Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
File: auug8jdBINVPpbzcKp0kUUFy6m0.mft (raw, json)
Hash identifier: +ueKC3QTf3CyW2xojBsbw4Zev707CAF+3wGuO8mN4oI=
Subject key identifier: 0D:40:AE:17:20:A5:1D:E8:AB:BA:26:65:6E:08:88:7F:57:A0:63:69
Authority key identifier: 6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
Certificate issuer: /CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Certificate serial: 019687DBDCEF4933057D8857C604544ACE76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
Manifest number: 0FCC
Signing time: Wed 30 Apr 2025 18:00:55 +0000
Manifest this update: Wed 30 Apr 2025 18:00:55 +0000
Manifest next update: Thu 01 May 2025 18:00:55 +0000
Files and hashes: 1: auug8jdBINVPpbzcKp0kUUFy6m0.crl (hash: OZG/B+5xSAlHu/cOG5l5cC6348Lri1plG4uh9wL4hHs=)
2: cnQVVqPjrlGXZ4bRJUOH3uMmisQ.roa (hash: ctdicnlvbHDU3uh0Yfd3l/2DNRusbBU6IrhnO1MfguA=)
3: y6i-tAs710JU3OPP1HFORxr_Jiw.roa (hash: CVxy94IGu0ygQZ+HNm6h6Qx4sxvXtiP38hrFG8fWoyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:dc:ef:49:33:05:7d:88:57:c6:04:54:4a:ce:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Validity
Not Before: Apr 30 18:00:55 2025 GMT
Not After : May 1 18:00:55 2025 GMT
Subject: CN=0d40ae1720a51de8abba26656e08887f57a06369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:d5:92:ab:51:64:9b:f9:7e:b6:a0:0b:9f:
ca:3a:b3:c1:5f:49:4d:39:9f:fa:8d:e3:5a:10:ef:
9d:b9:b8:64:04:06:37:c9:22:22:03:b4:13:51:bb:
77:86:4f:ff:a3:34:a1:85:31:bc:84:50:08:eb:b3:
ac:67:6e:2e:77:b9:47:8b:f2:d3:30:0f:10:82:73:
8e:e9:9a:7b:1b:fa:5c:1e:4c:8f:ac:07:2f:dd:1f:
17:a6:73:96:e2:1c:4b:67:a0:61:70:a2:d0:b0:8c:
36:69:7d:bc:d8:92:7d:68:d6:b1:94:e6:48:9a:1c:
08:ce:cf:7a:2d:e4:26:9e:eb:26:fe:1f:33:48:91:
8c:d8:08:c6:b7:76:cb:73:69:70:6d:dd:fe:fa:8d:
42:40:5d:2c:52:f2:b0:cf:2a:8e:b9:7b:ad:3d:3b:
08:45:b0:88:77:56:2e:d8:c3:4b:46:91:29:e9:35:
94:6a:40:ce:35:7a:ce:ae:79:a2:35:e8:72:27:ee:
cc:ac:ad:66:84:25:61:a0:d7:40:7d:c3:5c:05:d8:
2d:26:a3:26:38:a7:1f:36:48:54:8e:7e:8c:c2:5d:
d1:44:0a:72:ef:0f:71:38:db:a5:1e:28:11:4e:d9:
3d:83:f6:bb:5b:7b:b2:fd:24:2a:23:c8:a6:a1:d0:
aa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:40:AE:17:20:A5:1D:E8:AB:BA:26:65:6E:08:88:7F:57:A0:63:69
X509v3 Authority Key Identifier:
keyid:6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:42:a9:83:2c:40:a5:7d:87:39:ce:e5:f0:78:3c:48:ee:62:
30:01:f6:7e:7e:e0:e3:c2:76:1c:b7:5d:f9:73:c3:ea:cf:08:
ba:bb:5e:47:f8:a0:f1:30:58:7f:11:69:8a:61:17:b7:82:e4:
98:0b:34:39:00:1d:14:0f:61:98:04:65:4f:a8:56:76:94:78:
77:e9:e4:a5:ef:51:c3:ac:f9:48:1e:76:15:7a:45:e6:4d:fd:
0b:7b:24:31:cf:06:46:9b:b5:a0:ac:2f:05:60:6b:91:15:69:
95:67:7b:3a:0d:d7:bc:27:56:c5:eb:a1:83:6b:e7:b3:af:9a:
fb:d6:2a:16:39:27:e2:e3:11:6a:54:62:d8:50:55:d6:cb:2c:
ac:5c:0e:d9:29:ed:57:33:2e:54:e5:e7:22:1c:17:45:d0:ef:
60:76:c0:0b:be:e5:62:59:a0:9f:94:0b:c7:e7:8f:78:1d:28:
3f:44:dc:73:c1:eb:83:49:79:9c:30:0b:03:84:eb:45:92:66:
6c:43:8c:47:8b:be:ce:0a:01:d3:d4:1b:17:49:3e:2e:b0:fd:
a3:63:28:f5:14:40:05:dc:e5:f6:a3:ad:17:b7:0c:24:da:dc:
6d:c2:df:ed:1a:3a:8b:96:c8:53:e2:09:9e:32:c6:f9:f9:4c:
87:d5:90:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:52:00 2025 by rpki-client