Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
File: AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json)
Hash identifier: n4YNoIuDC/BMBZ3RK/VPO8qf5IFzrJEpZzDbu4ck/aQ=
Subject key identifier: EC:58:12:B7:6E:08:EE:16:EC:B8:63:B6:9C:57:6F:26:07:CE:CA:1F
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Certificate issuer: /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial: 019632AC5C62E4F843AEB45A5F7940726E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
Manifest number: 14ED
Signing time: Mon 14 Apr 2025 05:01:18 +0000
Manifest this update: Mon 14 Apr 2025 05:01:18 +0000
Manifest next update: Tue 15 Apr 2025 05:01:18 +0000
Files and hashes: 1: 0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa (hash: Mgc0oHHsHOO9ITKbdZfi4fNvcPC7tfyysZUz/pdAbRc=)
2: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: fI9R3TEDf1VxtTn0xijMZAITLn/exlP4gHNn79a53Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:32:ac:5c:62:e4:f8:43:ae:b4:5a:5f:79:40:72:6e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Validity
Not Before: Apr 14 05:01:18 2025 GMT
Not After : Apr 15 05:01:18 2025 GMT
Subject: CN=ec5812b76e08ee16ecb863b69c576f2607ceca1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:86:f7:ef:12:64:98:dd:c2:19:62:4f:11:0e:
5a:27:17:b6:34:30:10:b7:7b:68:5c:d2:a8:9a:d1:
a3:88:66:6e:b9:c5:ca:a7:d8:2f:54:e5:ea:ef:2a:
50:f3:f8:6c:d9:cb:1c:21:7b:a4:a8:9c:ea:3a:4c:
e0:60:e8:f3:e6:35:87:4b:51:7c:d5:06:f7:78:8a:
b3:d3:20:e3:45:5d:7c:4f:20:40:99:01:0e:e2:13:
45:01:b9:b7:8b:5f:e7:f0:e6:34:5f:1f:d4:a6:ae:
64:95:a0:5d:48:3e:b1:37:53:0a:bc:9d:a7:f7:c3:
7d:aa:1c:4f:29:ce:a6:f2:5b:7b:93:fe:1a:eb:ec:
3c:18:03:f4:27:2f:42:67:cc:a6:c0:40:8a:72:69:
bd:e8:5b:93:c8:e6:9c:3b:cc:9d:41:3b:d9:ba:08:
ed:cf:99:ef:fc:f8:79:b9:86:9e:b8:bd:cf:b4:07:
a8:0b:d7:68:47:8e:c9:11:90:eb:74:48:89:6a:1c:
af:86:c9:68:7f:ee:1c:15:f7:3f:0f:6c:12:e8:d9:
64:3d:a4:44:33:75:9c:00:ed:a9:ca:cd:7e:ed:0c:
ee:2b:94:8e:6f:82:dc:90:e4:2e:63:bf:12:d6:88:
36:59:10:c7:3e:76:92:f9:55:79:21:9e:f2:63:57:
68:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:58:12:B7:6E:08:EE:16:EC:B8:63:B6:9C:57:6F:26:07:CE:CA:1F
X509v3 Authority Key Identifier:
keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:26:18:7e:fb:92:17:93:50:7c:32:52:e9:41:5a:a2:53:9c:
87:bd:90:36:4f:7e:b1:fc:59:2a:1c:5a:2b:a7:f4:51:91:88:
05:f7:9f:71:ca:5a:ea:94:43:be:d4:5c:1f:57:9d:02:ea:9c:
2b:b0:56:6b:3c:a2:3e:78:ad:6c:9c:88:1c:a1:a7:67:6b:3d:
b9:7f:0f:ef:78:c4:27:9a:ab:0e:c7:d1:9a:87:58:b1:74:b6:
a4:6c:e0:90:53:78:b9:da:d3:0c:6e:dc:8c:b7:ba:1a:fe:39:
90:3d:0d:f9:de:45:a4:df:75:05:03:2b:86:bb:9d:cd:69:75:
b8:1c:d4:a3:ce:2e:e8:ef:ff:89:b9:57:11:0d:c6:99:f6:53:
7a:47:a2:0d:a0:b9:e7:b4:bf:ee:01:fc:76:ed:48:5b:50:80:
81:a3:78:ec:7e:bb:0d:ec:f6:e5:65:69:6d:fa:98:fd:d6:2d:
db:25:cc:73:24:07:5e:c6:74:7e:a8:cb:b0:3e:01:5a:8b:c9:
e8:dd:9f:ec:fb:66:40:38:0e:f9:ab:21:31:10:da:1f:4c:f1:
3d:39:71:d4:de:92:85:dc:14:12:6a:44:a5:09:5a:67:c7:63:
e9:b9:c7:61:c3:ca:49:09:f9:2b:95:fc:43:07:76:d2:f2:1e:
c2:59:8e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:56:15 2025 by rpki-client