Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
File: Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft (raw, json)
Hash identifier: +J27/h6keEpiYN0SEgy93UFIX+P/RgpBPAJL3acneaM=
Subject key identifier: F9:2F:14:9D:51:E4:52:CF:F3:52:26:67:91:A0:1B:94:40:B9:38:8A
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Certificate issuer: /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial: 0196A19B40D899432DB49DF3E8B2B812B6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
Manifest number: 152A
Signing time: Mon 05 May 2025 18:00:28 +0000
Manifest this update: Mon 05 May 2025 18:00:28 +0000
Manifest next update: Tue 06 May 2025 18:00:28 +0000
Files and hashes: 1: Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl (hash: O1a5LeP2LbiNH0lBZ+gggIqgzSUGSSJ8AUxGSbrh5X4=)
2: rnVgQnSvZayWReSkh23-vQQTXhc.roa (hash: hebKWON0JMZ90AbYifXQ2mjTupBoFKWh8ulvnxLBZ8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:40:d8:99:43:2d:b4:9d:f3:e8:b2:b8:12:b6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
Validity
Not Before: May 5 18:00:28 2025 GMT
Not After : May 6 18:00:28 2025 GMT
Subject: CN=f92f149d51e452cff352266791a01b9440b9388a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:61:59:cc:34:c9:f4:fd:87:a0:79:b7:9f:68:
9f:76:3f:ad:50:ae:8a:d7:a9:d6:44:55:77:59:2b:
a4:dd:03:62:f5:f9:a9:01:3e:87:a2:46:66:c5:f2:
f5:fc:a2:a6:73:84:9e:5f:da:cd:35:e9:6e:69:8a:
b8:9d:42:ae:1c:2d:90:26:d1:c2:ea:97:cb:12:bb:
e1:41:b6:90:90:ce:33:20:d2:b7:20:7b:25:b1:43:
c7:30:a6:d1:ee:59:ca:2e:70:9a:48:7b:1b:3d:28:
e2:49:a8:3f:47:20:d4:d3:20:21:e0:f3:b4:dd:0a:
0e:3a:c7:b4:3d:30:06:12:9e:5b:44:57:dd:ef:ad:
a5:26:b2:16:d0:4c:e3:d1:2f:30:c5:00:97:e1:04:
59:97:e1:22:c0:7a:bc:50:c6:dc:08:74:6f:73:85:
ee:e1:d8:82:a0:8e:8d:18:4e:83:80:38:0e:46:cb:
b4:72:71:0b:37:ae:a5:eb:e9:7c:fc:bd:65:73:e4:
15:fd:22:5d:5b:2e:94:72:e2:d5:39:19:25:2a:a8:
96:f1:fb:da:3f:4c:b3:73:24:c9:cb:6e:df:da:57:
ff:dd:4e:e7:f9:a3:70:18:94:cd:09:5c:60:75:05:
56:6a:5d:32:89:13:60:53:fd:46:76:b1:73:2c:61:
c4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2F:14:9D:51:E4:52:CF:F3:52:26:67:91:A0:1B:94:40:B9:38:8A
X509v3 Authority Key Identifier:
keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b5:c4:d1:23:a4:0a:9b:3f:34:fa:c1:51:fd:02:03:47:a5:
2d:22:c2:45:57:10:d9:28:5d:bb:28:a4:87:15:44:4a:ca:2d:
9c:c9:2a:6f:6b:36:48:69:31:04:29:8d:18:72:48:ee:e6:70:
ac:5d:32:1d:79:18:0a:5f:b0:90:75:e2:b2:06:40:f8:8e:c2:
b5:7e:d5:b5:cc:a0:42:c1:53:3f:1c:bc:d2:48:0d:02:d8:c1:
bf:23:df:a7:a4:8a:38:6b:6f:ee:5e:67:00:95:44:a6:cf:d0:
e4:6b:10:e2:cd:c6:7a:3d:48:de:92:79:9c:a9:80:4a:ca:14:
1e:56:9c:0f:73:48:31:24:eb:15:db:5f:33:55:42:61:72:d5:
8b:c7:52:44:bd:29:f1:04:d3:76:20:da:b6:01:d1:93:43:a5:
2b:c5:fc:8a:18:ba:ea:31:cd:22:c5:7d:42:b2:e0:2a:eb:02:
b1:44:1c:e1:3c:66:32:58:87:ce:e4:aa:3e:df:f7:7f:9a:5c:
23:43:0c:cc:11:4f:7d:ef:de:e7:50:48:17:9d:61:22:c7:8e:
53:2a:0d:25:15:97:b3:88:b4:d3:bf:04:66:a5:e8:a9:3c:ad:
ab:60:d8:1d:83:75:a1:1b:3b:2d:0f:e0:c8:aa:8c:9f:bc:39:
8a:16:73:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:24:46 2025 by rpki-client