Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
File: aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json)
Hash identifier: bZN3gVrTMymIpynwmf50gbAyBAt4h34zhV9SngmGYio=
Subject key identifier: 91:40:61:0F:83:4C:51:B6:7E:DC:33:DF:BC:16:E1:64:CC:CD:FD:8F
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Certificate issuer: /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial: 01967F4675B671539D63BCA335F139EC4591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
Manifest number: 0163
Signing time: Tue 29 Apr 2025 02:00:46 +0000
Manifest this update: Tue 29 Apr 2025 02:00:46 +0000
Manifest next update: Wed 30 Apr 2025 02:00:46 +0000
Files and hashes: 1: 29C_AMtyAdy5xz9nR5IWFhFiIiY.roa (hash: FBVen/Q/sLzdQJw+zYeV1QYNWCu1/gvix8MLvUf426M=)
2: VpccTipW0lNr-K9sqrEpGYv-Kv8.roa (hash: zrRywVhDOEX8ppVFjwMkfY6qiZ8PRXRoZXgmGI39CI4=)
3: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: m/u+yKyMUNM3JKYVQ/ceLUEdmPWCDDKoR14RvnPWrgk=)
4: sUY5J2N8PCLs__awrXNAzoRAVL0.roa (hash: ey1paCcg6V8UnGfsgdc6JpJWrVKzneosnYZFoSG6890=)
5: ub1kPDAxllR0WFP6iXd1W5UcG_k.roa (hash: 8WBQDzQQjZxzhaXE+nFlYVRYm6wxvzqPDNkDDz5P6H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:75:b6:71:53:9d:63:bc:a3:35:f1:39:ec:45:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Validity
Not Before: Apr 29 02:00:46 2025 GMT
Not After : Apr 30 02:00:46 2025 GMT
Subject: CN=9140610f834c51b67edc33dfbc16e164cccdfd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:14:a1:96:19:58:61:40:3b:37:34:52:79:62:
04:2f:bf:cb:e3:29:7e:51:46:13:87:59:29:a3:6f:
11:78:b7:5a:6d:9b:9f:3a:87:ce:5c:c4:e2:60:ea:
6d:bf:39:23:4b:bc:15:31:79:75:8b:2b:69:d8:b2:
3b:60:8e:e2:bb:8d:36:15:f7:66:44:bc:2c:d4:96:
b9:22:20:11:04:5e:ad:39:61:db:be:dc:54:e6:0a:
01:4f:52:ed:7a:89:1d:6a:38:b4:cd:20:e4:18:6d:
9a:5a:c1:e5:9b:02:ae:db:e2:b4:76:29:e1:83:44:
2f:9e:c3:61:00:b5:0c:60:cb:d7:26:c2:8c:37:ec:
7b:6f:ea:a1:cf:05:2c:87:2e:83:24:04:9c:1a:a4:
23:82:24:94:c1:5d:74:41:9b:96:08:1b:b7:63:a4:
94:c3:e3:1a:27:48:32:87:0e:e0:1a:08:6b:65:5a:
c9:b5:dc:f6:83:f8:b4:07:ee:7f:4a:81:97:d1:5f:
e6:97:3a:82:1a:90:ee:86:f5:92:b0:af:37:4c:44:
35:c5:5b:e2:2e:29:bf:b0:91:2f:f0:0a:1e:61:54:
61:47:96:43:45:ee:56:3e:97:64:72:bb:54:a0:28:
e8:90:be:12:39:f7:7b:cc:0b:a5:40:01:b4:68:6b:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:40:61:0F:83:4C:51:B6:7E:DC:33:DF:BC:16:E1:64:CC:CD:FD:8F
X509v3 Authority Key Identifier:
keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:70:b1:25:f0:2b:df:20:10:c8:b0:ee:aa:3a:bd:76:19:bb:
db:4b:5c:e0:9d:d6:ac:1f:c5:28:4e:78:5b:0b:ae:3f:ec:d4:
3c:0a:17:b9:f5:7e:a7:db:a6:40:f2:e9:72:aa:8d:87:f7:8a:
4f:06:d9:9c:71:b8:bc:8b:91:04:e9:f0:f3:5b:e1:2a:ad:b5:
d0:27:93:23:bb:81:11:5f:72:54:56:1b:8c:4d:4a:b5:2b:7b:
1a:a0:2d:e6:b4:2e:72:22:16:8a:e1:5f:a8:0e:f5:24:5e:a7:
80:a8:f3:7e:42:24:d4:60:6c:a7:38:29:51:9b:db:49:7b:dd:
5b:77:79:31:b3:71:52:12:47:df:39:db:b4:ca:2a:31:9e:ad:
1a:7a:0e:c0:3d:fa:43:d7:2c:74:27:48:ed:ae:f0:21:a2:a3:
6f:2b:c6:13:ac:0e:6f:be:a7:aa:1a:ba:4f:0e:cf:4f:11:79:
b4:b8:bf:99:aa:e0:0c:cd:b4:93:fc:b6:7d:fa:3d:71:d7:1f:
b3:69:28:1b:5a:2c:e8:69:e9:a3:e5:74:1d:03:50:b6:d0:11:
d8:08:c5:df:8f:67:36:11:e2:81:23:85:31:de:a6:fe:21:56:
61:e2:0a:a1:80:4f:fe:6a:c7:39:9a:4b:e4:e6:a8:65:ca:cd:
f9:8d:16:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:19:50 2025 by rpki-client