Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
File: aWoG5FR9oBpci177cQQOXt0Qnuc.mft (raw, json)
Hash identifier: Yp4gfasphk3AsHvbVQSsVhjTGh80+50DQz8B5p600L4=
Subject key identifier: A0:16:1F:36:E4:26:C3:A1:E4:27:EA:72:D0:00:B7:58:12:67:F6:AB
Authority key identifier: 69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
Certificate issuer: /CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Certificate serial: 019677FB780BBBF504AB21F723BEC3F3270D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
Manifest number: 0F86
Signing time: Sun 27 Apr 2025 16:01:31 +0000
Manifest this update: Sun 27 Apr 2025 16:01:31 +0000
Manifest next update: Mon 28 Apr 2025 16:01:31 +0000
Files and hashes: 1: aWoG5FR9oBpci177cQQOXt0Qnuc.crl (hash: 9oZOk8rRVIfP7VhCCPAeC7hDuUJBOModod88aFeweXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:78:0b:bb:f5:04:ab:21:f7:23:be:c3:f3:27:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Validity
Not Before: Apr 27 16:01:31 2025 GMT
Not After : Apr 28 16:01:31 2025 GMT
Subject: CN=a0161f36e426c3a1e427ea72d000b7581267f6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8e:c7:02:62:ed:89:b1:e1:a1:b9:11:c1:52:
e5:a9:12:9a:9f:cd:77:7a:6d:fc:09:42:6f:f2:03:
8e:3e:a1:1f:6e:10:61:68:56:70:4e:45:b3:a5:d1:
51:cc:59:98:d5:56:04:2b:bf:58:dc:56:69:66:25:
f1:48:6b:4b:81:f2:19:0e:b9:c3:f7:44:b2:c2:f1:
5a:6d:57:e5:7f:a9:33:c2:90:b5:e2:81:17:85:f3:
0b:9f:22:ec:44:c7:dc:33:5d:7d:ec:3d:90:57:5f:
34:8b:73:6a:9e:e8:03:1f:a7:c3:b6:a6:11:48:71:
39:b2:77:cc:9c:91:30:f4:f9:42:8b:09:d7:c6:b2:
f0:93:c3:fd:11:dc:84:f9:0a:d3:5a:7a:2e:58:25:
c3:d7:5c:5f:53:df:3c:96:ec:5d:84:12:a4:6d:51:
f7:01:a7:69:c1:cf:99:c1:34:6a:a9:bd:2d:c0:4a:
a3:8f:85:52:93:c7:98:ed:9f:a2:02:75:ad:ec:51:
ae:99:24:1e:c2:07:16:b5:03:e9:c7:cf:76:bd:0d:
40:88:f3:aa:0f:ed:18:f2:04:d2:c7:07:61:3c:22:
c8:63:19:5a:16:0b:2d:b5:07:44:87:40:d6:30:7c:
90:28:ff:2b:49:1e:8f:2a:3a:47:9e:05:7a:81:25:
46:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:16:1F:36:E4:26:C3:A1:E4:27:EA:72:D0:00:B7:58:12:67:F6:AB
X509v3 Authority Key Identifier:
keyid:69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f4:c5:19:ea:6a:f1:0d:64:50:cb:0d:08:80:fb:ee:c5:42:
fa:7e:21:13:b6:23:c8:4c:7d:74:81:b5:e9:7e:18:62:19:be:
75:be:f2:09:be:43:40:b5:8f:5e:24:37:1e:0f:4c:46:4d:ad:
d6:a6:a1:56:7a:4d:2d:62:86:e8:d1:f6:b7:89:89:21:9f:44:
7f:e7:74:b6:f3:ea:08:33:9f:5e:8d:9c:a1:dc:e2:a0:d9:cf:
9c:6f:7e:d8:40:dc:4b:d6:10:d0:7a:8c:6f:cd:23:e2:5b:94:
64:0e:54:28:81:f7:d2:48:ea:ad:61:a5:be:98:db:4f:af:11:
77:01:2a:51:ac:a7:53:4e:02:0a:fb:fe:e2:27:bd:0b:cd:8c:
42:77:43:47:18:7c:75:16:88:95:63:51:7f:29:33:d8:eb:ea:
17:65:2d:f3:65:ed:08:80:0f:c9:fd:ea:3a:1d:49:d2:1e:50:
6d:bb:2d:42:c6:a6:d9:56:fe:5a:8c:6a:e0:43:db:d0:2e:5e:
51:cb:6e:c4:b3:74:60:6e:80:8c:a4:b1:3b:db:ee:92:6e:14:
34:43:7a:46:ce:8c:fb:1f:a3:b5:60:35:fc:e7:2f:dd:68:11:
21:f8:02:2e:92:c4:8e:c7:67:ef:0e:a7:97:ad:63:34:f5:5b:
ce:62:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:22:56 2025 by rpki-client