Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json)
Hash identifier: 7ymxFvCcAcYpTDBZW4v/ptheoWVZ9gS1afBNJgd0RF8=
Subject key identifier: 32:05:8F:76:07:B5:2E:AC:15:97:7E:FD:6B:4F:F2:C8:15:A7:19:32
Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Certificate serial: 01962CAA79C7ACB6260EE3AC22CAE90DE677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
Manifest number: 14E4
Signing time: Sun 13 Apr 2025 01:01:31 +0000
Manifest this update: Sun 13 Apr 2025 01:01:31 +0000
Manifest next update: Mon 14 Apr 2025 01:01:31 +0000
Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: xYywMSqOyvUBX4SdWzKKAODX/bB0NMPxga57vSFdNI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:aa:79:c7:ac:b6:26:0e:e3:ac:22:ca:e9:0d:e6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Validity
Not Before: Apr 13 01:01:31 2025 GMT
Not After : Apr 14 01:01:31 2025 GMT
Subject: CN=32058f7607b52eac15977efd6b4ff2c815a71932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:5c:8e:31:ca:2b:96:cf:15:14:5d:18:72:
52:9b:68:05:b4:17:64:ea:bd:bd:94:99:9d:8d:a6:
d0:31:0a:65:c8:92:44:d0:10:aa:b6:ad:18:6f:2f:
27:f1:e0:af:7b:90:19:42:a7:5d:52:3c:59:b4:9c:
61:40:eb:ad:de:fa:f7:a5:df:7f:51:32:45:3b:3b:
03:a0:e9:28:f1:90:65:08:bf:3f:22:92:1b:82:bd:
65:44:e6:41:ef:4a:e9:d4:a5:e1:e7:2d:b4:15:c6:
66:86:ef:da:d6:00:99:1f:98:62:cc:a3:04:bd:57:
c8:c1:c5:2a:f7:f0:c5:b3:35:c6:d8:b8:8f:76:82:
99:f5:eb:56:70:55:ac:95:aa:cc:2b:88:19:d3:12:
57:84:91:70:6f:35:8b:ac:be:a4:d3:b7:ad:a4:a8:
64:12:4c:10:19:f0:d9:04:c6:94:34:6d:64:57:a3:
75:ff:81:b5:4f:48:d1:f3:00:2e:87:a2:20:c8:d9:
29:ac:3f:a2:b4:10:48:48:14:0a:41:6c:3f:d3:63:
9b:4f:0e:01:8c:06:69:71:03:f0:21:88:1c:c3:7e:
d8:49:49:1f:75:08:cc:7b:94:b0:58:86:8f:e5:ec:
da:7e:1e:43:a6:f1:65:90:5d:74:fd:45:86:7a:28:
b2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:05:8F:76:07:B5:2E:AC:15:97:7E:FD:6B:4F:F2:C8:15:A7:19:32
X509v3 Authority Key Identifier:
keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d7:39:59:1c:5c:8a:89:67:98:9e:06:41:63:b8:aa:a5:4b:
83:f8:58:13:68:48:e6:6a:d3:27:f3:3a:70:b7:5f:9e:83:9e:
43:ee:87:f4:3e:dd:b3:f4:31:9d:bb:01:03:48:6d:03:c1:ff:
6e:21:8b:64:83:c8:29:ec:f9:ea:93:6d:77:51:0a:60:5a:76:
03:39:9b:4c:02:f8:15:38:ff:7b:c0:d3:81:69:4b:d1:c3:97:
22:93:f2:61:30:cb:dd:b9:67:e0:13:ed:86:56:de:91:79:f1:
43:dd:59:bc:a5:93:2a:4b:a3:ec:e9:7d:a2:77:d8:5d:c0:ee:
c0:c9:6a:73:cc:ff:14:4f:69:44:e0:0b:70:38:f6:79:53:c8:
54:eb:03:cc:d7:4e:a0:a1:44:25:19:46:de:02:e0:61:c0:b1:
7a:b3:96:42:c1:5f:c5:b0:4f:8a:3b:f4:02:55:e5:bc:16:0f:
f2:53:07:23:35:91:8d:7f:a0:9a:7f:de:68:89:1a:56:7d:9a:
1f:e1:4d:c3:54:e8:4c:79:5a:10:2d:ba:4a:63:39:9a:97:6c:
48:19:4a:fc:4f:1f:7f:9a:ab:ee:c0:be:28:02:e6:6f:27:93:
33:be:59:3b:d5:09:48:b4:90:ed:de:7f:0a:eb:f5:cd:67:a7:
ff:66:b6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:20:48 2025 by rpki-client