Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
File: AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft (raw, json)
Hash identifier: N8t2LQeHXYniLLO1taDbfdl9Ci9XdOmYLdoIlDVc8FM=
Subject key identifier: 03:1C:23:5D:6F:D1:C6:D3:F8:22:DD:F3:22:51:6C:8E:81:76:2F:83
Authority key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
Certificate issuer: /CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Certificate serial: 019658A680AF7A565CEC50D677D2F4C9F4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
Manifest number: 0E92
Signing time: Mon 21 Apr 2025 14:00:29 +0000
Manifest this update: Mon 21 Apr 2025 14:00:29 +0000
Manifest next update: Tue 22 Apr 2025 14:00:29 +0000
Files and hashes: 1: AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl (hash: WpV3H6JCrMHZDQp3+ZfvaXpV/SzkWukFiKw46e/Fl9c=)
2: lnFBPEwYXwbrEbBc_1U4hqBIiD0.roa (hash: pkORWbBvX/TB59ufAxJ53BtkrDGiG+iuAuMuYoIsXog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:80:af:7a:56:5c:ec:50:d6:77:d2:f4:c9:f4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Validity
Not Before: Apr 21 14:00:29 2025 GMT
Not After : Apr 22 14:00:29 2025 GMT
Subject: CN=031c235d6fd1c6d3f822ddf322516c8e81762f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f6:a5:88:2f:6f:f9:26:f0:d0:4f:ff:e0:29:
1c:0e:79:bd:a4:5c:ee:8c:fd:56:90:f8:af:cb:24:
82:2a:db:45:a1:3b:8e:3b:68:00:aa:c2:42:74:39:
49:ac:d1:79:d0:92:cb:3f:90:89:fb:5e:f2:1c:b7:
0a:3c:dc:7f:af:3d:5c:ef:84:d1:44:84:5d:e5:0f:
dc:c2:c9:61:bc:56:d5:31:3f:a1:2e:7b:db:05:94:
80:6b:57:04:6f:1b:25:5b:59:41:56:b6:12:0f:59:
f9:dd:24:76:f3:59:62:e0:22:80:fe:41:86:bd:ce:
05:f5:59:81:7a:4d:42:83:d9:ac:67:01:1c:cc:59:
49:9d:3b:53:7b:17:1e:09:b4:55:96:7e:ab:07:de:
38:ac:ac:12:6e:32:00:29:c0:aa:4f:20:81:25:56:
65:14:45:7e:98:5d:f4:e8:bf:a8:9d:20:22:86:e8:
32:74:db:72:64:f4:b4:18:15:e7:9d:9e:79:85:20:
05:c9:ba:97:ce:d0:4c:70:02:9c:4c:61:39:f6:05:
d0:29:a9:d7:cb:88:49:6b:17:3f:d7:8c:51:43:33:
6d:cb:4e:0c:08:a3:4d:8b:90:d2:9c:0c:3e:9a:78:
6e:9c:02:84:03:44:d7:3a:24:40:06:45:ba:8a:10:
0b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1C:23:5D:6F:D1:C6:D3:F8:22:DD:F3:22:51:6C:8E:81:76:2F:83
X509v3 Authority Key Identifier:
keyid:01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3e:5f:da:bf:1d:15:e5:2e:46:60:1d:2b:a4:d1:a1:94:62:
a3:13:bc:f8:e3:78:ee:5d:91:8e:0c:82:9d:80:dd:fd:f4:a8:
82:f9:35:49:ea:c8:e5:25:cf:b2:b9:78:5c:8a:b7:8d:d5:30:
e1:ad:90:b0:84:94:77:af:52:53:0a:14:3b:1c:7a:26:fc:dc:
97:3e:7b:ca:cf:e6:be:d7:6e:94:02:bd:cc:51:ff:e6:44:86:
a1:b1:ff:7b:ec:45:cd:74:cd:42:0e:b6:0e:25:2a:19:54:7e:
5d:4f:10:4b:69:75:ae:c5:c9:bc:22:cb:42:f6:a3:04:37:d6:
71:6f:31:ce:1e:c4:de:39:58:2d:88:b0:d7:ca:f3:85:88:96:
14:f2:da:08:79:16:e0:42:7e:70:72:4a:bc:a4:a3:21:76:0b:
fb:0d:0e:b4:c0:47:61:22:23:ae:db:bc:84:94:8d:70:3f:08:
77:aa:a1:86:b9:fc:fa:93:6a:1f:d4:c2:e3:d8:df:a3:18:e0:
0c:00:60:6e:15:5b:6d:05:21:69:1d:49:53:48:d6:a8:d9:ef:
bc:cb:99:5b:68:f8:4d:7e:c0:32:c1:75:bd:8f:c5:6e:33:20:
68:5d:75:7f:da:77:84:05:43:b1:8c:1e:26:eb:bf:ac:3b:4e:
12:bd:27:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:45:36 2025 by rpki-client