Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
File: AvvY1yv_u813B2pqbMmU02QoSRY.mft (raw, json)
Hash identifier: fV+k8lt6oO+XGoDC1LaTRw0HbYXrHCNokGF/LJ4HmPM=
Subject key identifier: 73:99:7A:DF:6D:B8:74:8F:1E:A1:8C:C7:DA:4F:40:05:D9:71:F5:0A
Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
Certificate issuer: /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Certificate serial: 019648C54F9AFD05D85827EB946F7B322700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 12:00:12 +0000
Manifest this update: Fri 18 Apr 2025 12:00:12 +0000
Manifest next update: Sat 19 Apr 2025 12:00:12 +0000
Files and hashes: 1: AvvY1yv_u813B2pqbMmU02QoSRY.crl (hash: 0uaGUlxPhm9vWlCD5cMultmOjPHFjKyP0toj1S90epI=)
2: TqE9tgmDpOyBnvYdZVmUJ-gUA3Q.roa (hash: g8rbpukbCZfVIUEVymsKLu6cA0WLzRwtCu3mx9X0/mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:c5:4f:9a:fd:05:d8:58:27:eb:94:6f:7b:32:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Validity
Not Before: Apr 18 12:00:12 2025 GMT
Not After : Apr 19 12:00:12 2025 GMT
Subject: CN=73997adf6db8748f1ea18cc7da4f4005d971f50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:35:58:83:03:ba:60:c5:d5:af:ea:b2:b7:
29:ec:7f:30:26:ac:94:1f:fb:eb:55:19:d6:ba:3d:
d2:cf:03:cc:21:41:94:f6:55:a8:a8:53:ee:85:a2:
b9:16:32:cd:64:1b:5e:8d:b2:77:a7:46:97:91:c5:
6a:2c:de:7e:0f:c1:c8:b2:99:6d:c4:d7:f3:c9:9e:
b8:4f:66:b5:8f:e5:24:43:ea:91:d9:48:d3:f9:7b:
01:0b:8d:81:61:85:3e:47:a7:30:38:3d:40:bc:09:
15:fd:18:8f:75:2f:5d:f1:38:77:7a:0e:97:57:3e:
a9:c5:61:9f:24:fc:95:f7:0a:43:58:72:85:4b:2f:
1d:17:99:73:d3:a3:67:8d:f5:68:63:c1:1f:a4:3a:
07:12:24:47:95:b2:c9:f0:91:aa:92:5a:af:9e:e2:
a1:59:65:e0:bb:b1:2e:bc:ce:37:d6:e9:3f:92:13:
ce:78:82:2d:7c:87:e0:c5:77:be:ab:64:46:83:c2:
9d:0c:57:ef:d4:ee:9b:3d:50:62:94:24:4a:be:a4:
66:db:61:ff:e7:7c:45:cc:a8:ce:44:e5:d5:32:fe:
7b:c2:7c:45:26:92:59:9e:76:1b:0b:f1:1f:2a:a3:
d7:c4:08:e8:0f:48:c2:49:83:b1:82:17:b2:12:17:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:99:7A:DF:6D:B8:74:8F:1E:A1:8C:C7:DA:4F:40:05:D9:71:F5:0A
X509v3 Authority Key Identifier:
keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d3:98:0a:cd:3d:b9:52:ee:25:7e:38:d2:aa:18:ea:63:b1:
93:67:85:98:c5:65:3c:31:b2:70:20:67:e5:9a:3c:cc:ea:3e:
78:e3:87:fd:f6:0c:cb:9f:86:0a:9c:c0:f1:f2:24:e1:af:6b:
84:c0:e6:f4:9d:65:d3:38:f3:0d:f1:29:f1:1d:2c:8d:ab:af:
63:98:5c:71:b3:6f:c7:e3:ec:f6:cc:67:96:bb:99:2c:09:e2:
da:e9:be:ed:31:6f:0c:0a:2b:0b:39:9a:59:e1:f7:f5:74:5f:
2a:fa:c4:8d:3c:7d:90:ec:1a:2b:6b:e6:f4:13:a3:ad:e2:06:
13:aa:d3:88:78:e7:b9:8b:c6:b7:16:e8:45:42:02:04:2e:2b:
13:1a:f6:9d:55:aa:98:06:e0:87:cd:da:a5:76:22:a1:01:a5:
56:65:5d:22:9a:fe:13:12:71:35:a7:71:99:50:8f:04:70:86:
4c:ff:08:5f:0e:24:03:0c:da:d4:12:63:e4:d1:0a:1f:ad:d2:
e6:99:9c:23:22:c0:e4:e0:83:7f:7f:67:29:7e:70:f4:29:e8:
25:84:1b:4d:cc:e7:80:94:9d:ff:6e:a8:d6:91:44:2b:9e:86:
85:fc:de:84:ae:be:3e:7f:f4:8e:f6:5c:bc:07:b3:58:6e:15:
1f:38:87:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:56:48 2025 by rpki-client