Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
File: AV8u9ttQKZTXsMjknNSnd725NXI.mft (raw, json)
Hash identifier: BqPTRXY3cVyU0cNh6oRTX3n8QbILhgQ93j/eBCrN2Kk=
Subject key identifier: CA:8A:BF:07:88:BA:CB:2B:AD:5D:87:34:B7:A5:6A:A1:5B:F5:A7:1D
Authority key identifier: 01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
Certificate issuer: /CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Certificate serial: 0196C2DD90ECE93DCC3B9D46CC1B8BD24333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
Manifest number: 1204
Signing time: Mon 12 May 2025 05:00:22 +0000
Manifest this update: Mon 12 May 2025 05:00:22 +0000
Manifest next update: Tue 13 May 2025 05:00:22 +0000
Files and hashes: 1: AV8u9ttQKZTXsMjknNSnd725NXI.crl (hash: nzXtmFUUhZBIry70GsP8mjs97fK8ei0Bhtz1oPXmCGw=)
2: hqWXJdixoyBrN6tefJIPGEJ4XNw.roa (hash: jM1EQVCCuIqaZA8YHmIHlFvXnaAVW3MrjR0+9kCFwLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:90:ec:e9:3d:cc:3b:9d:46:cc:1b:8b:d2:43:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Validity
Not Before: May 12 05:00:22 2025 GMT
Not After : May 13 05:00:22 2025 GMT
Subject: CN=ca8abf0788bacb2bad5d8734b7a56aa15bf5a71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:37:c4:6a:31:b3:81:69:d5:a4:9e:53:29:32:
b0:d3:67:57:62:7f:ab:c3:0b:15:67:4c:5f:ac:18:
2b:75:b4:70:fc:f0:24:b8:85:77:89:12:1c:dc:7a:
32:c7:20:9b:7f:22:1b:28:f8:e8:66:31:b5:6e:2a:
8a:03:59:a4:88:ae:46:c0:43:61:80:24:a1:63:17:
62:d1:b6:73:68:88:82:93:a3:ce:e6:61:c7:ad:dc:
8d:74:d8:53:f1:c2:ac:9f:f5:6b:a4:2c:7a:9c:7c:
e9:65:1a:ff:0b:00:71:46:f1:03:16:5d:d4:15:0a:
5c:a4:3a:00:58:4f:d0:31:ff:e7:2a:c5:4c:95:fa:
45:a1:a7:dd:a2:e8:c5:8a:ae:ab:45:2e:39:59:a9:
d3:d7:4a:8a:27:16:3a:c8:1e:37:d7:f7:d7:a0:95:
37:d8:7f:71:4b:20:97:19:07:c5:69:1d:31:c5:6d:
a2:26:84:4a:58:61:ae:46:88:ff:78:e7:8d:58:ec:
e3:1e:78:53:57:07:c1:9e:a9:2c:e6:2f:9e:67:95:
91:75:ec:f9:bd:b0:72:8b:e9:eb:93:eb:80:76:52:
e7:1d:73:bc:c2:a6:b5:55:f2:89:aa:e7:78:73:0b:
d9:88:f1:8c:20:1a:69:1e:3e:1f:ed:38:10:b7:0a:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8A:BF:07:88:BA:CB:2B:AD:5D:87:34:B7:A5:6A:A1:5B:F5:A7:1D
X509v3 Authority Key Identifier:
keyid:01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c9:e1:4c:0a:7a:75:ec:73:37:52:ce:83:4e:c3:e3:40:17:
4a:bb:b9:5e:3b:c6:37:dd:4e:94:86:7b:34:7f:ca:e8:78:30:
70:58:a2:61:8e:ad:d1:89:08:33:81:0c:6c:97:db:96:53:fc:
8c:27:88:19:cb:71:90:1e:4e:19:45:72:f0:e8:17:e3:ce:92:
1f:98:18:cc:4c:a3:26:6c:55:af:8b:8b:ef:15:40:f2:dc:fb:
d3:53:dc:11:4f:10:d0:c4:5c:fe:49:96:e3:56:68:bb:fc:72:
e0:66:38:c2:8f:cc:b9:a6:d4:a5:40:6b:a8:aa:29:84:ed:94:
8b:cc:ef:1f:ab:93:68:b5:35:82:e2:c3:38:c1:2d:8f:b6:70:
72:0e:d2:c5:ff:32:16:c6:34:3b:06:fc:93:3f:2b:0c:2d:05:
b6:e2:e7:cd:dc:ee:08:35:d8:fc:98:0e:d3:eb:08:26:ee:1f:
8c:6c:00:a2:b6:dd:cf:b1:3a:c0:30:e0:63:67:99:c8:c2:12:
86:f1:ac:5e:f3:41:0f:94:00:dd:20:7d:ee:15:99:5e:7a:ec:
f4:60:7c:8f:ce:b5:89:6a:86:cf:c4:fd:e3:5a:67:d4:9e:bc:
9a:85:5c:e0:cd:58:f1:b8:a3:d6:3a:4f:38:07:ac:0c:e9:08:
6c:14:61:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:25:32 2025 by rpki-client