Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier: WWf/nze76e9akW6rhB0dSs78IGlU5LoFKhhcPI21+tw=
Subject key identifier: AE:22:8E:C3:B9:35:A5:92:A6:34:8E:2B:CF:F3:91:89:CF:AB:85:21
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer: /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial: 01968058EFBD7E79DEBEFA4229CF2540722F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number: 1511
Signing time: Tue 29 Apr 2025 07:00:34 +0000
Manifest this update: Tue 29 Apr 2025 07:00:34 +0000
Manifest next update: Wed 30 Apr 2025 07:00:34 +0000
Files and hashes: 1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: gxclgXKfxlGVTIxAQd0GJKqJdICa7HUUE8E+3GZE07U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:ef:bd:7e:79:de:be:fa:42:29:cf:25:40:72:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Validity
Not Before: Apr 29 07:00:34 2025 GMT
Not After : Apr 30 07:00:34 2025 GMT
Subject: CN=ae228ec3b935a592a6348e2bcff39189cfab8521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:47:d9:9e:d2:6f:e4:de:bc:87:b1:22:8b:
40:8e:46:da:c3:bf:6e:c2:b1:97:b2:24:2b:3f:2b:
29:f0:03:44:85:ac:bc:9b:2b:26:13:c6:12:d7:7f:
5d:af:64:c2:7b:5d:db:f3:00:e0:cf:a5:ca:ac:0f:
93:e1:85:d6:a6:ec:ea:6a:e0:8d:62:03:20:9b:4c:
c2:06:4d:e7:70:2f:5d:ff:ef:f9:b9:56:8a:c3:f4:
2e:98:21:01:5f:25:0c:52:11:42:c4:81:58:1f:09:
19:05:fe:a4:61:f2:31:55:b9:a9:15:57:ac:44:8e:
42:15:ec:71:d1:43:16:7c:01:43:71:05:16:08:37:
3e:6d:ce:46:70:dd:17:a1:48:95:2a:f5:26:39:a1:
1a:27:c7:8e:08:15:48:c7:bc:09:b5:6d:42:9e:38:
9c:2a:91:23:7c:eb:02:a9:33:2a:6e:45:30:d7:11:
76:9e:75:07:3a:bb:30:7b:c6:f5:ad:c0:c9:ee:b5:
d8:28:d7:8c:62:13:18:c7:fc:24:26:d2:33:d2:09:
7d:6f:bb:64:aa:8a:b5:9b:af:63:f2:bc:6f:fc:77:
cb:4b:46:d8:db:0a:2b:32:0b:bc:9a:77:f6:79:27:
d6:bd:96:26:73:13:3c:3a:3b:d1:d1:52:17:bc:1c:
c6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:22:8E:C3:B9:35:A5:92:A6:34:8E:2B:CF:F3:91:89:CF:AB:85:21
X509v3 Authority Key Identifier:
keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:77:96:ab:20:03:97:09:f9:e1:8e:4e:6b:08:09:25:09:3c:
30:06:2b:12:de:94:52:8b:56:da:e0:e7:91:a8:c3:c5:19:f5:
9e:92:7a:be:5d:b4:bf:a9:3b:a4:87:81:ad:70:08:f0:be:83:
c0:96:f6:76:fc:6e:42:bb:9f:b1:03:75:26:10:07:1b:14:6b:
34:ea:ab:4a:24:4b:41:46:c3:f0:35:7d:dd:1e:1b:66:21:a4:
5a:25:e2:17:f8:41:e6:0e:e7:02:74:81:e4:98:17:dd:c2:58:
20:7e:0a:46:24:59:d8:18:99:49:0c:f7:f2:9c:00:6d:d6:ea:
b9:50:f6:13:bb:84:c8:7f:63:f0:3a:8c:29:a6:66:c9:65:90:
f3:78:c7:45:2f:49:a7:7a:fb:7b:95:f5:e4:4d:e9:69:8d:67:
1b:ca:81:4e:11:76:e4:74:b7:a0:91:cc:77:7e:ad:51:cf:09:
1b:fc:ea:e1:59:03:6f:1e:68:83:83:6b:20:5b:b0:78:10:a3:
ae:fd:ba:05:44:71:dc:96:c7:6e:97:5d:9d:0a:d5:73:55:46:
a6:bb:29:3e:58:d7:0b:c6:e1:ea:5f:75:bd:f5:5f:5d:34:34:
83:f1:35:b6:ce:fc:67:25:4e:53:0a:b7:15:1f:5f:c1:ff:04:
55:79:4a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:46:15 2025 by rpki-client