Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
File: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft (raw, json)
Hash identifier: P/SFLUSBUiPjxaGJTvOBltgT0wtPA+X+nM1+Y6UJKD4=
Subject key identifier: A2:5B:00:DE:ED:B2:1F:4F:9E:51:B6:11:39:89:2D:AD:E0:A9:DD:4C
Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Certificate serial: 01963DD448DD0622DAF83A1D4A9A273D263E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
Manifest number: 0B21
Signing time: Wed 16 Apr 2025 09:00:44 +0000
Manifest this update: Wed 16 Apr 2025 09:00:44 +0000
Manifest next update: Thu 17 Apr 2025 09:00:44 +0000
Files and hashes: 1: 5rhrt2Pbzdo3SB0HVaTD62_t4Tg.roa (hash: y0iyxyMR7FjHlxAFSdTCsP19Zpu9WbwfJlDLERXkCss=)
2: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl (hash: J/2pZJEYbqABHboA/JtU8Doe5klyHazzJBNoLJ1qInU=)
3: FXe_JPwCxokWG0F8sL8Vx_t96gE.roa (hash: 9THWoynL84G88vnVxVYdONxnlu6uMlCDE+r39l01xOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:d4:48:dd:06:22:da:f8:3a:1d:4a:9a:27:3d:26:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Validity
Not Before: Apr 16 09:00:44 2025 GMT
Not After : Apr 17 09:00:44 2025 GMT
Subject: CN=a25b00deedb21f4f9e51b61139892dade0a9dd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:32:1c:fe:42:4b:b1:99:b4:6e:af:d8:f1:
e9:0f:58:ee:82:6d:53:66:f1:b5:91:47:12:07:bf:
e8:45:03:48:9c:7f:02:32:31:1a:27:a0:33:f3:2b:
ff:d4:39:ed:82:24:c5:6a:e6:2d:d3:ba:00:43:a1:
1c:4f:38:08:76:a1:6c:2c:59:4c:c9:31:44:35:d9:
f4:8a:87:5c:ef:8b:eb:e5:f5:b0:77:33:29:f8:02:
5d:2a:4d:93:54:c9:90:2e:03:a1:da:c3:c8:97:d1:
f0:9d:a3:db:72:9c:8a:90:ec:5e:03:bb:e2:08:bf:
7c:ee:ca:41:d2:cb:3a:28:f7:69:3e:8f:31:a8:ed:
5b:78:df:6c:1c:b1:14:95:56:21:11:8e:34:d3:e8:
9a:f4:9f:6b:e3:e8:ec:cc:08:ae:af:c2:cc:cc:e2:
4b:68:c0:76:42:f6:ec:18:37:27:13:8a:d1:f5:55:
bd:23:29:cf:c2:ad:da:4b:bc:ff:6c:bd:fd:bb:c3:
55:44:b2:1f:94:1a:d2:c3:64:73:79:b2:12:ce:30:
63:1b:81:56:30:e0:01:af:a5:95:8f:24:f0:79:7d:
e4:06:13:5f:37:40:f4:c1:08:16:bd:7e:29:16:62:
2d:6a:cf:3f:7f:cd:f7:dd:c9:72:f3:86:37:0b:4b:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5B:00:DE:ED:B2:1F:4F:9E:51:B6:11:39:89:2D:AD:E0:A9:DD:4C
X509v3 Authority Key Identifier:
keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:79:73:b1:48:ad:f1:55:00:da:fb:94:03:5c:aa:42:09:aa:
71:35:61:c7:8e:6d:dd:71:2f:02:cb:7d:a2:06:84:71:96:19:
59:39:49:7f:6e:65:a2:86:71:dc:2b:a4:14:14:cd:22:46:6a:
c6:73:08:8e:48:4c:d5:af:00:3f:76:46:a6:0d:62:b6:95:e4:
b1:eb:12:fd:3e:b7:46:ed:43:c7:d3:b2:c1:3e:8a:fb:46:37:
34:84:31:50:ca:ae:9b:5a:7c:fc:6f:b0:ac:55:44:16:6a:fd:
83:a7:65:02:fd:70:df:b1:38:6f:3f:fd:8e:29:ff:a3:75:5f:
44:89:39:77:d1:9b:06:8d:34:7d:a1:d8:ee:0a:e0:b7:1b:ad:
68:c9:03:dd:12:d9:03:86:71:53:ac:3c:66:bb:38:65:7d:aa:
49:f0:28:5f:85:26:e2:f9:7d:84:26:52:fc:20:40:77:ea:61:
d8:05:a6:a0:56:f0:8e:27:95:41:68:44:8a:94:74:82:47:4d:
d2:6d:21:06:b0:29:b2:4f:15:91:87:fb:71:cb:85:c5:ec:75:
51:e9:82:c6:de:89:92:20:ae:dc:b8:2d:28:14:90:08:52:1b:
1f:85:f7:97:91:f8:06:3e:5f:a1:66:5e:db:d4:e0:c0:c8:74:
b2:33:c6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 18:16:52 2025 by rpki-client