Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
File: AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json)
Hash identifier: PwPYCuOr9kRkcRoUJpjQwG2uUWezaE95kTPQUdoT+pc=
Subject key identifier: F9:0F:A2:C3:D4:F0:BC:6D:CC:B2:AF:84:5C:F3:C6:5E:40:90:EF:C0
Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
Certificate issuer: /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Certificate serial: 019655376F752DBB99B1D94D4766D039A61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
Manifest number: 14F9
Signing time: Sun 20 Apr 2025 22:00:18 +0000
Manifest this update: Sun 20 Apr 2025 22:00:18 +0000
Manifest next update: Mon 21 Apr 2025 22:00:18 +0000
Files and hashes: 1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: t8aGVtw3cFGG6IlBaNVov180UqXlsgdoPeAbrdcs00s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:6f:75:2d:bb:99:b1:d9:4d:47:66:d0:39:a6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Validity
Not Before: Apr 20 22:00:18 2025 GMT
Not After : Apr 21 22:00:18 2025 GMT
Subject: CN=f90fa2c3d4f0bc6dccb2af845cf3c65e4090efc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ae:d3:72:99:74:47:50:2a:5a:9a:1b:ec:65:
6d:0a:b8:f5:2b:69:36:7a:5e:93:e7:0c:1b:d3:f9:
a2:e7:0f:ff:45:a4:50:23:06:14:62:da:30:14:30:
34:b0:71:cc:34:5f:56:b1:6b:d3:36:a2:88:0b:4d:
e7:9e:84:c2:18:9d:40:9b:be:54:1e:b1:cb:23:68:
ea:7c:4d:04:a6:95:5b:10:89:ea:96:32:e4:d8:2c:
0b:0f:e0:5f:4f:4a:8f:a4:2b:8f:e6:59:7b:95:ca:
3f:b4:7e:d8:3e:11:f5:c9:00:96:a2:5a:69:3e:42:
0b:0c:f5:ce:d5:d9:51:12:ba:a5:3a:b5:73:99:c0:
33:64:2f:10:c6:1f:60:6d:e7:2d:ee:a2:09:56:e1:
a6:17:ab:e7:e8:8a:ee:0f:28:bd:d2:21:d5:0e:43:
69:b4:de:02:2f:64:fa:86:0f:70:68:a3:ea:d5:20:
de:d1:ce:23:ed:91:f6:f8:b7:31:03:5f:a0:3f:e6:
3f:d9:79:24:94:6a:08:d1:20:57:c9:ca:cc:7f:ac:
49:02:59:52:e8:a9:7e:e7:cf:b2:b0:9e:48:48:9f:
fb:da:8b:f0:86:f6:2e:dd:8a:0d:86:fd:22:3a:ba:
14:9c:c9:cd:59:c5:9f:67:e3:1e:b6:aa:72:7a:da:
63:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0F:A2:C3:D4:F0:BC:6D:CC:B2:AF:84:5C:F3:C6:5E:40:90:EF:C0
X509v3 Authority Key Identifier:
keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a9:73:da:e8:80:9c:a3:df:24:d1:ae:1c:7a:7f:5e:57:6a:
a0:2a:4c:e5:0e:d4:17:dd:bd:8a:e1:55:b8:b1:90:0b:bc:72:
03:13:3a:f1:a0:d9:bb:aa:1e:84:6d:cb:95:72:56:4c:dc:1b:
89:ff:19:40:a1:b2:3b:d9:a3:4d:f6:a1:de:0d:37:e7:6e:d6:
d2:b1:00:ed:52:3f:df:32:76:36:13:ca:a7:a5:b7:bd:1a:b8:
b2:ea:10:32:22:45:c9:05:9a:c8:0e:b4:3f:8e:0e:7a:f2:95:
b3:87:b9:0d:ef:be:b6:33:95:34:c7:14:2d:2f:a4:4f:2d:5c:
78:b6:8d:10:8c:4f:f0:e0:e4:80:20:ba:8e:83:5c:e5:3c:02:
b4:65:7b:58:72:74:fc:72:4a:a3:2a:5c:bf:09:8d:8c:28:41:
cf:26:cb:61:40:ef:ce:f5:4e:9c:ae:a6:f5:16:71:91:15:14:
7d:a2:ce:32:b0:86:35:ec:27:86:72:ee:54:97:9f:d6:c8:0e:
4c:0d:66:19:e9:63:ea:d8:db:b3:a7:22:d8:32:3b:f0:cf:f8:
2a:d9:d2:ee:33:a9:fe:c6:01:fa:97:79:b5:bb:2b:06:2e:06:
f0:c3:e3:a8:ef:e7:02:37:41:2a:d8:ba:d3:5d:56:e8:07:cf:
9c:da:8a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:03 2025 by rpki-client