Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: 3nCmME/pZnC69n3A0KqSlthxQPqNh0+VyOwBOg4XMc0=
Subject key identifier: 9B:DA:AB:F8:45:FC:DC:8E:62:AA:54:A6:15:B7:B9:1C:9F:13:BA:68
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 01963EE749C0E97058E6DE1E0C36303FEB9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 0E88
Signing time: Wed 16 Apr 2025 14:01:07 +0000
Manifest this update: Wed 16 Apr 2025 14:01:07 +0000
Manifest next update: Thu 17 Apr 2025 14:01:07 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: QnmPZctMPrE2EwfVOYdP26HVKblbaZf/B1LiaJxUTXM=)
2: DVOzFfjLRaTUZyMinPqbQ4S_9DE.roa (hash: W1flvtqrAEaVVbhIS1vtvgxbygP7i6aEq71rS+R0/KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e7:49:c0:e9:70:58:e6:de:1e:0c:36:30:3f:eb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: Apr 16 14:01:07 2025 GMT
Not After : Apr 17 14:01:07 2025 GMT
Subject: CN=9bdaabf845fcdc8e62aa54a615b7b91c9f13ba68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:97:e4:f3:66:10:d5:d6:50:f3:f9:38:b2:
76:98:ef:1c:80:dd:53:12:85:b7:c7:64:c3:2c:60:
0c:d1:4a:95:5f:ca:cc:e7:41:8e:5e:e6:68:71:9e:
60:57:3c:cd:8c:60:7b:50:23:35:b8:44:cd:b7:ce:
c9:12:45:bb:4f:b8:77:d0:03:f2:b2:36:25:59:c8:
37:2a:9e:6a:03:bf:58:f6:14:78:0c:1d:4f:88:9d:
b7:e2:30:10:a5:67:da:de:a0:af:23:10:a9:31:3e:
7f:75:ed:d9:1e:bb:bb:fd:bd:ba:40:46:24:88:f9:
e0:6e:d7:0a:f2:2a:47:8f:6b:54:cf:a2:be:20:bc:
1b:40:21:4d:f4:04:6a:5e:73:55:d4:43:94:5f:97:
59:13:99:9f:71:de:7e:4d:c9:6e:83:97:cf:55:f7:
51:b8:64:bd:af:40:c6:85:98:06:5c:7d:4c:bc:e6:
3d:dd:6d:fb:77:b4:70:87:ce:44:24:5b:12:a0:91:
52:5d:d2:0c:33:6e:5a:57:29:ce:52:c4:78:b5:99:
d2:0a:e8:ad:b0:21:35:26:cc:92:84:47:7d:1b:6d:
65:4c:31:36:27:35:30:6a:61:77:c1:18:bc:7b:d2:
61:91:7d:8b:53:7a:c1:e2:fa:d3:99:92:7e:0f:2f:
fb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DA:AB:F8:45:FC:DC:8E:62:AA:54:A6:15:B7:B9:1C:9F:13:BA:68
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2f:fb:3f:9c:61:a4:c5:7d:95:26:46:97:53:7a:ed:f2:c1:
32:27:2b:1b:1e:74:5e:c4:fe:45:dc:14:f0:48:aa:5f:20:e8:
fd:e6:39:11:dd:aa:4e:2c:2e:0a:ec:77:fd:9f:f4:97:ea:ab:
db:68:da:6e:ba:1e:21:e0:24:a8:a8:82:e7:61:0e:e7:f5:19:
42:f9:46:fe:97:84:3c:55:ba:9c:59:8e:29:e4:3f:19:8f:b5:
3a:a5:3e:1a:5d:77:5e:46:af:ad:ef:48:c7:05:5e:dc:25:ad:
f3:50:74:1d:f6:fd:c7:9e:ec:aa:01:49:95:90:d4:d2:07:28:
b8:6e:b0:17:9f:bd:45:66:17:5c:c2:84:8a:4d:d9:ba:f8:a0:
a9:a3:7e:29:f5:63:f5:e0:90:4c:97:88:d9:b1:26:9b:81:83:
a7:10:40:8f:83:ef:b5:8b:18:1c:11:04:b9:0e:dd:b5:b1:84:
b5:0f:e5:46:43:a6:d9:ca:fa:22:c9:20:0f:56:54:07:ed:34:
09:52:12:5c:bc:e0:cd:ff:df:3b:53:32:0f:fc:d7:df:3b:1a:
80:63:96:e1:cc:8c:05:ce:37:6a:6f:d6:28:49:a9:53:93:c0:
65:68:d9:f6:db:b3:3c:ce:ed:9b:5e:05:4b:fb:61:92:b1:ff:
e5:89:02:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:43:44 2025 by rpki-client