Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
File: AQChacjmlsoWm1mcehcRk__wbSo.mft (raw, json)
Hash identifier: pnLvemQMWDT4vV27STkeUb3Hdrwup3jPzTU22dPpvAU=
Subject key identifier: 78:2F:EC:95:3E:56:47:AA:E3:B5:2C:8C:55:47:EF:82:50:A5:B5:67
Authority key identifier: 01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
Certificate issuer: /CN=0100a169c8e696ca169b599c7a171193fff06d2a
Certificate serial: 01964E90A55E659A8A9D7404B1CB9D401B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 15:00:24 +0000
Manifest this update: Sat 19 Apr 2025 15:00:24 +0000
Manifest next update: Sun 20 Apr 2025 15:00:24 +0000
Files and hashes: 1: AQChacjmlsoWm1mcehcRk__wbSo.crl (hash: K5uZLXFgWneS/kwPSwuPc/6aDdVTqKJU0HSbOx+u6lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:90:a5:5e:65:9a:8a:9d:74:04:b1:cb:9d:40:1b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0100a169c8e696ca169b599c7a171193fff06d2a
Validity
Not Before: Apr 19 15:00:24 2025 GMT
Not After : Apr 20 15:00:24 2025 GMT
Subject: CN=782fec953e5647aae3b52c8c5547ef8250a5b567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:43:75:d1:02:1d:f0:50:03:da:b6:78:aa:33:
7e:c2:b3:94:39:bd:bf:15:ac:17:8b:cf:54:4a:c3:
27:90:bf:7c:8b:90:c0:a3:dc:44:a6:41:3b:16:bb:
7f:03:41:eb:56:97:24:6b:20:64:e3:7a:a3:61:a9:
71:85:ff:00:db:dd:d9:64:de:f1:9b:e6:89:53:99:
54:c5:0a:86:71:de:5b:67:58:d4:7e:5d:0e:48:cc:
f4:b5:d8:b7:c4:f3:1e:9c:29:bd:00:fe:a2:01:aa:
28:32:ae:d0:df:82:c5:40:ed:3f:06:2a:14:47:d7:
0b:0b:cc:0f:d5:4a:fc:a5:92:63:b3:cd:63:e8:62:
5c:c6:a3:f1:6d:ba:e3:4d:91:c3:e6:ae:00:af:7c:
cf:f1:05:15:7b:91:9b:30:2b:7c:61:24:43:53:ab:
77:04:b2:c7:8f:19:84:b3:5b:27:2a:cd:f0:8b:e1:
17:c3:4c:21:f9:f8:19:7a:03:9a:65:87:cc:26:25:
3f:de:ec:c4:7c:5a:5b:7d:8b:26:16:74:e5:77:87:
e0:81:98:e8:a7:07:3b:96:b6:01:c2:e8:3c:79:b2:
00:a2:12:17:6c:d1:5b:4a:5d:69:b4:36:c9:b2:5a:
b0:bc:a2:19:b8:20:d9:1e:73:94:b4:b5:af:39:f3:
a3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2F:EC:95:3E:56:47:AA:E3:B5:2C:8C:55:47:EF:82:50:A5:B5:67
X509v3 Authority Key Identifier:
keyid:01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ad:77:b5:bb:c4:82:e0:6d:d4:94:ed:11:40:36:f8:10:61:
e2:0e:0d:6c:e8:0e:64:48:3a:5d:34:db:81:ed:02:c1:d2:b2:
c7:ae:fc:95:ac:89:c5:cf:37:31:ea:49:c3:8d:de:b7:fc:cb:
e2:50:bd:53:a1:58:f8:95:52:6b:a8:9a:e3:86:2f:1d:05:95:
a8:db:c6:06:6c:10:13:49:4c:96:08:71:62:b5:17:62:37:38:
e3:a5:10:8e:4c:4c:61:36:ef:28:ec:5d:d2:f5:40:0c:3c:dd:
8e:da:0c:49:39:8d:0a:8f:b8:22:3f:a7:59:3b:70:07:06:c1:
6e:80:f6:d7:b9:92:8a:f6:4d:bb:4f:76:1c:70:6b:f0:56:da:
70:4e:a3:1b:01:3f:b4:64:46:e5:e7:b2:21:ca:03:b2:89:70:
a7:6f:d8:65:f8:85:73:bd:92:50:9e:92:b4:b4:42:76:57:74:
b8:d1:68:78:cb:13:02:e6:1b:c1:9c:f0:08:40:4e:9f:3a:ee:
6a:a8:60:61:ff:8f:5c:2a:1c:c9:1f:96:41:fa:a2:f0:a4:28:
84:63:71:25:aa:0b:51:57:7a:9b:64:a4:79:30:56:81:9f:7b:
88:98:00:03:60:ff:06:63:23:b9:66:68:20:0a:d8:50:50:fa:
0d:2c:1e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:14:06 2025 by rpki-client