Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier: WhmNt8Oqa/0cFwgDSoHyzjOC5OmEwBdodYEHUDqIMUA=
Subject key identifier: 0A:42:33:AB:4A:86:B3:39:BD:64:3F:53:88:17:2E:E9:F3:4E:2C:74
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial: 01969FE3F78CDB68085AFF8B92A6970624AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number: 0FD0
Signing time: Mon 05 May 2025 10:00:39 +0000
Manifest this update: Mon 05 May 2025 10:00:39 +0000
Manifest next update: Tue 06 May 2025 10:00:39 +0000
Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: pK0Vg5GnPnzKt2opJQIr9Sguw0514wVjm382npIUYSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:f7:8c:db:68:08:5a:ff:8b:92:a6:97:06:24:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Validity
Not Before: May 5 10:00:39 2025 GMT
Not After : May 6 10:00:39 2025 GMT
Subject: CN=0a4233ab4a86b339bd643f5388172ee9f34e2c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:d9:42:79:58:0b:5b:f9:84:6c:b4:97:a9:
68:15:99:29:f8:53:da:5d:5c:d1:2b:4c:93:3c:63:
9d:f0:d4:9a:88:04:7d:76:d6:99:f8:2a:d1:8b:e0:
25:0b:5b:9f:e0:c9:ee:6b:09:73:1c:df:2d:23:a2:
f5:d6:74:8f:65:1c:e6:3d:5b:bc:9c:6c:04:30:7b:
3b:28:bc:47:f2:ef:9b:b4:87:1d:dc:aa:5b:eb:03:
44:31:7e:f5:1f:dc:fb:5d:64:4b:63:af:04:6b:87:
d7:ac:14:d3:1f:0a:46:79:d4:53:35:9b:f6:7d:65:
24:da:e2:10:39:25:01:05:3e:bf:45:2c:c9:f5:7d:
75:7a:b2:23:cb:8e:66:d4:74:e7:1c:80:1a:36:b4:
42:40:1b:47:5a:47:1d:ff:65:84:79:ad:4c:26:4f:
5d:f2:1c:8e:c7:22:cd:88:1a:69:dc:de:e6:a0:a1:
bc:22:1e:48:38:32:82:ca:08:7e:da:15:9d:f3:5a:
f4:41:42:e3:68:5e:90:32:13:7a:e2:08:4b:c9:79:
b1:2e:29:c3:4d:cd:81:68:c8:b9:30:40:99:37:da:
80:ca:ce:ab:b2:ce:dc:79:fa:59:6d:29:41:34:61:
55:01:39:8c:20:1f:17:c2:42:0f:1c:7e:bc:c4:21:
21:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:42:33:AB:4A:86:B3:39:BD:64:3F:53:88:17:2E:E9:F3:4E:2C:74
X509v3 Authority Key Identifier:
keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:15:28:b5:2e:b6:97:dd:97:41:54:26:d7:fa:a8:e7:49:37:
0b:00:26:47:fe:56:2b:8f:c0:a0:23:0b:35:e8:6e:b6:6f:54:
1b:a9:c0:23:76:2d:74:e8:8c:dd:56:6c:12:ac:ee:e6:b0:50:
bb:b9:60:6b:4b:f4:17:96:bb:cb:9a:fb:6a:dd:2f:3f:eb:31:
e9:46:0d:5a:3a:10:93:bc:cf:c9:e2:e0:91:f8:04:1c:99:3c:
55:7d:2e:4a:fe:14:b5:d5:84:d0:34:64:a0:19:75:e5:7c:c3:
2b:15:c6:d9:48:48:b1:0b:43:6c:17:6d:c6:53:f0:50:72:26:
4c:9f:dc:cc:b0:10:df:df:a5:eb:20:31:f5:92:54:d8:0e:3c:
eb:6e:bf:6c:59:75:9f:f1:ea:b7:e8:93:c3:5f:20:61:8c:5b:
16:f5:c3:95:f5:fa:c1:e6:88:f8:97:cc:69:ad:58:ee:46:1a:
ad:89:4b:66:03:99:2d:71:13:68:fa:3c:ad:3c:2b:ab:2f:18:
88:d7:53:a4:5a:fb:da:d4:fb:85:16:b0:ee:b4:58:37:9d:39:
16:09:37:67:4d:2d:7d:bd:19:8e:fe:07:09:c0:3f:48:2e:77:
33:9d:7c:d6:f8:34:41:39:cf:dc:40:76:47:15:76:6f:9e:e0:
1f:b0:a7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:36:24 2025 by rpki-client