Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
File: aZHFbxGnFxxhUyOXafVXvroQGC0.mft (raw, json)
Hash identifier: i3t/iR1QphBEf+u2K5pEhokGGcUL6rUTV2bmAZzS78s=
Subject key identifier: DB:DE:57:C0:45:B5:E0:F1:9A:AE:33:40:99:C8:7D:74:5F:6C:60:BB
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019694167CC5F40AD8898D62987AC271C23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
Manifest number: 0878
Signing time: Sat 03 May 2025 03:00:23 +0000
Manifest this update: Sat 03 May 2025 03:00:23 +0000
Manifest next update: Sun 04 May 2025 03:00:23 +0000
Files and hashes: 1: aZHFbxGnFxxhUyOXafVXvroQGC0.crl (hash: O8jNms7OSCS4BSZL23KD2a++qKrmC6uhvCadYtAFgEY=)
2: x-UkkAB6bBHjnvfgkifHZfsul34.roa (hash: Z+EoTHR/GmNeC+PGL9FT4NMDxcyauPnVaWgbSwI9JOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:16:7c:c5:f4:0a:d8:89:8d:62:98:7a:c2:71:c2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: May 3 03:00:23 2025 GMT
Not After : May 4 03:00:23 2025 GMT
Subject: CN=dbde57c045b5e0f19aae334099c87d745f6c60bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:38:2d:b1:22:76:dd:09:1e:5c:b9:db:3c:
f9:2c:5a:3a:c9:15:1a:3d:55:c0:61:b9:fc:78:f4:
b6:a0:a2:4e:c7:b0:77:dd:9a:0a:7a:23:fb:c8:18:
82:6e:5f:a2:1a:ae:34:2e:f0:52:ab:72:94:dc:ed:
b5:be:3b:dc:24:31:69:28:9f:b0:02:85:4a:b8:1c:
d3:65:65:72:e6:0d:70:fe:e3:d6:7c:67:f8:a3:fa:
0f:21:9d:37:54:e0:de:3a:76:7e:ea:41:38:de:6f:
86:b1:6f:6e:b2:f8:82:cc:a3:82:8a:ff:c1:0d:c1:
56:8a:e1:ee:72:48:79:50:c8:c3:c1:4f:d1:6c:d8:
ee:8e:a9:a5:80:3a:fc:d8:aa:17:3f:09:3d:75:2e:
2d:cf:08:23:e0:92:d8:38:13:e1:30:8b:cd:6e:c2:
e9:0e:30:18:f5:73:92:de:df:6a:8b:40:0d:b3:39:
26:60:17:99:cc:3e:37:3e:66:8a:5c:04:ac:96:ae:
e5:44:e1:62:bd:75:b2:70:55:30:86:47:38:7c:25:
30:59:b2:1a:36:70:b3:96:ea:22:9b:91:06:d6:e5:
6a:26:94:da:67:10:8b:48:3a:70:4c:85:b8:d4:dd:
b7:61:2c:44:6d:c9:77:6c:02:58:b6:4b:75:4c:28:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DE:57:C0:45:B5:E0:F1:9A:AE:33:40:99:C8:7D:74:5F:6C:60:BB
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e5:70:e7:2e:32:84:d3:bd:0e:4e:78:15:33:99:cc:a1:6d:
81:dc:f3:4c:7c:92:5b:99:b2:48:1e:11:ab:fb:57:b5:f1:4a:
75:a3:b2:98:b6:d6:69:78:33:15:b0:9b:53:e2:5c:21:df:dc:
b3:e4:eb:7c:03:22:77:0a:7e:e4:74:9f:56:1e:4b:fc:f0:e7:
86:bf:04:a8:e6:ac:90:68:c0:7a:9e:e1:25:85:ac:22:e6:40:
95:cf:a2:60:b2:62:18:3d:70:9a:12:da:f1:46:97:a4:ea:d4:
ea:71:85:15:25:85:e8:41:bf:ae:f9:31:2a:8e:42:bd:3b:f0:
c8:1a:dc:2f:61:c3:ac:cc:8b:40:b0:b7:81:3b:42:d7:e8:ff:
99:de:f9:93:ba:27:ea:75:3f:79:19:21:70:88:1e:4b:17:a9:
c8:65:a8:9a:12:5a:89:f9:c2:c0:55:a6:f8:ff:31:0d:fb:e6:
f1:b7:cc:b6:4f:dc:c0:5d:ed:6f:4f:b3:da:2d:b4:1e:79:46:
f5:90:8b:be:8b:88:d9:8a:6a:a0:db:f4:dd:32:13:19:39:e9:
7d:c6:a0:84:4c:e4:2b:10:c2:fd:d6:aa:c1:87:aa:5f:e8:05:
c0:25:38:28:c5:d4:a0:97:0b:00:ce:59:ff:77:fb:f7:be:bb:
24:90:a6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:38:23 2025 by rpki-client