Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
File: AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json)
Hash identifier: K1WwVTShJVeH/F9OZ/tH6gO2nUlCFzeGvASEe37ukr0=
Subject key identifier: 59:94:F9:9C:80:CF:E0:F0:18:77:12:AA:5F:BE:5D:B9:09:2B:02:9C
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 01960A1E77EC129FB2A79D684E9ABEB20C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
Manifest number: 063A
Signing time: Sun 06 Apr 2025 08:01:30 +0000
Manifest this update: Sun 06 Apr 2025 08:01:30 +0000
Manifest next update: Mon 07 Apr 2025 08:01:30 +0000
Files and hashes: 1: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: PH4TPMEp+pYm8nAkA4p0UA/r9/pLf3A2FdZ1IM3MAvg=)
2: F0fLEPNHCyvyIlmIFcsqkPyplGA.roa (hash: km4WfLRxUHxr5HonrrBoTZPZXAmt4eVnZ393OPRJNmw=)
3: I52JmxS8ms2LXewaNvexpBIItdM.roa (hash: wE72dqwKEdun5Ic36ck9eG0u4nkqju4VoFB4cJuV7v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:1e:77:ec:12:9f:b2:a7:9d:68:4e:9a:be:b2:0c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: Apr 6 08:01:30 2025 GMT
Not After : Apr 7 08:01:30 2025 GMT
Subject: CN=5994f99c80cfe0f0187712aa5fbe5db9092b029c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8c:15:48:f7:1b:2d:63:f6:e5:b2:9e:c1:a2:
a0:e6:d3:fa:c4:c4:e9:eb:44:1c:c3:00:4a:14:6a:
61:b9:8f:b3:72:aa:ce:9e:f9:28:9a:2a:40:d6:8f:
0e:c4:72:b9:9f:d7:a8:08:78:58:65:2b:b3:55:34:
de:d2:ca:c4:62:87:f3:33:5a:9f:4e:da:a2:e1:1c:
2f:94:14:38:ae:77:5e:53:23:51:75:88:3f:ac:c2:
a1:95:34:d2:80:4f:ce:1c:ca:22:76:8b:55:e0:9c:
69:12:94:3c:04:13:ef:35:1e:89:a1:18:f6:97:77:
9b:c2:36:f4:e3:58:e9:91:77:cb:34:7f:74:57:9a:
d7:80:ac:c5:d8:ba:0d:9a:8d:ba:af:65:25:2d:83:
55:b1:c2:28:30:f9:30:e9:19:bb:97:ca:32:dc:8e:
56:0c:50:b2:dc:74:36:46:b1:61:72:d2:2f:e3:7f:
6c:be:d6:65:a5:c0:26:5e:0e:1b:27:6d:53:2e:8e:
5d:5d:79:09:5a:a5:f3:34:9d:bd:b9:2f:d0:6b:58:
9e:71:73:dd:23:3b:ff:4f:43:17:97:61:d2:4c:c0:
53:9c:52:a9:16:54:d4:f6:3d:01:6f:88:6b:9e:e2:
9e:cf:8e:ee:32:43:a6:0d:15:8f:76:a7:b9:af:ec:
59:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:94:F9:9C:80:CF:E0:F0:18:77:12:AA:5F:BE:5D:B9:09:2B:02:9C
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:12:a6:f4:75:d9:6e:b2:46:dd:49:f0:f8:10:8f:a0:c3:b3:
e2:fa:34:30:fb:9a:fd:d3:f2:f1:fd:b0:4a:66:80:89:8c:92:
0e:44:9d:01:83:92:b3:c1:68:e6:23:01:fa:7a:f4:5a:e4:f1:
85:6f:1a:21:d7:f5:0a:0d:2a:02:14:75:56:f8:d3:d2:57:18:
8a:33:e2:46:4d:c2:49:0a:27:2a:6a:ff:0e:de:12:cb:33:da:
91:52:94:8f:87:25:12:65:01:c3:96:db:69:b2:e1:40:1f:9f:
e3:2f:b1:0f:fb:3c:68:c1:15:74:ee:89:04:10:b0:f1:f9:31:
88:cb:ce:85:04:7a:56:32:a1:b9:d9:32:5e:03:9b:1f:55:f0:
49:96:47:5a:27:71:d4:8e:a3:2b:1e:d7:9d:35:7c:2f:18:90:
e4:e2:e0:b1:d9:8a:6f:5e:17:a1:56:c1:0d:71:48:f4:c3:88:
8d:dd:60:8d:1c:48:30:1b:45:8d:1a:b2:98:be:60:47:06:f8:
35:80:f6:e6:88:3e:0a:0d:28:a1:69:be:5e:d2:69:5e:bd:df:
1c:24:74:e5:41:29:5e:b7:6d:01:25:1c:d4:01:06:62:0f:2d:
58:42:c5:66:fa:1c:ee:db:e0:8c:19:86:01:67:aa:a4:73:75:
0a:e1:9b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:54 2025 by rpki-client