Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: 6/I0FDFvl+SSyErBzDcI8yrZKV75yNeysAz/893+lXc=
Subject key identifier: F8:94:C3:8F:9A:A1:0C:7A:DA:7C:D0:11:14:10:0F:23:21:7E:00:76
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 01967ED8C1EC1982CB0AC8C13D6D37973222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 00:00:56 +0000
Manifest this update: Tue 29 Apr 2025 00:00:56 +0000
Manifest next update: Wed 30 Apr 2025 00:00:56 +0000
Files and hashes: 1: 5dz9Tw4bpiGr43q4HQtTf_7BsP0.roa (hash: 0VcdjRI2LyeRRm3QIQdFN5UYWsj35tdfOvua8dhZWaw=)
2: C-j834veFsj1jsTX7J6_TWAlAyM.roa (hash: 1/vufO4pJcMpVCQ6/N50OfHCZoID4FXv7ykneVDspNU=)
3: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: 2gMQOPhFSKgN26J04EW9Vox2+86WoAZ73vqsuJ9Nqes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:c1:ec:19:82:cb:0a:c8:c1:3d:6d:37:97:32:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Apr 29 00:00:56 2025 GMT
Not After : Apr 30 00:00:56 2025 GMT
Subject: CN=f894c38f9aa10c7ada7cd01114100f23217e0076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:1d:62:13:2a:a2:af:b3:fe:16:e5:9a:3b:
f2:9c:00:3a:dd:60:7a:38:3a:95:d4:73:3c:94:fa:
d8:9b:bb:63:9a:e8:4b:f9:fa:42:3a:d8:50:fa:38:
bf:77:a6:0b:12:e4:4f:f1:a2:41:ac:0e:68:65:8a:
13:b7:58:dc:dc:c1:69:fd:c8:8f:2e:eb:cf:1c:00:
8e:79:20:be:41:d4:f9:d8:3e:f1:95:d4:f6:76:4b:
f5:d1:8e:78:00:87:eb:c7:bb:af:08:85:d4:2f:ab:
00:19:fc:bc:87:51:7a:a2:29:5b:79:e0:4f:20:c7:
dd:18:b7:a8:a8:b9:c6:03:d3:28:82:cc:da:6f:f8:
12:c7:d6:e4:6f:e0:8f:b5:2b:9c:24:bf:45:57:f0:
9a:ef:e8:8c:99:cd:7b:22:13:36:53:4c:d3:49:90:
68:ee:bc:eb:80:1d:bc:7d:16:9e:01:cf:e4:c3:f8:
b0:d0:53:59:47:81:82:ab:4a:21:81:b8:b9:d7:16:
3b:48:ba:36:a2:3f:69:84:e4:5b:7b:38:b1:81:e8:
54:8c:0a:f3:d5:70:9f:b7:fe:59:40:83:3a:8f:25:
f8:62:1f:2b:49:ee:39:e0:5b:55:68:20:9c:42:f1:
82:3d:8e:67:9e:22:12:06:c9:10:9c:bf:08:16:49:
34:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:94:C3:8F:9A:A1:0C:7A:DA:7C:D0:11:14:10:0F:23:21:7E:00:76
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2c:a8:c4:57:7a:86:b0:de:e8:06:bb:85:0a:64:38:f4:49:
1f:07:d6:1e:ec:d5:14:19:a9:07:56:96:9b:7d:73:66:6d:54:
fe:30:97:7d:ec:7c:b3:f0:fa:d0:a6:a4:58:78:c7:ae:ce:4e:
02:75:f1:50:e2:18:90:95:b6:c2:bc:72:d2:b3:ee:5c:12:2a:
60:45:b2:bc:b5:83:29:33:22:e4:93:03:d3:98:02:c5:cc:3e:
f5:09:8a:7b:57:9f:a1:83:9b:3e:e9:64:bf:ba:ee:38:d1:91:
3d:e2:57:44:90:44:88:c9:4f:55:be:50:4c:11:8d:ce:6f:e3:
9a:c6:87:86:74:5a:1f:b8:ea:56:99:86:c7:3c:6b:75:fd:0f:
43:03:0e:6d:09:b5:33:a8:1c:40:4a:f5:c4:72:f5:2d:52:f9:
3f:59:e3:94:84:0d:7e:0a:48:0b:40:1c:f8:5e:e5:e4:54:e1:
bc:f4:4b:c4:ad:1e:c5:3e:61:2c:91:17:81:83:24:8d:b6:1f:
90:89:77:05:d4:2c:d9:63:7a:ae:82:bb:9c:00:5f:6d:84:a6:
a2:e2:50:01:91:f9:26:a0:df:f0:67:2f:e0:63:df:2f:24:16:
25:f8:34:41:d0:bc:5d:ca:b7:07:79:53:07:ed:16:7f:c2:65:
62:83:60:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:14:21 2025 by rpki-client