Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
File: AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft (raw, json)
Hash identifier: lGLAksU0Y1caeL97b/DOoiMG/XEZpa1E1hiZkN4FESg=
Subject key identifier: 87:AC:E3:0E:56:F6:A7:9D:75:5C:67:40:64:EC:B9:BA:06:E8:6C:E7
Authority key identifier: 00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29
Certificate issuer: /CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
Certificate serial: 01965838CF0CE6D03D3F35D7181B30BE590D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
Manifest number: 046D
Signing time: Mon 21 Apr 2025 12:00:40 +0000
Manifest this update: Mon 21 Apr 2025 12:00:40 +0000
Manifest next update: Tue 22 Apr 2025 12:00:40 +0000
Files and hashes: 1: AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl (hash: kHQvGODVPhaCM4dkxmXWrVHjHxace/SnJ0t7wzLX7cs=)
2: e0RKB6c0KB07YznYp0xB1MsPmzk.roa (hash: qPmTA1Xz3mqQ1fzxdYI8NmB7dWpfMeJeVGXYLIJQJaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:cf:0c:e6:d0:3d:3f:35:d7:18:1b:30:be:59:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
Validity
Not Before: Apr 21 12:00:40 2025 GMT
Not After : Apr 22 12:00:40 2025 GMT
Subject: CN=87ace30e56f6a79d755c674064ecb9ba06e86ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:8f:6d:bc:3b:48:cc:d8:c6:45:03:a2:65:
1c:ec:02:b0:08:e4:ef:f0:66:35:ec:de:dc:6b:74:
60:51:61:f8:17:19:a2:8f:e2:76:9c:67:bb:bc:51:
cc:7e:18:c3:9b:d4:3a:5e:78:32:09:69:1c:c0:b3:
e5:26:56:ea:13:92:7a:b8:85:92:bf:e9:c6:c5:16:
56:86:eb:d8:73:f3:56:60:7a:d0:95:52:58:86:6b:
e4:c2:0f:6c:7d:48:0d:05:e1:66:8b:30:3c:ba:88:
67:af:c0:1f:63:42:39:be:e2:90:06:74:28:48:e1:
6f:06:0a:6b:af:2d:81:b6:38:ce:e7:27:c5:8c:1c:
ed:45:b1:d0:40:01:93:de:1a:d4:1e:d9:59:17:5b:
40:8e:fb:60:ac:d1:07:62:2f:0f:91:14:47:db:11:
77:0d:2e:5b:44:f4:f2:a2:08:f3:8a:87:d8:9b:b3:
3b:9b:56:aa:e1:04:ea:ac:05:af:63:8c:12:d6:7b:
76:f7:9a:74:01:4c:f2:c8:c7:f9:28:08:3a:f6:a4:
ff:fa:1a:ca:b0:ce:ef:7b:8e:a1:69:9d:66:f0:93:
36:39:a8:29:c4:1e:00:0c:57:a0:82:62:61:66:3c:
19:37:29:22:7e:4c:b2:cb:9c:0a:3d:c4:37:1c:17:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AC:E3:0E:56:F6:A7:9D:75:5C:67:40:64:EC:B9:BA:06:E8:6C:E7
X509v3 Authority Key Identifier:
keyid:00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6a:03:3f:15:91:1a:c8:9c:5c:98:8e:b7:cf:f1:bd:c8:a5:
78:1b:50:78:2b:80:d0:e7:53:29:88:d5:59:60:3a:f3:18:53:
7d:92:bf:ff:60:c7:bc:60:84:77:d0:bc:07:0f:8f:db:a5:7b:
9c:8b:22:96:99:f0:b9:53:1b:7d:98:c6:5c:74:72:f9:db:e8:
43:07:ab:d5:9b:9f:36:a6:70:32:86:a2:be:da:85:9e:84:e5:
6d:5c:4b:a5:01:ba:81:c5:55:2b:91:e8:de:1d:ae:7e:8a:aa:
05:57:35:50:2c:b0:a5:4b:06:5e:a4:f6:53:fd:e3:09:6c:f7:
72:b4:1a:16:00:18:b7:5a:af:12:90:a9:30:fa:b8:8f:c1:ed:
76:5b:61:a3:f5:ec:c5:d6:6b:02:d6:3e:11:95:f1:2a:17:bb:
a6:ef:9b:7d:36:64:6b:38:14:f7:45:3b:cc:13:f8:1a:f5:c6:
b9:ee:be:a0:d8:a0:cb:fb:8b:98:1a:c7:ad:54:7f:3d:80:73:
31:a7:a6:e3:0b:48:ee:a2:e1:22:0c:fa:41:69:b0:af:73:01:
54:8e:3a:35:f0:30:6b:8d:57:da:3a:a5:6d:df:86:40:8f:04:
1e:28:85:0b:5e:88:38:08:70:05:ae:4f:d9:f7:aa:d4:30:54:
b1:ff:07:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:27 2025 by rpki-client