Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: +ZV7lFK2OGHxyVCmGSbQ8ZjhqbPQuvGj9xoyncQtmZw=
Subject key identifier: AC:AB:67:60:D9:F9:10:BE:A7:AF:E5:2F:83:5A:68:56:29:CB:5B:19
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 019651C8F5D7C86C304AF0874B971E84E828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 06:00:46 +0000
Manifest this update: Sun 20 Apr 2025 06:00:46 +0000
Manifest next update: Mon 21 Apr 2025 06:00:46 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: k6DWb74Y8p0e272BOcXEFyHKGLkHmGCPSES8QlZfEpM=)
2: 4v0g_DeTqNJGOHL4ln9WhvFfDRU.roa (hash: sBcYkkYKQotMu1+q9bGq7Q8bcGlDCzRATiIZUTpTc8U=)
3: 5hSlWSeMSPQw8CT6h_sMd93nETk.roa (hash: wYDeOrdNcouRFYTYjjyBK+NX7iDJV9WRiz3yP1Z5BdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:f5:d7:c8:6c:30:4a:f0:87:4b:97:1e:84:e8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Apr 20 06:00:46 2025 GMT
Not After : Apr 21 06:00:46 2025 GMT
Subject: CN=acab6760d9f910bea7afe52f835a685629cb5b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:3e:b7:d7:0e:4b:97:23:bf:b3:b1:e9:ce:
eb:3b:0f:91:f3:8c:19:4f:ec:8e:b2:f8:b5:6f:73:
d5:02:d8:4e:dc:ec:72:72:28:f9:4a:24:b7:16:cb:
e5:83:af:26:9d:e8:75:a7:7b:2a:29:88:db:bd:f2:
a0:92:8d:9a:a3:ba:d9:3d:32:77:bb:24:bf:0d:b5:
f4:45:3e:ba:3a:d1:9a:ab:67:41:3a:a3:db:7f:45:
b1:64:61:d7:54:56:88:dc:8a:30:53:a2:35:19:38:
52:a7:db:91:d1:f3:ca:61:62:9a:84:9f:a2:f3:df:
62:64:37:33:33:76:2a:09:5b:57:d1:c4:f5:42:42:
45:08:5c:24:70:64:00:a7:79:e5:39:2b:6b:38:b4:
56:30:de:87:ce:52:8c:b4:ea:7c:96:2f:24:d2:ce:
b4:a6:f5:9c:83:b3:03:af:f1:80:14:68:ff:fd:20:
05:e9:3a:72:f7:3d:c1:f9:ba:ea:dc:02:d9:58:02:
6a:0a:52:f0:44:d3:b1:8f:c9:dc:2f:52:71:eb:d4:
5f:64:1d:e0:e0:63:8b:d0:0d:bf:92:11:7a:fa:d2:
0b:07:aa:00:2f:28:ed:b8:23:39:da:69:fe:01:e0:
d8:6e:ea:0f:d9:e1:b0:b2:7b:83:0a:86:44:35:83:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AB:67:60:D9:F9:10:BE:A7:AF:E5:2F:83:5A:68:56:29:CB:5B:19
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:52:84:9c:21:f8:45:2d:40:13:a8:bf:43:c1:6b:db:63:56:
4c:26:9a:ff:c8:db:b1:d8:11:40:b9:ed:02:43:39:23:e8:2c:
5b:e1:e1:81:03:1e:c7:2c:dd:46:d8:a0:bf:38:2c:0d:87:c7:
fa:8c:ff:bb:4c:77:00:03:b6:c0:ce:a9:e1:70:da:da:cf:45:
3f:b9:8a:aa:7d:88:f0:ad:bc:13:bf:c5:61:64:6b:54:5d:b7:
b7:48:d7:4d:3d:66:57:79:a1:09:4c:78:c4:f5:ab:f5:55:1f:
d9:1a:f2:a7:e8:9c:cb:52:89:51:ce:40:2b:af:93:d6:bc:0c:
d0:5f:e3:5b:ae:4c:ec:dc:57:95:96:77:74:0e:bd:e4:db:4c:
1d:aa:16:71:55:43:92:b0:6f:7e:49:fd:e4:28:99:5f:33:7f:
c3:c3:fc:16:85:9a:4f:9d:57:27:ea:cf:f1:3b:99:57:19:18:
f7:c1:57:62:53:9b:20:fd:eb:8a:d0:cc:cc:5e:af:ab:eb:21:
41:69:a6:26:dd:2b:ec:9f:af:60:e6:15:22:43:7b:19:33:3b:
4c:7e:f4:26:f6:04:0e:6d:5b:7b:36:b8:62:a8:b8:1c:b4:c9:
ec:e6:80:da:72:8d:6d:31:e5:2d:72:44:a5:84:69:97:7e:51:
9b:5f:8b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:09 2025 by rpki-client