Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
File: aQMR37ZbZZViGO_0cZep65akB9s.mft (raw, json)
Hash identifier: cXtEdfClz0fHOvelvPnmZeh1B83w1+/3PcW1WVo4GVc=
Subject key identifier: 5A:72:81:0A:5C:F8:C9:E1:2F:9A:E9:56:03:09:A5:B6:F6:0D:FD:AF
Authority key identifier: 69:03:11:DF:B6:5B:65:95:62:18:EF:F4:71:97:A9:EB:96:A4:07:DB
Certificate issuer: /CN=690311dfb65b65956218eff47197a9eb96a407db
Certificate serial: 01967FB501FBADD92D7933E1EA8C0623925F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
Manifest number: 1511
Signing time: Tue 29 Apr 2025 04:01:30 +0000
Manifest this update: Tue 29 Apr 2025 04:01:30 +0000
Manifest next update: Wed 30 Apr 2025 04:01:30 +0000
Files and hashes: 1: aQMR37ZbZZViGO_0cZep65akB9s.crl (hash: iJ1ldLyK8t7GAKYrMEI4CQC+RKCLkyqJZMgCMaGmlCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b5:01:fb:ad:d9:2d:79:33:e1:ea:8c:06:23:92:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690311dfb65b65956218eff47197a9eb96a407db
Validity
Not Before: Apr 29 04:01:30 2025 GMT
Not After : Apr 30 04:01:30 2025 GMT
Subject: CN=5a72810a5cf8c9e12f9ae9560309a5b6f60dfdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:93:2c:18:ae:9a:c1:33:17:ab:81:72:4e:
b5:d4:b5:5c:bd:1e:6e:6d:e7:7c:32:57:44:ed:5c:
d2:a4:d8:e1:72:9f:92:2a:92:d7:82:dd:69:dc:88:
21:e9:8f:bc:58:b3:18:79:b6:a6:96:79:a0:5e:ae:
2b:28:ca:90:74:bc:c7:a3:7f:b9:43:50:a1:f4:58:
9e:64:ba:a7:f7:72:cc:5f:75:27:c6:50:40:25:8e:
4f:64:52:6c:dc:07:9e:e4:30:f3:ac:7d:92:82:f4:
64:7a:28:08:36:3b:21:bb:d3:8c:04:22:53:31:c4:
dc:bb:38:c5:e9:7e:c6:5e:b5:fe:04:de:2f:25:25:
84:f2:ad:74:25:47:e9:f4:e3:03:a7:ff:21:7e:63:
8a:f5:f9:2c:bd:7e:bf:a7:7e:e2:06:77:6b:2b:a4:
02:45:c8:b4:02:c8:e6:2d:8d:ca:29:f6:cd:8b:f5:
fe:77:9c:52:88:cc:80:e5:f0:74:8b:a1:8b:29:69:
ee:7c:c4:fa:00:39:52:c2:9a:f5:93:a6:b2:7c:d5:
d6:77:e5:87:b8:79:9a:2a:b9:b3:f3:5e:bf:8c:af:
2e:5c:b3:d9:b2:2f:f9:5d:51:6e:45:4a:b3:be:a2:
da:5b:b4:8c:ea:da:d7:b8:73:5c:dc:d5:89:0d:33:
7a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:72:81:0A:5C:F8:C9:E1:2F:9A:E9:56:03:09:A5:B6:F6:0D:FD:AF
X509v3 Authority Key Identifier:
keyid:69:03:11:DF:B6:5B:65:95:62:18:EF:F4:71:97:A9:EB:96:A4:07:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQMR37ZbZZViGO_0cZep65akB9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8266a6-39f2-4a9f-a4dd-a456e364cb0e/1/aQMR37ZbZZViGO_0cZep65akB9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:fa:02:1d:e3:43:a5:c1:20:cb:a2:bb:24:f4:1d:ef:87:8b:
08:3b:68:61:bc:d6:65:e9:f9:cc:0e:ad:14:94:3e:83:a9:b4:
80:1c:1f:df:27:52:26:61:6d:28:62:d6:33:33:7d:e9:03:c3:
b2:b5:43:cc:50:d2:76:6a:d5:e3:7c:88:71:76:32:a9:86:e2:
77:f6:04:89:54:2c:5b:ee:3e:b7:48:f0:c5:3b:3c:41:58:39:
9a:35:cf:48:2e:8c:a3:ef:52:4a:34:10:e7:14:fe:c1:8d:4a:
b9:72:f3:21:81:b5:c6:cb:07:d2:6a:87:af:6f:5d:a6:9f:31:
a5:f8:bc:74:f2:43:15:99:3c:a9:1c:39:0f:bd:a1:5e:1e:49:
b8:bc:92:f6:0d:1e:1b:f5:d9:5d:c4:50:51:db:eb:54:e6:af:
9f:a0:41:a4:99:a6:6d:01:51:14:86:55:c7:17:d7:4b:39:ea:
05:09:9f:d5:7f:f9:3d:98:5a:23:a2:64:f3:69:21:c8:f4:62:
d3:e4:ca:a8:ff:cf:c3:27:1d:cf:49:a0:0c:f3:75:c0:76:f3:
63:32:34:0d:79:c3:f9:8c:f8:6b:13:4c:ca:a9:d1:94:54:e7:
81:68:70:78:39:d2:e4:8a:88:c1:31:91:2f:cd:e9:5d:ba:3c:
26:bf:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:26:30 2025 by rpki-client