Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
File: acl31Fwp2BvZI_3rHwkv80ZE4zw.mft (raw, json)
Hash identifier: bBR/KsqM8c2rdVlvb7xRDsaQqC0WvL7B7BfmrO3c+u0=
Subject key identifier: CF:D7:B4:F4:0A:F5:CD:A1:D7:F8:E0:CE:15:5B:0A:2D:7A:8C:15:B9
Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Certificate serial: 019609425057751E35704BDBBEAE792FAE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
Manifest number: 14D6
Signing time: Sun 06 Apr 2025 04:01:02 +0000
Manifest this update: Sun 06 Apr 2025 04:01:02 +0000
Manifest next update: Mon 07 Apr 2025 04:01:02 +0000
Files and hashes: 1: Mdki5Hd0a9qoQTU9ek_fjxSZC_M.roa (hash: pAUm7peLEtEelIaq9NrLFDpZyXIMHk6pqW2ILgJV6og=)
2: acl31Fwp2BvZI_3rHwkv80ZE4zw.crl (hash: 1NQr6BQs7PMwaNMGfdKSsEUl6rPo5Fwx2vsJaOebQak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:42:50:57:75:1e:35:70:4b:db:be:ae:79:2f:ae:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Validity
Not Before: Apr 6 04:01:02 2025 GMT
Not After : Apr 7 04:01:02 2025 GMT
Subject: CN=cfd7b4f40af5cda1d7f8e0ce155b0a2d7a8c15b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cb:c4:3c:a1:29:47:6e:5d:a0:e6:5e:2d:8c:
dc:57:4d:3b:54:86:7f:7e:39:22:cd:87:91:35:f5:
f6:cf:ad:d2:15:c4:dd:69:2b:88:07:b1:ba:71:c3:
1d:40:4c:fe:1b:e2:94:53:91:62:35:a8:bb:b5:fd:
cd:78:6b:62:2b:5a:c7:0b:ba:12:65:84:1a:af:05:
d6:c8:f1:7e:cf:0a:f6:0b:cc:12:e5:aa:5a:2f:9a:
7c:d8:30:a7:ac:7b:10:0d:e2:93:0d:35:8c:5c:56:
0b:7b:27:16:72:30:0d:c2:d0:08:c9:87:cd:45:d0:
2b:b9:81:2e:b9:07:a1:b1:76:a3:c2:dc:aa:57:2a:
c4:99:bd:e2:54:3a:69:bd:52:51:1a:72:64:e2:27:
bf:d1:5c:2d:19:15:bc:1a:e5:ac:65:8e:61:31:30:
8d:52:f8:29:3b:c9:b2:54:7a:a1:49:03:56:52:0d:
e1:00:00:9d:2c:d4:54:48:bb:cd:56:dd:42:26:e7:
f6:51:05:95:39:93:e2:af:df:6d:4d:eb:bf:be:9d:
fd:18:b9:ea:c2:95:32:99:58:7d:ab:ca:6e:77:51:
b5:6a:da:5b:fd:14:60:d4:ad:9c:dc:db:69:60:15:
71:3c:32:2f:7d:4f:d3:ce:de:c3:d5:85:cc:f4:4f:
09:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D7:B4:F4:0A:F5:CD:A1:D7:F8:E0:CE:15:5B:0A:2D:7A:8C:15:B9
X509v3 Authority Key Identifier:
keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:27:1d:58:ee:78:c2:39:f0:3b:88:89:28:67:ae:20:ae:dc:
b5:a7:d6:90:93:6f:67:a2:fa:e2:bb:d9:30:2b:27:f5:24:b2:
1b:ff:de:0e:87:13:b0:da:06:b0:cd:95:a5:d5:cc:d0:62:c7:
a8:da:b8:a3:98:85:6d:6f:ed:c2:c3:b8:81:5b:f8:39:44:0c:
56:58:bb:5c:de:22:03:54:be:10:4d:0b:88:8a:2b:47:d8:53:
0e:f2:7e:23:88:72:dc:68:9f:20:1f:10:f6:68:e8:e7:24:3a:
de:89:91:b0:5d:e1:46:33:23:12:62:fc:7c:ac:c1:00:6e:7d:
a6:5e:36:af:b0:93:44:d1:45:e6:1c:05:5a:cc:64:60:ba:b9:
dd:08:aa:cb:41:db:2d:0d:c1:da:44:6e:ad:b6:cc:b0:75:ba:
48:39:3e:c7:6c:0b:42:49:ac:2e:08:c0:5a:e5:65:24:00:95:
29:3f:f3:29:b1:9e:ad:e3:4b:5d:78:3f:37:2a:7e:bf:42:69:
f7:44:be:4b:85:9d:da:a9:98:ff:ca:46:bd:c0:02:f9:b2:e8:
9c:1e:d7:af:df:45:24:d3:56:8d:9e:03:3d:af:b3:30:f3:36:
33:eb:de:4c:7b:7d:88:0c:9e:82:dc:c6:ad:84:66:c5:41:f5:
09:8d:ec:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:15:24 2025 by rpki-client