Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
File: AMe7gqYBJXucgs_3rHkz81E6TUk.mft (raw, json)
Hash identifier: ngxZJBZrKVrMy682YhFO2tq/zAa2wDokAIlMC7wdK24=
Subject key identifier: 97:1F:72:5A:EA:1F:05:1E:F8:93:63:CC:8F:50:3C:A5:0F:95:B4:28
Authority key identifier: 00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49
Certificate issuer: /CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49
Certificate serial: 019659156769326FB090119E820EE7C6DA03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 16:01:36 +0000
Manifest this update: Mon 21 Apr 2025 16:01:36 +0000
Manifest next update: Tue 22 Apr 2025 16:01:36 +0000
Files and hashes: 1: AMe7gqYBJXucgs_3rHkz81E6TUk.crl (hash: nalMWb16Hzj5dt59y97V0Ha9384IgFrT5Usn6+HYyvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:67:69:32:6f:b0:90:11:9e:82:0e:e7:c6:da:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49
Validity
Not Before: Apr 21 16:01:36 2025 GMT
Not After : Apr 22 16:01:36 2025 GMT
Subject: CN=971f725aea1f051ef89363cc8f503ca50f95b428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dc:3f:5c:ca:8f:a5:ac:82:c9:e9:c4:6e:e6:
10:e6:23:48:11:83:2f:f1:94:90:33:8b:a1:69:de:
90:7e:a8:d5:50:8a:33:1c:ef:5b:9b:70:a2:78:a1:
96:ee:0d:cd:df:e9:69:db:c0:42:ac:fd:39:49:ef:
a5:ef:3d:7f:73:c1:87:09:0e:3f:8c:1d:b8:00:b2:
da:26:ad:73:f5:52:bf:0e:9c:d1:78:37:10:49:d5:
a6:36:71:d3:4b:e1:7a:83:cf:6d:ae:ca:64:f0:dc:
07:70:11:1a:46:67:27:e7:48:ff:70:10:f9:c7:d9:
45:ee:76:bf:6f:70:b6:9c:84:72:2e:33:03:88:28:
0d:10:b4:43:05:9c:7e:3a:85:11:66:b5:da:75:c4:
cd:3b:bd:fc:5c:5f:80:ba:6a:28:33:84:c9:f8:00:
f5:cf:5a:39:3c:78:b0:5b:3e:d0:77:4e:33:13:61:
73:5c:0c:ae:38:56:76:d3:36:4a:ba:60:69:74:b8:
55:3c:58:da:19:42:be:75:95:e3:56:08:30:92:16:
5b:68:7a:bb:6a:45:55:e8:fe:29:61:7f:f0:62:a0:
b4:d8:18:90:2d:5e:67:20:e5:8d:d9:62:72:83:b6:
07:d5:bd:09:74:fa:0b:36:c7:f1:62:95:28:8f:7a:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1F:72:5A:EA:1F:05:1E:F8:93:63:CC:8F:50:3C:A5:0F:95:B4:28
X509v3 Authority Key Identifier:
keyid:00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8f:fc:37:cc:af:c4:af:76:e2:ed:5b:ba:27:bf:71:33:ac:
fc:b5:d8:55:14:5a:17:06:61:4d:20:ec:64:7e:2c:fe:d4:2e:
e3:94:b3:c9:fa:0d:33:9a:bd:a4:0a:fd:8c:53:1a:ec:a1:22:
f3:78:09:60:6f:ea:20:73:ff:d6:d0:78:9e:b8:c5:e7:f8:b0:
94:04:3b:49:03:15:52:cb:e9:f4:f2:cb:a0:51:5f:ba:13:4c:
b6:f4:56:4f:5c:5c:76:4f:32:b6:af:c8:3a:f6:dd:8b:93:4f:
6c:d3:8b:c1:4c:b7:3a:a0:2c:91:50:ce:83:67:f5:37:60:8e:
43:51:c5:06:82:75:74:40:18:f0:ff:81:b9:d5:41:09:8c:34:
eb:50:87:69:93:40:b5:83:72:1c:02:2f:4d:dd:fa:f6:e6:4a:
11:08:53:9b:81:99:fd:86:b8:e9:99:e3:84:ed:77:af:d2:96:
66:c3:05:ff:db:12:3f:a5:aa:1d:9c:1d:a3:cf:75:1e:c5:a9:
c5:3d:3d:2b:52:37:55:7b:93:20:89:cf:5b:1f:6b:35:75:68:
fc:4b:13:e3:35:50:9a:90:8f:aa:ce:17:e0:c2:bc:26:60:17:
2f:e9:3e:2d:77:93:11:39:07:dd:3e:16:c5:91:84:6c:9f:58:
84:49:42:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:01:43 2025 by rpki-client