Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File: AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier: Mdve406Itr3CHY3mRsPVK5rVaGfAfa5yOwuA5hyoBxk=
Subject key identifier: 44:18:5E:D7:C0:3D:CA:25:04:C0:68:76:4D:E6:26:A3:38:E4:64:2D
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial: 019749316670975F1EA01DD28D8A12F6B51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number: 0407
Signing time: Sat 07 Jun 2025 07:01:03 +0000
Manifest this update: Sat 07 Jun 2025 07:01:03 +0000
Manifest next update: Sun 08 Jun 2025 07:01:03 +0000
Files and hashes: 1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: u7LqpDIDL9yrXcWwj9fHRc2Hq9Dq+epjYsvYjC3f2W8=)
2: BX2JPGJy6RMaPcWuXvWlFqwNrIA.roa (hash: u+UX2pAd1eP7HJXW9NY0JTLVGtLaRb7rjxt8LHxvOj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:66:70:97:5f:1e:a0:1d:d2:8d:8a:12:f6:b5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Validity
Not Before: Jun 7 07:01:03 2025 GMT
Not After : Jun 8 07:01:03 2025 GMT
Subject: CN=44185ed7c03dca2504c068764de626a338e4642d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:85:b6:3d:6e:23:5b:5c:b4:53:de:f4:32:
ff:e9:fc:0a:da:42:75:0c:59:af:48:24:3e:5b:bb:
ea:cd:32:ce:a4:9a:92:e8:86:5d:4d:24:48:08:d6:
5f:40:51:ec:da:d5:92:21:43:56:b0:0d:61:3c:96:
05:60:48:d9:03:5d:94:f1:66:23:34:fa:7e:f9:35:
2f:ef:4b:cf:f5:fa:5d:fd:04:8f:46:e8:43:fc:80:
4d:12:80:c4:9e:7f:14:2a:e3:46:a0:dc:b8:d6:50:
52:20:42:8d:a5:73:07:79:a2:ce:b9:fb:31:c8:8e:
75:18:4d:1f:e5:7b:cd:64:8e:32:5a:c1:81:e5:dc:
89:7e:f8:95:32:af:4b:70:27:5e:15:2f:d8:98:42:
43:1d:de:c8:36:6b:a2:09:9e:6a:25:78:91:f7:0d:
63:6b:61:6e:01:8a:38:03:b0:49:03:9c:1f:dc:89:
ce:b3:ff:1f:38:1d:59:18:66:8f:12:58:48:22:36:
9a:7c:c1:59:17:12:69:6c:30:fa:8f:32:5c:91:84:
c0:9d:c3:31:98:90:6b:09:4d:9f:df:21:28:6f:9f:
b0:6c:0f:76:80:e8:11:bb:69:0f:9d:11:a9:2a:0c:
89:17:00:3f:d0:00:9c:c8:9f:05:ca:6a:1e:e4:63:
83:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:18:5E:D7:C0:3D:CA:25:04:C0:68:76:4D:E6:26:A3:38:E4:64:2D
X509v3 Authority Key Identifier:
keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:24:05:69:d7:c0:64:a7:a9:53:36:cb:86:7e:06:e9:76:8a:
e1:28:cd:63:f6:1f:24:a6:60:71:7c:bb:02:17:6a:ca:3c:f9:
1b:49:c8:c5:a9:76:87:1c:bf:87:af:ce:fe:03:77:6b:06:6b:
82:6d:2f:e3:dc:f8:57:4c:6b:41:59:75:f8:59:87:02:33:77:
39:75:23:8c:5e:52:92:98:8c:7b:11:32:ed:8f:8e:55:7a:c5:
25:fb:aa:d6:82:91:69:5c:aa:bf:4d:b5:54:49:62:e9:75:2b:
c4:78:9a:fa:07:a6:80:c7:61:0a:7f:21:38:22:65:7b:c7:40:
a4:94:2b:75:ff:cb:c0:c8:18:42:15:34:86:ea:25:3d:b3:df:
37:04:f0:39:ed:b7:0e:61:d3:9f:1f:8f:6f:a2:9a:6d:85:6a:
c1:7a:39:83:1d:f2:8f:8d:ec:e8:60:4c:42:3e:88:41:61:61:
6b:f1:f1:c3:16:78:05:f9:02:02:9a:5d:76:3d:1a:b6:8b:dc:
0f:c1:72:da:89:76:44:22:ff:69:14:5e:b1:5e:29:d0:05:75:
5a:07:7d:a6:a7:89:6d:ef:e6:81:a4:e0:16:a2:34:11:1a:c3:
5e:6f:37:04:0e:69:dd:c1:d3:65:1a:0f:88:37:aa:89:93:a5:
13:4e:5d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:57:08 2025 by rpki-client