:5f:1a:64:ff:de:47:5f:f8:
8b:13:5a:52:9e:2a:f9:de:3c:a9:31:2f:86:ce:13:4f:dd:1e:
e3:94:10:7d:3b:9f:29:f3:4d:f6:78:53:e9:73:08:94:dc:0b:
cc:08:86:70:4b:16:5a:a9:03:c1:86:05:1b:c8:7c:06:27:f2:
76:c8:6b:a5:49:c1:ff:be:6a:43:91:30:07:83:b2:69:7c:d9:
2e:be:df:d2:45:64:d3:e3:e8:62:5c:0f:7d:b6:4f:60:9f:76:
54:ae:10:84:79:c4:ee:04:d0:08:43:ef:3f:61:10:da:bc:9b:
8d:ac:7c:dd:a6:8b:3b:1f:da:d9:fb:49:ad:c0:67:f2:2b:48:
3a:16:d2:f3:eb:d2:ec:27:1b:1e:6f:0a:da:a5:01:78:29:87:
dc:a8:b4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:13:01 2025 by rpki-client