Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
File: AmC3ClCt6tObcJtZAEbFLgzGkps.mft (raw, json)
Hash identifier: eVqSws8RNYLvHDhVljh0/fOx6o4iyVSkvvV63ywgJWY=
Subject key identifier: BB:0C:00:8E:E8:29:DD:C2:F3:8B:00:2F:AB:C6:7B:7D:AE:BB:ED:37
Authority key identifier: 02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
Certificate issuer: /CN=0260b70a50adead39b709b590046c52e0cc6929b
Certificate serial: 01964DEBB005095406D0ACCF07444BCBFCF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 12:00:13 +0000
Manifest this update: Sat 19 Apr 2025 12:00:13 +0000
Manifest next update: Sun 20 Apr 2025 12:00:13 +0000
Files and hashes: 1: AmC3ClCt6tObcJtZAEbFLgzGkps.crl (hash: pK6KXQu0RGHW/Kez0o2nBdMAU3P9B0VhmTGJm/MbeRg=)
2: Nnzra6MgMjwIPTBIOZIkaKMH6aY.roa (hash: AeoYOs9mV63Xly1m52PMpieci7ekofQ+wo4YmlONy4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 12:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:b0:05:09:54:06:d0:ac:cf:07:44:4b:cb:fc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0260b70a50adead39b709b590046c52e0cc6929b
Validity
Not Before: Apr 19 12:00:13 2025 GMT
Not After : Apr 20 12:00:13 2025 GMT
Subject: CN=bb0c008ee829ddc2f38b002fabc67b7daebbed37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:ea:01:ff:04:41:c3:da:d2:88:d6:ca:61:
cb:3e:a4:2a:8e:ef:1d:aa:68:f1:b6:61:9d:8f:69:
c1:df:74:30:67:13:1e:9d:e1:5a:5b:d6:7f:20:56:
5d:09:b7:66:5e:1c:4e:14:83:77:ab:f5:d6:5b:2d:
a9:57:d3:58:57:1c:ed:56:b9:5b:ab:f1:91:55:74:
ff:b0:8e:bf:a3:72:fc:bc:f8:c7:a7:24:28:91:86:
86:e3:c6:27:76:97:a9:73:d0:a9:5a:37:80:23:2e:
59:18:2a:f3:bc:b0:04:d3:28:60:24:6f:72:56:69:
f9:2d:15:3f:70:32:d1:73:a4:17:40:53:60:44:1e:
a6:83:7c:33:bb:14:a6:4e:08:86:e1:06:43:dc:3c:
72:be:a0:62:8a:61:fd:4a:cb:ea:cf:d9:bb:d4:37:
e5:2e:84:b0:86:4b:8b:05:ca:ca:d7:66:09:31:2a:
61:dd:cc:bd:7f:ca:93:7f:b2:5f:ef:51:4e:df:f8:
be:f3:c1:28:2e:b9:a2:7a:fa:d8:c4:ed:2f:ce:67:
8d:65:75:1e:44:22:b4:95:03:2a:a2:61:51:b8:3d:
be:7f:7a:4e:22:b2:73:dc:3a:a4:af:87:19:e5:f5:
e0:74:05:e5:d6:2c:c2:76:96:64:ed:72:b4:5a:03:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0C:00:8E:E8:29:DD:C2:F3:8B:00:2F:AB:C6:7B:7D:AE:BB:ED:37
X509v3 Authority Key Identifier:
keyid:02:60:B7:0A:50:AD:EA:D3:9B:70:9B:59:00:46:C5:2E:0C:C6:92:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmC3ClCt6tObcJtZAEbFLgzGkps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5eb130-a0f7-49af-a271-ebec2a42e60d/1/AmC3ClCt6tObcJtZAEbFLgzGkps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:89:e2:04:2d:44:31:ed:7a:40:b3:73:0a:da:97:4d:d7:02:
99:e0:0b:2e:bc:53:a1:f2:fb:1e:2e:10:b6:54:c2:ae:dd:d0:
a3:de:53:a6:f6:61:1e:37:a5:9b:e2:ae:f9:70:5a:b5:eb:ea:
59:f5:0d:77:c2:45:ef:21:94:23:88:14:ce:83:d4:12:14:90:
f7:1d:5e:23:c4:af:a5:58:3e:22:83:9f:1d:a1:c0:c0:ff:0d:
47:c9:fb:2d:8a:0e:c8:d5:1f:a3:47:e8:37:28:9c:09:4e:b5:
53:37:0b:23:15:50:16:2c:87:da:92:05:60:e8:7e:1c:43:6a:
ca:a0:83:e9:7d:98:56:1a:c2:1f:14:75:3e:63:a2:bf:71:f4:
3f:87:db:34:49:29:0f:f1:42:b5:04:b1:d7:00:1b:8d:41:73:
83:dd:05:01:71:ae:6a:2b:15:1a:90:63:ad:6d:cb:a6:b1:a1:
2d:b5:e3:4b:32:21:8e:3e:dc:35:95:8b:13:1f:8a:12:e2:70:
b3:0c:9c:42:c1:87:19:ba:36:97:9e:84:3e:5a:88:45:4f:83:
23:43:8c:7d:05:65:ac:96:d6:f7:17:7a:b9:dc:53:b3:e9:15:
42:1a:2c:8d:94:f1:c5:62:12:6f:b3:48:4f:fd:dd:7b:eb:c0:
b0:79:68:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:02:14 2025 by rpki-client