Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
File: AkHvRDYUJQbyZZODwW69oeKbT4Y.mft (raw, json)
Hash identifier: VOCt2WMo3zqAmqcL6QlZ7+cK1spcPa7UFwTRjXreyA4=
Subject key identifier: 87:26:09:A1:43:CD:D9:03:2A:44:EC:88:06:45:A4:ED:11:76:32:A1
Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Certificate issuer: /CN=0241ef4436142506f2659383c16ebda1e29b4f86
Certificate serial: 0196C2024A8744AAA202247CBCA1C6E49F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
Manifest number: 0DF9
Signing time: Mon 12 May 2025 01:00:52 +0000
Manifest this update: Mon 12 May 2025 01:00:52 +0000
Manifest next update: Tue 13 May 2025 01:00:52 +0000
Files and hashes: 1: AkHvRDYUJQbyZZODwW69oeKbT4Y.crl (hash: Tw8gu2dCi4EqDzhEnTnyyDwQGpycZu7MTdVd6CZDzOE=)
2: NDyhuvBiD7Dcf-VvAcHjeKP4Wls.roa (hash: oeDnEopXVy5MJcNbGxGeEZ1ceng1jmSd304y/xLBjoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:4a:87:44:aa:a2:02:24:7c:bc:a1:c6:e4:9f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86
Validity
Not Before: May 12 01:00:52 2025 GMT
Not After : May 13 01:00:52 2025 GMT
Subject: CN=872609a143cdd9032a44ec880645a4ed117632a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:c7:a4:75:cf:16:44:ff:ef:ed:3e:71:78:
2b:57:4e:42:74:e5:ff:08:88:c0:bd:fc:1e:1d:69:
0d:b2:b7:bc:7a:55:89:ac:17:45:24:db:03:e8:1d:
47:e8:68:fc:13:e2:ef:fe:4f:19:63:8e:f2:63:2e:
57:23:b4:0d:0e:b7:16:a4:fc:9a:fa:ca:1c:b3:23:
e2:31:2f:cc:76:df:ec:ef:86:ff:fc:77:3b:68:c5:
d3:60:25:c9:79:fc:19:6c:77:a9:80:76:3f:4e:4c:
20:da:be:4c:54:e3:eb:fb:10:b0:e6:ae:68:da:a4:
29:07:a9:8f:61:ba:ab:8c:63:b2:da:b4:d9:db:c1:
39:f6:24:3b:a3:5b:cc:1b:89:64:f9:63:06:a8:ea:
41:14:0b:41:7a:3e:da:55:c6:d7:9b:3c:6b:d4:3f:
06:86:2e:36:aa:f0:24:6d:78:84:af:8a:b0:98:50:
64:0d:d0:1c:a8:36:a1:36:8f:e2:fe:cd:1c:40:fa:
19:2b:e7:08:ee:59:ec:06:0d:f1:fe:50:2c:31:ca:
42:5e:79:e2:dc:20:48:8a:e9:47:a6:d4:85:78:5d:
67:74:90:00:d9:cb:c9:34:55:cb:13:b9:09:b7:d1:
ce:65:ba:ca:31:cc:ad:8c:56:b9:af:d5:4c:a9:b8:
47:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:26:09:A1:43:CD:D9:03:2A:44:EC:88:06:45:A4:ED:11:76:32:A1
X509v3 Authority Key Identifier:
keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:00:f3:25:3a:ae:80:82:e5:f9:42:5d:b5:53:fb:39:e7:1c:
57:ff:e1:4c:84:ab:68:22:71:94:5f:b3:d0:94:c4:35:d7:98:
57:6b:76:ae:d7:e2:b3:f2:67:f7:85:5e:23:ae:f2:74:ec:8d:
7b:97:0e:23:3e:83:f2:11:74:91:21:e7:8d:28:ca:78:76:85:
40:9c:86:03:1b:88:a6:56:2f:68:f4:c0:0c:39:3d:c8:b0:a3:
52:cd:42:ec:4d:d6:e8:a1:41:ed:9c:99:fd:f2:ed:63:e2:57:
5a:2f:1c:a1:3e:41:10:9f:29:ba:b6:e8:c9:12:6f:77:4c:fd:
b2:ef:1f:15:0e:13:7a:06:1f:fe:bd:91:51:03:08:3b:28:32:
d9:fd:f1:ff:9f:5f:21:f4:b4:f6:37:8c:3b:d8:ab:f9:ad:6f:
34:a3:49:b4:7b:a7:e2:41:9e:1f:21:1d:2d:6b:e1:0c:50:66:
4e:87:50:df:d4:4c:f5:40:13:82:07:7d:59:6e:e1:b0:99:90:
54:5d:28:bb:8f:0c:a5:8b:db:99:29:ac:4a:3f:81:b8:eb:b7:
3a:d9:fa:96:72:ca:26:b3:5f:a2:6b:20:03:54:92:59:e3:00:
0f:b6:24:36:7e:c0:0a:32:b2:8f:ef:d2:1c:95:49:68:68:df:
d9:67:38:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:49:33 2025 by rpki-client