Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
File: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json)
Hash identifier: ubjVnY69tgL91ahJLwS/3tBUxXFYXlLLxXmtx3igLGw=
Subject key identifier: 85:20:E4:28:8B:80:94:78:13:CA:AF:C2:08:99:99:D1:1A:6E:12:12
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial: 01967679C8A7E969910C5EAD0C10AAEEE4F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 09:00:14 +0000
Manifest this update: Sun 27 Apr 2025 09:00:14 +0000
Manifest next update: Mon 28 Apr 2025 09:00:14 +0000
Files and hashes: 1: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: IvUSHE9jPDV5Pjg48w7hTPEbwPtKPI7c8j3ZVHEEBo4=)
2: wIBTBVQwXEpg1VcEfToXz9-SzCM.roa (hash: eXQVXHA1mPOdG0CF4A2ulRbni+b23x4utE4DVukqO5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:c8:a7:e9:69:91:0c:5e:ad:0c:10:aa:ee:e4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Validity
Not Before: Apr 27 09:00:14 2025 GMT
Not After : Apr 28 09:00:14 2025 GMT
Subject: CN=8520e4288b80947813caafc2089999d11a6e1212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:60:7a:10:c6:91:6a:67:4d:a1:d7:90:87:
00:e7:22:14:90:00:0f:71:76:18:ae:81:c6:2e:3e:
a9:3a:fd:00:3a:c9:25:9c:7b:e8:9a:61:ec:74:7a:
b0:94:73:d4:a9:67:9a:09:f4:bb:a2:3b:41:12:a6:
e7:c6:a9:65:4d:80:6c:ff:bd:02:fd:c0:bd:9a:df:
65:cb:2f:d8:93:be:04:d1:bb:c3:1c:07:6a:87:c3:
d6:71:9c:73:ee:b9:5d:56:46:78:0c:89:bf:d5:e6:
a5:cb:40:14:8d:da:ca:1f:9b:86:0b:a9:17:ee:71:
78:a1:6b:bc:46:42:63:d1:8f:94:8e:be:ee:e5:b0:
1d:e0:e0:80:2b:29:ba:9a:c9:0e:86:04:54:05:4d:
74:3f:6e:51:f0:fa:b8:79:61:b2:d5:34:56:95:b6:
8c:88:ff:45:86:53:60:ed:0d:7f:27:55:60:d5:ba:
a8:38:b1:d9:22:ac:a3:ef:21:e5:27:27:4d:2d:c9:
d7:60:1d:16:cf:7c:46:c4:02:de:56:e6:a4:8b:1b:
8f:b3:59:36:0a:4f:24:d7:de:b8:c5:30:0f:21:c4:
c0:c8:f3:e8:22:1d:fe:91:c7:44:e9:11:07:71:08:
4f:e3:29:f3:6e:31:a9:dd:d2:af:03:a9:33:5f:eb:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:20:E4:28:8B:80:94:78:13:CA:AF:C2:08:99:99:D1:1A:6E:12:12
X509v3 Authority Key Identifier:
keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cb:ca:5c:a8:22:7b:ba:14:21:71:f0:aa:05:e6:41:96:27:
19:6f:e8:36:c5:f2:aa:d9:7d:18:b7:b4:47:ed:f2:d4:28:e0:
bf:57:93:99:6c:b2:d1:4c:6a:4f:ac:c1:fb:bd:67:62:1b:c5:
64:7e:10:0f:a7:bf:ed:78:17:1a:51:45:d8:72:da:76:bb:1f:
b0:97:b8:f3:3e:60:2b:0a:00:0c:44:5c:d0:a2:b7:8e:72:6d:
2a:8f:1b:eb:f4:84:06:f5:61:df:a1:2e:a8:c6:6f:80:d6:bf:
90:d6:c2:9b:04:e4:c1:91:e4:fb:97:18:b4:4f:21:8c:a1:bf:
c3:88:df:3d:4d:62:9b:e7:b5:d9:00:cc:17:74:78:4c:30:c1:
a7:46:e4:3f:1c:28:73:fe:d4:b2:e2:7a:1a:25:66:0c:de:7e:
93:d1:f2:b5:d8:45:74:b3:4d:b1:80:d0:9d:58:13:09:08:34:
ad:44:2d:82:28:ce:d5:a4:c0:c1:19:48:23:96:91:64:3d:74:
fe:90:93:53:80:39:80:4e:bc:7e:87:c8:fb:35:b7:c0:65:f8:
95:fe:dd:fa:15:06:83:52:ed:6e:14:95:ff:0f:cf:fc:5f:93:
87:72:53:87:40:a0:1e:b3:fe:02:cf:f3:04:fb:57:15:bb:84:
ab:eb:6c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:16:33 2025 by rpki-client