Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
File: AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json)
Hash identifier: VoE63tH9vNDOMhddsS+VVXf3EqU/fwReJzIL5qJ8MP8=
Subject key identifier: 34:6A:9B:7E:DC:D1:90:33:2A:0A:F4:00:82:3B:D1:0E:16:5F:D1:86
Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
Certificate issuer: /CN=014f7b7d51e508180ee73ceddbdd955c39774822
Certificate serial: 0196C3F095927AA935AFBECD6BE15C6169ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
Manifest number: 1534
Signing time: Mon 12 May 2025 10:00:46 +0000
Manifest this update: Mon 12 May 2025 10:00:46 +0000
Manifest next update: Tue 13 May 2025 10:00:46 +0000
Files and hashes: 1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: CB7P2xKw1AMCRzDqnPNzuV0f2lZVExsuTbym806kE2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:95:92:7a:a9:35:af:be:cd:6b:e1:5c:61:69:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822
Validity
Not Before: May 12 10:00:46 2025 GMT
Not After : May 13 10:00:46 2025 GMT
Subject: CN=346a9b7edcd190332a0af400823bd10e165fd186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:62:a3:af:e2:85:a6:05:33:a7:74:53:e0:
5a:40:32:3c:ab:97:16:c3:4f:31:8a:db:7e:c7:6e:
dd:7c:0e:3d:32:03:25:ce:c6:45:4e:02:2a:11:df:
64:88:49:72:72:bd:82:13:79:9a:5d:9b:ea:16:63:
2e:3d:01:ed:62:fd:05:10:47:ce:b6:9a:68:71:4f:
c6:52:49:05:48:1e:c3:be:03:10:d2:49:21:16:94:
9c:63:94:e2:33:5c:60:76:68:0b:f2:7a:cf:d8:eb:
91:f6:24:14:77:88:2e:42:19:80:72:e5:e0:c9:a2:
2d:14:a5:1e:1b:e5:00:e3:0d:d6:71:84:6a:f8:d6:
a4:49:f5:f2:d3:aa:97:fd:29:d5:90:62:74:6a:e2:
16:fe:3e:42:96:6b:47:c6:33:51:dd:9f:f2:1a:a7:
0c:35:aa:05:45:b7:f1:7d:36:89:b1:6a:84:6f:6c:
df:49:11:1c:37:aa:d8:a1:40:5f:bd:f4:dc:69:a7:
ca:4a:63:d9:97:10:5e:87:52:f2:d8:4a:71:25:50:
2b:d6:7b:48:fb:79:1c:24:c9:75:52:33:c5:05:e0:
73:02:38:cd:96:b0:bd:0e:a5:91:79:6a:3e:db:2e:
58:a6:a3:2e:a9:c1:c5:9e:10:c6:8c:8c:59:ef:59:
9b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6A:9B:7E:DC:D1:90:33:2A:0A:F4:00:82:3B:D1:0E:16:5F:D1:86
X509v3 Authority Key Identifier:
keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:85:8b:07:7a:20:f4:2e:0b:cb:ec:cb:f5:76:fb:54:b4:ad:
40:39:55:9c:c7:f5:d9:5d:a7:33:02:37:dd:21:e6:ee:57:9f:
d1:00:64:6a:bb:73:d5:35:52:fa:73:37:22:65:d0:c6:d9:d7:
c7:60:5a:6e:2e:4e:1c:5a:25:63:3c:f8:f4:33:5d:e3:4a:70:
49:68:f5:c7:4c:af:93:a7:06:ab:d8:7d:f6:c4:9f:80:0d:ac:
a1:5a:1e:97:bd:54:e9:f8:ac:ab:55:e7:9e:45:31:db:d6:3e:
36:5b:a5:19:0b:a7:60:f3:88:8d:3e:2f:01:f4:7e:ba:3f:9c:
ea:a3:93:99:33:56:51:1c:00:8b:59:29:c0:f1:8a:eb:bc:09:
6b:fe:4f:91:f5:10:06:47:cf:da:0c:33:cf:8a:82:5d:76:52:
ab:20:b1:11:3c:73:67:8a:21:50:11:dc:90:0a:bc:88:bf:c1:
3f:9f:1b:f6:bc:85:79:a9:90:07:00:b4:16:b2:37:8f:2b:73:
ef:d7:5a:05:12:ae:10:bc:f4:4c:b5:8a:72:01:5f:49:d9:0d:
9d:a2:e3:e8:68:2e:ad:cf:88:76:8d:74:4d:ab:48:8f:43:58:
0b:44:44:54:c0:ff:37:eb:e4:fd:ec:2b:7a:b9:11:57:60:4c:
4c:52:c0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:59:20 2025 by rpki-client