Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier: URTOjkP4A+zgDSeS5TZssEtXcqvjTsSG9vp9oeP3HCc=
Subject key identifier: 95:82:A4:4D:F4:3A:DC:46:63:02:88:C4:73:0D:63:FF:EC:79:F4:F3
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial: 01974DB2639B02110C5764C0E64CA0EA1035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number: 102A
Signing time: Sun 08 Jun 2025 04:00:25 +0000
Manifest this update: Sun 08 Jun 2025 04:00:25 +0000
Manifest next update: Mon 09 Jun 2025 04:00:25 +0000
Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: PoGR1DjJWoVxfb5CzsqYDjyMC0DxN8Rcw306kW8TWCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:63:9b:02:11:0c:57:64:c0:e6:4c:a0:ea:10:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Validity
Not Before: Jun 8 04:00:25 2025 GMT
Not After : Jun 9 04:00:25 2025 GMT
Subject: CN=9582a44df43adc46630288c4730d63ffec79f4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:5d:6b:21:c0:28:1a:17:bc:4c:4b:98:e2:
f7:43:19:e9:5c:23:8a:cb:79:5b:eb:52:5b:68:c0:
4c:fc:3c:d1:8d:f4:a7:3d:88:a6:9e:a1:be:54:14:
f2:1d:cd:99:d5:bb:5c:38:21:58:e1:19:3a:12:4a:
a4:f0:63:12:2d:98:67:ce:04:13:ec:4e:d5:61:29:
e5:be:ef:8f:b1:c7:df:3b:0b:82:e5:3f:e1:1d:51:
6c:2e:f9:be:f9:08:b6:37:47:7d:ba:31:f9:b5:ca:
8d:7e:4d:b0:d0:96:80:17:34:2b:8d:a8:ee:7b:42:
3d:88:bc:a1:24:f5:8a:5e:3a:30:3f:c5:71:a7:6c:
a8:16:dd:57:25:5e:48:8a:68:ff:09:91:14:97:c9:
67:e7:5b:ab:27:4d:fd:24:80:f1:04:26:93:51:e4:
a0:ad:fd:94:cf:a9:5e:5a:6e:5d:5e:72:e1:b3:da:
8a:7b:20:14:65:ba:c1:65:8c:fe:af:59:71:10:45:
b4:69:30:70:09:6c:18:bd:30:59:54:e5:77:25:eb:
1a:5c:2a:9e:b3:c7:29:56:28:3a:2a:0d:23:2c:9c:
82:65:90:33:8e:5d:4d:af:a4:71:7c:70:65:69:47:
3d:ef:87:60:f7:7a:d5:61:f9:43:2c:8e:99:ee:6e:
c7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:82:A4:4D:F4:3A:DC:46:63:02:88:C4:73:0D:63:FF:EC:79:F4:F3
X509v3 Authority Key Identifier:
keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e5:01:54:24:e6:de:1b:6b:56:79:77:67:df:8c:31:64:19:
50:f5:42:cf:31:9f:31:0d:08:5a:59:75:ab:8e:d1:b9:c5:de:
c7:13:88:8f:7d:f6:e5:01:27:16:c9:4a:50:4e:5a:52:a8:a3:
6e:dd:10:04:be:08:53:67:78:93:87:29:a1:3a:ce:91:6f:31:
ce:f4:da:3d:aa:c9:8d:3f:c7:7d:ce:9a:6e:24:e2:89:13:e0:
b9:7e:1c:c3:6d:16:b6:d7:05:8b:4c:bc:af:9a:4b:df:1a:e8:
92:0b:70:18:ad:31:36:10:44:7d:e9:89:2c:c8:9f:68:2d:74:
57:80:64:a0:22:b4:24:45:c4:08:91:d6:d3:20:d5:ed:c3:8c:
78:4c:f8:24:ac:34:01:28:d6:ef:84:fe:c5:a1:e9:a3:bd:d6:
19:19:91:10:41:7c:bd:61:35:83:d5:5a:61:45:e6:b1:2b:c6:
cf:5c:41:7f:5a:e8:38:4c:6a:b1:53:31:0d:82:de:98:9e:33:
29:25:bf:3c:4f:54:14:d4:7f:55:a6:06:68:39:c7:c4:88:62:
dc:d6:2c:e8:4d:f1:aa:75:a2:60:38:21:48:e0:3c:4b:2c:b9:
27:8f:35:c2:c4:30:01:55:d4:14:e3:59:2e:5c:e9:37:db:31:
71:05:b4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:11:10 2025 by rpki-client