Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft
File: _Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft (raw, json)
Hash identifier: Is5zGP7LeEn8B7/U4zBo9L+bD44zgB0YSaDeibk31aU=
Subject key identifier: 2A:3F:91:5B:B8:4D:BF:AB:99:93:9E:69:4B:01:BC:8F:06:DC:3B:F7
Authority key identifier: FC:07:2E:E2:51:5A:07:C6:67:E1:C5:CF:DC:02:10:E6:58:1B:09:7B
Certificate issuer: /CN=fc072ee2515a07c667e1c5cfdc0210e6581b097b
Certificate serial: 019652A5149A3D7691833F44049BFB846179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft
Manifest number: 123B
Signing time: Sun 20 Apr 2025 10:01:12 +0000
Manifest this update: Sun 20 Apr 2025 10:01:12 +0000
Manifest next update: Mon 21 Apr 2025 10:01:12 +0000
Files and hashes: 1: ZmTI_BE0CxW812diBboPemqYE3k.roa (hash: 8pQSyVxeeGwYbTb0adthXkVgEKcNeH2p/++sCFVOF1Y=)
2: _Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl (hash: Cfb2/GHljqipCnfDmUM2jQLtviTbI56KQV9R1maji0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a5:14:9a:3d:76:91:83:3f:44:04:9b:fb:84:61:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc072ee2515a07c667e1c5cfdc0210e6581b097b
Validity
Not Before: Apr 20 10:01:12 2025 GMT
Not After : Apr 21 10:01:12 2025 GMT
Subject: CN=2a3f915bb84dbfab99939e694b01bc8f06dc3bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:fe:1d:fa:f2:45:aa:91:77:ce:68:c8:ff:
a4:21:aa:09:27:99:7e:09:8a:9d:61:be:1b:c5:be:
a2:fb:8c:53:1c:f2:1e:05:3d:26:0a:e4:8e:a3:38:
84:93:c2:2f:74:96:d1:e5:1b:4b:e8:aa:b0:a4:9d:
20:44:91:01:94:18:31:71:70:60:e7:60:81:ba:eb:
73:9a:36:7a:b2:bf:43:06:65:aa:5d:64:22:74:8f:
a1:33:17:ff:9d:76:8c:2e:c1:d8:ec:45:01:ac:88:
da:a8:12:32:d2:3e:3b:d7:89:1b:53:b9:bb:47:37:
1a:a5:3d:6a:a5:ef:5f:46:28:5d:07:13:49:91:37:
08:d0:39:37:23:22:39:42:46:36:14:f8:fb:4c:65:
e3:51:40:52:61:ac:d8:33:0a:8c:62:8c:1d:ba:dd:
6d:a2:7b:57:af:9e:70:15:3c:e1:fa:78:01:31:38:
8e:45:54:99:3a:43:e1:bd:8f:83:df:9b:f9:e0:2e:
3d:9d:86:60:04:87:f8:3e:60:41:d9:17:d4:5a:8c:
94:65:14:0c:cc:8f:3d:f1:ab:6c:d7:99:06:b8:32:
f1:4a:dd:ae:41:e8:74:74:ce:5c:b8:4d:a5:80:25:
89:e0:66:de:3b:b4:67:b3:a2:e7:94:65:c4:72:a1:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3F:91:5B:B8:4D:BF:AB:99:93:9E:69:4B:01:BC:8F:06:DC:3B:F7
X509v3 Authority Key Identifier:
keyid:FC:07:2E:E2:51:5A:07:C6:67:E1:C5:CF:DC:02:10:E6:58:1B:09:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:20:70:76:f7:6c:cf:c0:29:b7:70:48:7a:af:7b:c4:04:9b:
33:3e:4e:4e:51:c9:54:ce:c1:58:67:a2:d7:1c:f1:52:f9:59:
7c:52:cc:de:a3:fc:ed:b1:6e:9e:84:81:11:e2:f5:f2:8a:45:
81:9d:1b:0d:2b:72:fa:ad:21:56:e5:ab:4f:2c:cb:a0:31:71:
e1:84:cf:95:4d:09:52:c7:4a:62:15:4d:8c:43:ed:4f:19:78:
f0:83:06:27:c7:91:4c:19:a9:b0:32:ca:92:df:57:c3:29:1b:
3e:f7:dd:9d:3b:3e:43:c6:20:94:2e:26:d0:af:4f:13:d8:b6:
7e:49:72:bc:af:68:4c:4b:eb:3d:2f:f2:76:97:97:e8:a7:b4:
3a:9d:b5:bd:a0:48:b9:5c:d7:3e:f3:9c:50:98:8b:23:54:d2:
7e:1d:d8:70:55:36:9c:e4:97:98:66:3f:38:c0:16:51:86:62:
12:ef:53:19:35:12:d4:f8:8c:ce:03:e9:5b:8d:cf:2b:16:15:
f5:75:c7:40:99:97:d5:3c:b4:34:a2:a5:d6:79:94:46:88:24:
17:65:38:fa:7e:a5:3e:1d:dc:29:7f:6a:fc:8c:84:d0:05:98:
60:47:83:c3:cf:92:d4:d6:74:27:29:72:61:f3:be:33:8c:04:
78:56:34:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:15 2025 by rpki-client