Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: UPVK2SV8VDHAzBBx+LJJhitxhs+t+7mLvzct9nR4tMI=
Subject key identifier: 30:1D:90:29:3C:EE:70:ED:41:7C:75:B8:0C:CA:2B:D8:D3:BF:37:DF
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 019659EFFB3E896968442880AECCAEAF1063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 20:00:21 +0000
Manifest this update: Mon 21 Apr 2025 20:00:21 +0000
Manifest next update: Tue 22 Apr 2025 20:00:21 +0000
Files and hashes: 1: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: EHq6W8SboGUPh82903uHcyfIr65Pql/LRJBLFa5s8QI=)
2: TfDOBJVmJoj40V_l3LjkaTEjm8g.roa (hash: ReTHm2rRZcfjOGQDNdmXkBd+jk6YyXS+LSWab0KtASc=)
3: v50wWhyCI7hTEJpByG9mHooOhqA.roa (hash: E6PQDvh39GUQ1c6SbkD744Bu9C+vTY8Ul4lMsKxnnNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:ef:fb:3e:89:69:68:44:28:80:ae:cc:ae:af:10:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Apr 21 20:00:21 2025 GMT
Not After : Apr 22 20:00:21 2025 GMT
Subject: CN=301d90293cee70ed417c75b80cca2bd8d3bf37df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4a:89:71:35:84:a3:a5:7d:0c:64:d0:d6:cf:
67:01:3c:79:de:87:f4:f5:bd:cb:8b:a3:3d:ac:87:
2d:55:ee:35:38:d2:cb:65:0a:58:86:5d:9c:14:ac:
7e:62:c8:dd:f6:c6:31:c0:1e:83:27:50:ef:0c:1c:
a2:16:4f:6c:0e:50:38:17:e4:00:7e:86:16:af:b5:
ae:36:4d:ea:b9:c5:87:09:7a:43:82:9c:30:e6:5f:
03:0b:34:1e:ff:88:1b:70:f5:c1:59:bd:37:e9:b0:
96:75:d6:1e:28:df:7a:02:26:a5:29:33:3a:96:52:
e5:28:19:e2:42:4d:7b:e5:b8:ac:5f:12:22:fe:f9:
40:20:6d:36:ce:2f:1d:1a:72:4c:4d:d0:67:38:de:
43:b8:e7:07:5c:16:7f:6a:ed:d5:91:7e:a0:2b:30:
b8:20:53:72:37:8d:e2:b8:7e:5c:8f:84:3e:c7:f2:
54:95:21:73:f4:42:0b:98:c4:a4:23:e4:5a:c2:d0:
9c:ac:ea:ff:63:40:63:fb:22:a2:e8:0a:8e:65:4c:
8c:ff:9c:73:bc:d6:c4:2c:45:76:61:b4:c1:2c:a1:
fc:1f:f5:60:41:d2:aa:0d:bf:38:76:39:11:42:a9:
a9:80:9f:d2:2b:77:7b:a5:52:43:e9:95:13:34:8b:
49:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1D:90:29:3C:EE:70:ED:41:7C:75:B8:0C:CA:2B:D8:D3:BF:37:DF
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:30:5d:09:2d:32:0f:32:e4:d8:12:72:f7:cd:b9:09:14:a1:
5f:a0:d8:cd:83:9a:2a:d6:ac:bb:4d:4c:8c:06:9c:c7:32:ce:
26:02:1a:d8:8a:d6:bd:39:ad:a8:b3:86:b9:31:3f:16:9f:50:
62:ca:e6:be:ee:6c:13:0c:36:c9:76:d3:2c:ad:af:6a:6d:ed:
97:69:51:d2:56:20:50:7a:11:b3:c1:d4:17:04:5a:26:9a:a9:
c3:25:aa:f9:5e:fa:9d:52:59:05:00:e6:05:2f:b4:aa:d8:4b:
ea:26:bd:18:94:11:dd:b1:8c:4c:3d:d7:83:34:81:d9:e1:1a:
90:61:14:b0:1a:8a:d6:55:22:e9:f3:a6:25:7e:4e:08:cc:19:
90:8a:3d:d7:be:85:14:d0:a8:d1:6d:e5:1c:fb:71:4a:0e:23:
01:9d:e0:92:30:b2:b3:f4:5c:b1:d5:d9:b0:a4:3c:c8:93:81:
f8:2d:9b:52:fb:2b:bf:0a:9e:7a:9f:0e:9a:e5:67:2a:b1:48:
6d:57:d0:53:77:a9:c1:43:33:7c:6d:43:a1:26:e4:d5:99:54:
f0:a3:74:e8:97:bd:56:c0:60:8a:81:00:80:aa:70:7d:4e:ed:
66:f9:29:7e:fd:25:2a:f6:34:a5:f0:c2:42:3a:f5:05:8e:1c:
7a:80:63:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:11:19 2025 by rpki-client