Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
File: ayuSHZprREq1jmbriPfBI5jqBLU.mft (raw, json)
Hash identifier: rqms54+oPWmfKej/Tfcs6vq1hDkA+hPKBkL99W3qOT0=
Subject key identifier: BD:3C:E2:60:B5:52:3D:A8:0D:1C:80:E9:1D:10:0B:2F:B7:85:5F:57
Authority key identifier: 6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
Certificate issuer: /CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
Certificate serial: 01967AC47DAA861BFD68882F64978B7C7793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
Manifest number: 1F
Signing time: Mon 28 Apr 2025 05:00:19 +0000
Manifest this update: Mon 28 Apr 2025 05:00:19 +0000
Manifest next update: Tue 29 Apr 2025 05:00:19 +0000
Files and hashes: 1: DLvYR1epD0kUsHEotih2SRcwg4M.roa (hash: hAXB2W+KwBdgzJrLsjH1zUhzRdV04IFcuB1LFga5vPA=)
2: ayuSHZprREq1jmbriPfBI5jqBLU.crl (hash: 09A4K5Gavs5p9rndgnKZFTtqbW0K7hE86+CqwaOnmqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:7d:aa:86:1b:fd:68:88:2f:64:97:8b:7c:77:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
Validity
Not Before: Apr 28 05:00:19 2025 GMT
Not After : Apr 29 05:00:19 2025 GMT
Subject: CN=bd3ce260b5523da80d1c80e91d100b2fb7855f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:10:51:33:d6:21:4c:3a:da:59:0b:03:9f:
5f:10:9d:02:1a:e2:50:d7:7f:6a:7a:d2:31:68:c9:
fd:a6:13:2e:91:80:fb:8c:55:d4:63:b5:e0:1e:c9:
0d:21:ea:b7:03:90:bb:97:f2:97:f2:86:fe:ee:5a:
79:04:57:ba:bd:0d:97:83:1b:6e:b3:45:35:2f:0a:
5e:fe:c2:95:bc:2f:2f:aa:48:c6:e5:67:63:e6:8d:
72:b5:1b:19:82:50:5f:e3:4d:a6:e0:62:a5:25:20:
09:e9:8f:fd:51:03:e9:b1:72:7b:11:31:7c:da:81:
cb:38:b7:5e:d8:3f:04:1a:9b:82:90:e1:a9:1c:00:
da:e9:00:68:62:01:cb:f7:5d:45:b3:9f:2a:14:fe:
19:51:e9:73:ed:d7:08:cc:27:66:79:dd:1b:9c:be:
d9:0f:00:ef:65:3f:44:17:6f:9a:71:95:8c:09:de:
f2:21:d8:c5:12:31:77:50:e7:a7:11:f2:60:15:ee:
5e:fb:14:49:d5:aa:20:4e:4e:ea:f1:84:7d:cb:6c:
94:da:aa:a2:f2:81:98:d2:03:89:a4:c1:d7:52:79:
80:50:95:98:f1:17:ab:9a:89:53:18:51:1f:e2:45:
7b:73:15:ae:63:56:be:28:f7:19:f5:d7:08:d9:9b:
16:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3C:E2:60:B5:52:3D:A8:0D:1C:80:E9:1D:10:0B:2F:B7:85:5F:57
X509v3 Authority Key Identifier:
keyid:6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:97:25:42:41:5b:71:b4:64:49:4a:87:f9:8b:93:fd:d5:7b:
78:93:5a:3c:37:d4:36:55:65:d3:df:07:b6:6d:3d:bb:89:e1:
68:08:ba:f1:c9:2d:59:e7:1f:e9:d2:0f:9b:f9:44:b2:08:16:
58:49:69:29:d2:17:b2:f4:90:f8:1e:bc:a8:f2:6c:0f:94:50:
11:b0:f0:47:7a:23:0f:7c:eb:5a:bf:19:38:d7:29:e1:51:4c:
0c:a7:a3:93:4d:2a:21:fa:ff:2a:7b:75:0f:03:de:86:a1:67:
8f:bc:dc:be:5f:32:05:2e:68:4d:a2:77:c7:13:cf:7c:f5:a6:
16:cc:c0:61:62:89:34:60:ef:7a:0b:a4:43:ae:f6:5b:33:d6:
2d:8c:20:cc:8f:63:2f:19:ad:5b:50:9a:ec:2a:f9:2e:d7:e3:
a0:7b:2e:1e:b0:1c:f1:34:d4:c2:35:6e:6a:3a:82:d1:f9:fc:
aa:cc:62:72:05:5b:56:3c:fc:de:11:41:67:52:1e:c8:92:61:
a2:0b:59:ea:bc:9e:3a:ca:8e:a5:78:f9:0b:64:a2:05:4d:ef:
73:73:c8:d2:64:7b:50:0e:a1:b5:9e:75:60:01:93:0e:09:81:
65:4d:3a:8a:b1:32:af:40:0f:8d:8a:89:c0:8d:a3:ac:3b:46:
4f:8d:8e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:05:31 2025 by rpki-client