Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
File: aVu9VCkSpm_uajQSijqM9wl9xps.mft (raw, json)
Hash identifier: y3Bi9dwbfCtZ67gbIIpCrWeD+LBidMFe93SdPimPKek=
Subject key identifier: F2:C3:2B:57:E3:1C:41:DF:51:80:86:3E:14:C9:8F:B5:42:83:2A:A7
Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
Certificate issuer: /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Certificate serial: 01968210B8BCD296677B26D84F24402B21FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
Manifest number: 052F
Signing time: Tue 29 Apr 2025 15:00:56 +0000
Manifest this update: Tue 29 Apr 2025 15:00:56 +0000
Manifest next update: Wed 30 Apr 2025 15:00:56 +0000
Files and hashes: 1: Ceq8ni5DLt6rfS2QOewOZADzIpY.roa (hash: sy82azLmDtvWPz93HHlbs3C4D4UnntFGcj5egr3ZE8c=)
2: aVu9VCkSpm_uajQSijqM9wl9xps.crl (hash: 4offNfVJge6s/PkfqlMZodAiOppHpcDv0d1sejDnELA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:b8:bc:d2:96:67:7b:26:d8:4f:24:40:2b:21:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Validity
Not Before: Apr 29 15:00:56 2025 GMT
Not After : Apr 30 15:00:56 2025 GMT
Subject: CN=f2c32b57e31c41df5180863e14c98fb542832aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:be:aa:36:9e:83:b5:af:d4:2b:99:6a:dd:
79:56:c5:51:57:74:3a:c5:e1:8d:1c:f0:58:01:67:
34:41:83:3f:9c:cc:09:7c:09:68:35:66:c4:b2:a0:
b9:e6:19:86:4e:72:63:64:1c:6b:08:1e:3c:7f:d5:
e4:66:1c:49:d5:58:c5:92:9e:96:80:03:52:f7:11:
53:88:15:1c:9b:56:bc:33:f1:12:13:c1:b2:62:84:
29:04:3d:b6:02:4a:21:9d:cb:f5:37:bf:db:43:c6:
bd:8f:49:e9:08:bb:9f:76:80:ef:82:5f:0e:cd:a9:
5a:b5:c7:09:b4:2c:66:51:ec:a4:18:c7:39:46:3f:
6d:f8:80:33:d7:b6:17:5e:3d:b5:06:41:41:52:5d:
f6:5c:b3:88:28:15:ef:4b:bb:1f:15:41:71:88:24:
06:40:a3:6f:f6:9d:d0:d8:ab:c8:12:34:e4:a9:c8:
24:d7:cd:63:04:a3:b9:55:46:3a:d4:51:16:92:c8:
a9:96:e6:f7:9a:b9:e6:a6:e2:01:49:ac:ba:98:46:
75:17:e9:c8:db:b1:9c:2e:59:92:3f:3f:b2:dc:f7:
1c:ce:e7:24:62:31:a0:bc:20:a7:21:9b:70:87:5e:
a8:f0:43:e4:52:21:f5:50:e7:d1:17:63:11:29:ab:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C3:2B:57:E3:1C:41:DF:51:80:86:3E:14:C9:8F:B5:42:83:2A:A7
X509v3 Authority Key Identifier:
keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:47:ed:8e:8a:d0:d7:06:2e:52:6a:99:aa:44:c5:d2:bf:ad:
c5:99:f1:30:d5:71:d8:0a:10:64:58:2a:71:86:ef:26:4a:0c:
94:92:27:b8:39:7f:79:49:4b:39:ca:4d:34:7e:72:65:f4:45:
df:71:46:f5:ae:99:36:0c:93:23:d2:99:48:08:80:65:2d:51:
ea:e8:cf:ec:c5:84:c0:4b:00:46:15:78:cd:c6:3d:2d:ae:2f:
8e:f8:08:da:c4:3a:c4:92:1a:fd:64:08:7b:0d:de:03:f5:5d:
f0:68:bd:c2:16:d6:cc:af:bc:90:1c:d1:34:fa:84:07:8d:a6:
b8:65:6d:77:b1:d5:51:b1:b7:1d:3c:10:81:7b:1f:39:4f:f9:
6c:e7:c9:7e:0f:2d:ea:12:c9:dd:82:c9:56:6e:ac:cb:43:f6:
70:24:4d:b2:01:fb:f5:cd:b4:84:9b:99:a2:0b:58:f4:a8:23:
b7:c2:51:74:b7:8b:db:d3:3c:8c:39:c5:6f:09:d3:e0:81:33:
47:d7:22:5c:cd:27:b9:4b:80:57:bb:98:cc:50:d8:13:2d:5d:
18:25:97:9b:18:30:6e:25:53:70:43:d2:73:62:ed:48:7a:d4:
aa:f0:ff:c2:6e:d9:8b:2a:e8:88:28:c5:c6:41:cd:c9:d3:83:
3f:15:3b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:07:03 2025 by rpki-client