Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft
File: ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft (raw, json)
Hash identifier: Vx3KfW1b/M2Kf2gV8GQdsS0ygkfp90YGgS9bfdW9d7A=
Subject key identifier: AC:FB:A7:71:7D:B5:8D:56:F0:D9:2A:6E:ED:48:35:1B:3D:04:01:5D
Authority key identifier: 00:11:FE:2B:2F:67:54:7A:D7:12:D6:FC:36:AC:67:DD:69:2F:0E:1E
Certificate issuer: /CN=0011fe2b2f67547ad712d6fc36ac67dd692f0e1e
Certificate serial: 0196586FA4177FCD4D81A2C979CF592A61F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft
Manifest number: 0B71
Signing time: Mon 21 Apr 2025 13:00:33 +0000
Manifest this update: Mon 21 Apr 2025 13:00:33 +0000
Manifest next update: Tue 22 Apr 2025 13:00:33 +0000
Files and hashes: 1: ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl (hash: j6X3OJU+wzWQYLP6FSqd/VfpACDtQ9o9nv6NAcjFEfI=)
2: iqTl4BIzOojgsD_Wimn0FwnJtEM.roa (hash: 3DGwbK08inzQ4rExkDlqu5OQopsFOPF3AI5Z6YQHb4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:a4:17:7f:cd:4d:81:a2:c9:79:cf:59:2a:61:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011fe2b2f67547ad712d6fc36ac67dd692f0e1e
Validity
Not Before: Apr 21 13:00:33 2025 GMT
Not After : Apr 22 13:00:33 2025 GMT
Subject: CN=acfba7717db58d56f0d92a6eed48351b3d04015d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:3b:92:fb:8b:f5:b3:55:7c:10:f5:d8:a4:
fa:3e:98:3b:34:f4:be:59:a1:80:39:9d:5a:0d:bb:
a6:08:84:72:c2:19:a5:47:13:6b:3f:c8:b8:0b:2a:
2c:b9:7a:1b:d4:ab:28:26:d1:03:4f:82:40:70:a7:
c1:53:09:fc:ce:ed:95:47:a7:b1:f0:10:2c:18:1d:
d6:e6:2c:61:1f:0c:56:74:b7:45:12:f6:62:96:24:
fc:70:eb:a5:82:5c:2b:2c:22:a8:01:f8:49:d0:8c:
2a:7b:b3:69:47:cd:2c:f5:cd:3b:47:7a:9a:98:f2:
49:ee:15:66:6e:5f:1e:ad:88:6c:00:54:4d:fe:83:
fa:7c:91:da:fe:6b:37:3d:50:cf:a6:c0:b4:11:d2:
e0:dd:ab:0d:c3:e6:5e:5c:74:81:30:a2:4c:9f:ad:
25:45:42:7e:83:c6:71:41:f4:1c:21:fe:2b:eb:1d:
71:a0:c3:dc:99:db:18:12:86:8c:1a:5d:49:f3:d8:
8a:2c:e9:51:67:4d:a7:9a:bc:7b:8b:36:cb:ce:6e:
9d:1f:a4:5f:78:d5:68:4b:2e:ff:3d:28:96:0e:f2:
89:49:90:e1:cb:a0:db:10:d1:37:15:fa:37:b2:4a:
f5:3b:0d:0b:17:a2:bf:29:8c:69:83:1c:eb:f6:fe:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FB:A7:71:7D:B5:8D:56:F0:D9:2A:6E:ED:48:35:1B:3D:04:01:5D
X509v3 Authority Key Identifier:
keyid:00:11:FE:2B:2F:67:54:7A:D7:12:D6:FC:36:AC:67:DD:69:2F:0E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4dd06d-e7a6-4491-9e13-a288b41a50f6/1/ABH-Ky9nVHrXEtb8Nqxn3WkvDh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:23:d5:d6:bf:fb:ae:8e:a0:b6:da:27:06:a5:43:bb:3d:21:
a0:66:27:a0:d4:1a:00:e1:3f:df:a0:b1:67:52:2c:fa:9e:6c:
e5:4c:98:53:2d:fc:9f:70:60:95:18:92:dd:e5:74:dd:5c:96:
4e:b0:1a:72:c6:ee:57:30:25:63:bb:70:ff:25:74:c1:87:fc:
33:4c:b3:55:89:a9:f7:11:c4:d9:0c:6a:2a:92:5c:79:5b:00:
38:30:69:69:0b:55:36:b9:40:2c:89:46:81:69:e5:f6:04:bc:
65:d8:a2:87:a2:fd:0f:68:c6:9e:b7:3d:99:44:3d:9b:8f:0a:
a2:46:77:72:d5:82:35:72:c5:64:d8:e2:3c:72:15:90:6a:00:
73:55:68:21:55:b2:0d:ee:d3:b1:a1:04:31:c4:01:6c:51:85:
10:6d:e4:83:2d:e1:37:95:88:20:f7:68:f4:e4:1e:d2:4c:12:
dc:f0:9b:01:e3:74:b1:a2:35:29:52:33:01:74:29:b0:c0:0c:
20:f5:22:97:31:2d:49:e2:a1:b5:36:33:f4:14:78:d7:70:30:
27:de:14:6e:62:82:1d:a2:0b:f5:d6:bb:62:cf:ec:7f:9f:ad:
e2:57:58:fc:1e:ca:f1:19:22:a6:77:ef:86:41:76:69:32:74:
8c:20:a8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:02 2025 by rpki-client