Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
File: AkhBfH_pzOxbnarMCPznmdZzCIw.mft (raw, json)
Hash identifier: ouM15b5SxAR98HYWrn7bhOmJswRKnCXUR3lUcHt6uLM=
Subject key identifier: 81:71:B0:5B:19:1D:D4:73:EF:E3:39:7F:6C:90:F9:22:CC:F3:50:FB
Authority key identifier: 02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
Certificate issuer: /CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Certificate serial: 0195903CEEC288E2E52639CD90D1F8A2FCBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
Manifest number: 0CCE
Signing time: Thu 13 Mar 2025 16:01:07 +0000
Manifest this update: Thu 13 Mar 2025 16:01:07 +0000
Manifest next update: Fri 14 Mar 2025 16:01:07 +0000
Files and hashes: 1: AkhBfH_pzOxbnarMCPznmdZzCIw.crl (hash: vPfFxQMtKSDTq+0g9CKncozN7pwIcDm9yaik1Trf2Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3c:ee:c2:88:e2:e5:26:39:cd:90:d1:f8:a2:fc:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Validity
Not Before: Mar 13 16:01:07 2025 GMT
Not After : Mar 14 16:01:07 2025 GMT
Subject: CN=8171b05b191dd473efe3397f6c90f922ccf350fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:f0:c9:33:a6:a1:07:4a:be:1b:8a:50:59:
2c:44:d1:9f:05:b8:08:1a:4d:9c:2d:a1:2f:eb:3f:
38:79:e3:d5:56:6e:77:d0:29:14:b3:20:38:6c:41:
47:93:67:ca:3e:4e:dc:54:c0:f3:21:ef:ae:61:7f:
d9:9a:80:e7:72:28:a1:c5:ae:2b:e7:fe:ff:a1:a4:
e5:44:d6:8a:80:a6:91:ba:50:1e:28:28:a9:e0:e3:
7e:22:53:3b:7c:9e:b5:c9:f6:91:f5:70:79:07:83:
ea:57:d7:0b:46:ec:0b:02:75:90:4c:c4:e8:70:4a:
23:7f:88:34:2a:13:ce:c6:0d:75:be:1f:f6:66:2d:
2c:d6:6c:fc:5f:7c:b6:c5:6a:f3:a2:2b:db:e9:d7:
e8:e6:7d:02:69:e2:f1:5d:28:11:94:35:79:1c:27:
10:07:f6:bb:1a:77:61:6b:cc:69:20:14:a7:5a:d3:
52:9a:6a:07:cd:42:c0:de:92:bd:f0:4a:3c:a7:88:
b6:61:16:db:3a:1a:d7:6d:9d:1f:cc:5b:73:8a:42:
83:99:03:b6:48:34:a9:78:32:01:cc:e9:a6:cf:13:
45:f2:fe:50:ac:07:75:2f:f7:ab:01:9d:40:1d:0d:
40:a0:78:6d:49:48:9e:e9:95:45:b6:87:b1:2e:77:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:71:B0:5B:19:1D:D4:73:EF:E3:39:7F:6C:90:F9:22:CC:F3:50:FB
X509v3 Authority Key Identifier:
keyid:02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e7:78:a7:91:96:a6:b4:f2:72:00:67:58:db:58:f8:1c:ea:
31:ec:9c:7d:cf:62:34:9a:41:8a:ea:90:db:6f:10:a7:7d:70:
fc:db:29:ea:df:c9:0f:f6:f9:02:30:b4:4d:70:0f:5f:96:d1:
b7:a9:01:83:6f:2c:f2:86:f6:62:89:1d:f3:aa:5b:f9:0e:6e:
89:32:83:05:ac:3c:10:d7:8e:d3:bd:34:de:f3:71:d8:a3:0e:
25:88:92:13:ed:f7:c5:6d:96:41:6d:2d:22:c5:e5:07:83:54:
35:8e:dc:23:1c:39:86:60:40:c5:23:ee:0c:d1:13:06:3f:84:
5d:b4:48:4c:37:e4:68:2a:72:6c:51:15:e2:6e:dc:f2:76:52:
b6:09:8f:a5:72:17:16:c2:44:ea:b1:df:4e:0a:16:a4:1c:ac:
84:50:24:7a:35:fd:ef:45:13:64:42:24:70:95:b8:0c:7b:43:
a8:44:2a:6d:df:95:69:43:6b:5c:53:7d:0a:99:c8:38:aa:df:
b8:97:a6:82:45:6e:8d:bf:ec:9b:da:c5:d1:91:24:9c:5d:9d:
a9:7b:f6:35:45:9a:3b:fd:87:69:fd:1e:17:41:57:54:29:fa:
10:30:09:38:b3:d4:be:81:53:69:a9:c2:59:72:c3:15:0b:84:
b3:ab:8c:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQPO7CiOLlJjnNkNH4ovy/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDg0MTdjN2ZlOWNjZWM1YjlkYWFjYzA4ZmNlNzk5ZDY3
MzA4OGMwHhcNMjUwMzEzMTYwMTA3WhcNMjUwMzE0MTYwMTA3WjAzMTEwLwYDVQQD
Eyg4MTcxYjA1YjE5MWRkNDczZWZlMzM5N2Y2YzkwZjkyMmNjZjM1MGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2nwyTOmoQdKvhuKUFksRNGfBbgI
Gk2cLaEv6z84eePVVm530CkUsyA4bEFHk2fKPk7cVMDzIe+uYX/ZmoDnciihxa4r
5/7/oaTlRNaKgKaRulAeKCip4ON+IlM7fJ61yfaR9XB5B4PqV9cLRuwLAnWQTMTo
cEojf4g0KhPOxg11vh/2Zi0s1mz8X3y2xWrzoivb6dfo5n0CaeLxXSgRlDV5HCcQ
B/a7Gndha8xpIBSnWtNSmmoHzULA3pK98Eo8p4i2YRbbOhrXbZ0fzFtzikKDmQO2
SDSpeDIBzOmmzxNF8v5QrAd1L/erAZ1AHQ1AoHhtSUie6ZVFtoexLnfLpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFxsFsZHdRz7+M5f2yQ+SLM81D7MB8GA1UdIwQY
MBaAFAJIQXx/6czsW52qzAj855nWcwiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtoQmZIX3B6T3hibmFyTUNQem5tZFp6Q0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9mMTY3OGMtZGRjYy00MjUzLTg1OTUt
NjNjNzA3NDQxYmE2LzEvQWtoQmZIX3B6T3hibmFyTUNQem5tZFp6Q0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9mMTY3OGMtZGRjYy00MjUzLTg1OTUtNjNjNzA3NDQxYmE2
LzEvQWtoQmZIX3B6T3hibmFyTUNQem5tZFp6Q0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALOd4p5GW
prTycgBnWNtY+BzqMeycfc9iNJpBiuqQ228Qp31w/Nsp6t/JD/b5AjC0TXAPX5bR
t6kBg28s8ob2Yokd86pb+Q5uiTKDBaw8ENeO07003vNx2KMOJYiSE+33xW2WQW0t
IsXlB4NUNY7cIxw5hmBAxSPuDNETBj+EXbRITDfkaCpybFEV4m7c8nZStgmPpXIX
FsJE6rHfTgoWpByshFAkejX970UTZEIkcJW4DHtDqEQqbd+VaUNrXFN9CpnIOKrf
uJemgkVujb/sm9rF0ZEknF2dqXv2NUWaO/2Haf0eF0FXVCn6EDAJOLPUvoFTaanC
WXLDFQuEs6uMXg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:16:58 2025 by rpki-client