Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier: TAylFwfCKum8W178rdzPR13qU620SPe6NurYGS1OaVA=
Subject key identifier: 1A:B2:0F:C5:4C:DB:1B:BB:D3:01:C1:09:5A:37:43:7E:50:28:39:5B
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial: 019636513D4B46F6F50678E482DB76E627BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number: 11F4
Signing time: Mon 14 Apr 2025 22:00:15 +0000
Manifest this update: Mon 14 Apr 2025 22:00:15 +0000
Manifest next update: Tue 15 Apr 2025 22:00:15 +0000
Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: 0kFgboXkKJWCS0BeMUoxjr+Kkz/p0VhRzgmbDJZ8Fmo=)
2: C8VNDT0eLyU6a-BGSaat20kBt5Q.roa (hash: GVJtrMJUvAX+z3Z9hhGqUx0RMXPQ0og215klHN94fVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:51:3d:4b:46:f6:f5:06:78:e4:82:db:76:e6:27:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Validity
Not Before: Apr 14 22:00:15 2025 GMT
Not After : Apr 15 22:00:15 2025 GMT
Subject: CN=1ab20fc54cdb1bbbd301c1095a37437e5028395b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:5c:20:ee:f7:ea:2e:20:17:ca:df:b7:00:
29:49:e7:a7:46:e8:81:35:a1:c6:ed:45:53:fb:e8:
03:20:f8:5d:04:30:b4:f5:8b:8c:3c:3e:a3:d6:1c:
a0:e2:57:79:21:a5:6a:05:90:9f:30:af:90:92:fa:
0e:b7:f2:f9:13:69:79:58:1a:43:a5:17:ae:a3:ff:
b5:62:5e:b6:73:1c:b5:4a:cb:8b:b5:cb:1c:b8:ae:
30:3c:dd:65:8f:9a:77:12:a3:40:6b:bf:fa:ef:20:
e9:97:19:c8:50:cb:c7:27:aa:5d:eb:86:55:dc:4e:
05:93:14:23:15:b3:f8:de:65:17:09:85:09:ce:fe:
3c:de:37:d8:8d:fd:56:58:db:0a:53:9b:26:e9:da:
97:ac:ef:61:c7:ae:37:dd:4e:af:7b:fb:77:db:be:
70:78:de:ff:a0:b2:ad:03:91:16:11:d4:44:b5:e7:
41:15:74:47:85:c6:77:31:3b:e5:6b:99:2b:db:17:
0d:bc:3a:fb:1b:89:f8:8b:34:44:a6:14:42:fc:9b:
33:35:9e:e8:b1:90:fe:da:6a:2e:ce:bd:0e:b9:ca:
5d:e8:0b:c6:b4:64:99:1e:11:19:5b:aa:7f:d5:17:
fb:2c:ec:95:69:65:39:da:7b:f3:42:38:84:91:47:
7a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B2:0F:C5:4C:DB:1B:BB:D3:01:C1:09:5A:37:43:7E:50:28:39:5B
X509v3 Authority Key Identifier:
keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:27:64:15:f5:fd:26:2d:67:98:ff:46:64:57:c8:ad:00:07:
22:ad:09:7f:f7:28:8e:e3:f7:78:6a:29:46:e7:87:90:0b:0c:
ff:a4:6b:72:ed:61:db:8d:dc:c0:74:de:15:26:1c:b5:51:60:
35:c8:34:15:d6:f9:68:ad:36:54:7f:18:64:30:74:c1:23:f6:
31:ab:1d:28:69:05:22:a9:4e:25:90:a9:18:7f:48:8a:ae:86:
ec:f2:50:ab:b0:da:2b:67:14:c1:dd:d8:40:b6:34:34:52:19:
24:22:47:fe:28:23:bd:e8:1f:4f:0c:44:02:09:1b:6a:3c:83:
62:8c:db:2c:fc:24:f9:71:4e:cc:c2:28:d9:2c:0a:cb:0b:46:
70:8d:d6:d8:25:e6:ab:aa:85:51:c4:2a:7c:1b:09:63:5d:54:
58:f7:f5:7e:8b:9c:c7:8b:ed:d8:26:ec:25:14:3c:b5:ac:2d:
f4:83:be:71:9f:56:de:16:6e:92:9c:0b:a2:3f:ba:92:92:6b:
cc:82:0e:3c:a9:8a:b6:ff:5e:7a:ed:91:23:a9:cb:2d:9d:ef:
4a:37:ec:38:61:be:e0:c7:51:cb:ea:20:79:24:b2:f2:12:f9:
fc:17:10:3b:40:41:44:23:db:cc:b7:fc:fc:22:85:96:a3:3f:
07:ad:b0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:09:41 2025 by rpki-client