Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
File: AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft (raw, json)
Hash identifier: XW4Zc22EDpdYhJ+NxOL8uvM7uZzlSGoVHqchB1mHkC8=
Subject key identifier: A0:67:F7:9A:72:53:1A:A4:11:32:45:84:B9:EA:8D:7B:9D:86:AA:E1
Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
Certificate issuer: /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Certificate serial: 01965236DAF60D4276177B4B82C459A397FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
Manifest number: 14CD
Signing time: Sun 20 Apr 2025 08:00:48 +0000
Manifest this update: Sun 20 Apr 2025 08:00:48 +0000
Manifest next update: Mon 21 Apr 2025 08:00:48 +0000
Files and hashes: 1: AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl (hash: OremLlIiNla45BVRxiruk9PFduAqWRlEprP/PIVojWA=)
2: FGVVapfPvK0QzFf1pALkp5bEruw.roa (hash: TSwtNe6AniR+9RFExziwrrS0q9Xsbcr++0YQr2+oyJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:da:f6:0d:42:76:17:7b:4b:82:c4:59:a3:97:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Validity
Not Before: Apr 20 08:00:48 2025 GMT
Not After : Apr 21 08:00:48 2025 GMT
Subject: CN=a067f79a72531aa411324584b9ea8d7b9d86aae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b3:82:3f:21:e9:a2:73:97:3c:ac:8d:44:ed:
3d:e3:c4:2e:11:09:36:14:eb:f0:20:4c:91:59:56:
b1:de:e4:7b:ca:92:ae:2e:3e:24:c0:34:d1:2f:5e:
af:de:66:56:d0:2b:49:0b:9e:b6:2d:ae:63:10:95:
8a:2d:6e:9b:09:cd:1a:ca:08:ae:16:3e:bb:bf:4b:
90:df:46:84:48:9d:83:b5:fc:42:fa:c0:f2:01:fb:
27:82:9b:6e:07:60:7b:0b:24:cd:b3:4a:80:ea:6f:
fd:e8:bf:87:cd:0d:06:03:12:48:2d:b4:1a:52:4e:
76:ba:c9:de:29:ad:34:1c:3c:51:02:8d:1d:b7:21:
b9:01:54:ab:4f:cf:09:21:ab:e7:a3:ed:c7:ec:0e:
93:b8:95:7e:3f:48:cd:d8:c0:11:6b:d8:a4:45:3d:
2c:e4:a2:43:e3:f5:72:31:56:84:4d:ff:96:a1:30:
cd:bc:31:13:9d:ac:68:14:9f:d5:8a:e6:69:9a:d2:
fd:e9:92:33:84:c8:bc:97:b8:82:1e:5f:8d:6b:90:
e7:1d:f9:8d:12:a3:0f:77:26:72:df:10:a6:bb:71:
98:a2:31:ae:28:81:b6:63:2f:2c:e2:a8:7b:4f:37:
be:7e:ec:cc:d8:96:bd:34:0e:61:ce:fd:76:ed:34:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:67:F7:9A:72:53:1A:A4:11:32:45:84:B9:EA:8D:7B:9D:86:AA:E1
X509v3 Authority Key Identifier:
keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bd:71:98:2d:d3:17:ba:a7:8e:4c:2f:93:b9:fd:1a:f8:43:
85:63:b7:55:98:fe:25:30:33:1b:4a:23:d9:d8:5b:e0:66:5b:
81:16:e1:92:b9:8c:e7:10:ec:b3:91:45:2e:a8:65:f1:d2:68:
85:aa:dc:42:4d:9a:10:26:54:dc:69:5c:f5:75:07:2d:e2:a8:
2f:fd:b2:02:03:af:b0:1a:f7:8e:ee:1c:c0:7d:6b:a3:75:93:
a7:b8:60:f4:e5:fe:35:9b:40:57:fe:d5:b7:52:c1:dc:83:40:
22:4c:d1:1e:32:47:bb:ed:c2:1c:03:1d:90:f1:62:d2:f1:d2:
87:63:48:dd:bd:3f:74:66:15:f8:f7:58:d6:af:0d:71:b4:f8:
ee:d8:23:7b:3e:d7:0b:25:4a:d5:eb:1f:78:c1:16:0d:80:12:
83:55:7d:c9:cd:44:6f:46:53:bb:f1:b1:b5:71:84:38:32:69:
97:6a:3f:8b:9c:cc:5f:5e:a4:fa:00:c7:77:34:28:78:f6:95:
a9:7f:c7:e5:f0:10:76:7e:fc:61:d6:03:e7:4f:23:dd:2e:de:
19:13:63:f0:e5:66:b9:fc:e6:4a:9d:25:4b:0f:d8:a7:f8:1a:
ea:53:3c:2e:33:52:75:35:c8:26:90:0c:46:0a:b5:72:26:63:
e1:f7:a1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:10:01 2025 by rpki-client