Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File: ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier: FldmBdiuYoU3GuW2cO4X0jTncADvQ2CQOJ9JRELhpH8=
Subject key identifier: 6A:6D:54:31:CF:A2:1A:DF:FA:94:9C:36:2C:9B:16:92:A0:0C:D7:4A
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial: 0196BD497BDBFD9DB82E65678D6E25658FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number: 0A65
Signing time: Sun 11 May 2025 03:00:31 +0000
Manifest this update: Sun 11 May 2025 03:00:31 +0000
Manifest next update: Mon 12 May 2025 03:00:31 +0000
Files and hashes: 1: 6Z3iiHN3VyWW6gZ2ZKzE17TH2kM.roa (hash: cm3sLpQPG8ZwhW1sT/aVnn9uH1eRaB9OvY6srQjdKdA=)
2: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: fbcEWNkUUs95rvGcdAFwcwnjYtT6dCBgwhByPFya4Qg=)
3: Y1KfRgbBfVzefGdkb0Fwgsciahg.roa (hash: aNRmz1hoVc6DWpXca8uL7+cZ3Jjgl7p4/PhhQMng11U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:7b:db:fd:9d:b8:2e:65:67:8d:6e:25:65:8f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Validity
Not Before: May 11 03:00:31 2025 GMT
Not After : May 12 03:00:31 2025 GMT
Subject: CN=6a6d5431cfa21adffa949c362c9b1692a00cd74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:f1:e2:38:88:76:7e:16:d6:51:04:f1:9e:
96:2e:e4:d9:1b:d1:4f:16:c8:cb:2e:03:16:08:67:
91:ad:c5:d8:bd:5a:21:d0:8f:80:0b:f3:4f:35:83:
84:87:42:59:ff:64:24:cb:0c:fa:1a:66:5b:df:c8:
93:0e:f8:df:7e:9a:65:2e:71:e8:0d:fb:a5:1f:db:
64:35:85:d9:f3:55:5d:19:9e:20:7f:ff:81:a1:92:
b1:d2:6c:9d:d7:93:c2:ee:83:5b:05:4b:76:09:33:
63:a8:85:2a:aa:be:7f:03:fb:66:f9:d3:1f:5c:4f:
78:07:4d:fd:a0:20:b7:81:e1:03:d7:a8:26:64:58:
cc:b7:c5:2e:6c:d9:06:b8:62:0a:9d:57:de:15:d8:
dc:ed:5a:59:2d:17:e8:73:80:46:58:cc:8e:5b:7c:
a6:ab:90:e0:30:47:f4:5d:3f:df:34:ed:f7:3e:b3:
53:7b:67:83:e0:a5:df:64:4e:8c:04:17:d6:b5:76:
e1:be:20:b2:9b:01:1e:77:33:4f:53:14:19:23:87:
2f:3f:fa:42:04:e9:fd:18:25:26:cf:b7:41:16:d1:
57:ed:a6:1c:1f:a1:a3:8d:4d:14:8f:a1:62:37:e4:
88:58:e0:2b:1e:d9:5e:29:c0:b5:8c:b6:fe:07:d6:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6D:54:31:CF:A2:1A:DF:FA:94:9C:36:2C:9B:16:92:A0:0C:D7:4A
X509v3 Authority Key Identifier:
keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6c:ef:d4:d9:bd:28:a7:8f:2f:36:cd:de:f0:37:05:d2:d2:
e6:a0:2e:14:1c:b8:51:99:63:3c:a8:29:04:c1:a8:1d:13:bf:
e2:ce:01:63:27:6d:0d:68:59:51:17:02:c4:f9:f5:da:87:26:
5e:9c:19:74:9f:b0:d2:86:fd:80:2a:00:f2:2f:01:20:ab:33:
ab:ab:55:75:13:c4:b5:e8:ee:d8:62:95:8f:ee:34:a0:a4:2a:
2d:69:7c:03:74:57:bb:38:84:d1:54:09:d0:44:10:db:e1:f5:
7e:3f:81:ae:47:28:bd:8f:9f:9a:c2:14:a1:1f:9a:7d:17:43:
d1:77:3f:39:5e:4e:8c:17:d0:3e:68:83:ac:78:ec:42:18:34:
bf:f6:d3:e2:05:52:25:41:02:e4:c0:59:f8:9a:08:bd:d2:ea:
09:14:e6:0e:d4:a3:c7:b1:64:e7:44:93:bc:06:08:f1:c3:5a:
4b:9c:ca:56:4b:f6:4f:86:a1:f4:ff:80:ef:5f:0b:7b:a6:02:
17:95:a4:dd:e3:fe:f7:35:58:28:53:08:73:bd:3e:49:a1:7f:
0a:bd:88:a5:5d:ec:db:ac:7c:26:d7:ad:f6:fd:95:69:92:1c:
84:1b:08:1a:45:96:fa:12:ad:7a:a5:99:1e:4d:5b:01:a2:0f:
8a:f7:69:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:32:15 2025 by rpki-client