Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
File: ACQ0xzoO6iLG5EEHLpPbd8foovE.mft (raw, json)
Hash identifier: I7LwDUPpwsC/dkmzn5gaiPlu3OBLumryvlrIb1LKbZE=
Subject key identifier: BF:C1:B4:E7:E5:C1:DB:99:0C:7A:31:04:67:A1:44:AF:51:43:31:79
Authority key identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
Certificate issuer: /CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Certificate serial: 0196C34C52F4A7B60013A97D78ABB3E37002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 07:01:21 +0000
Manifest this update: Mon 12 May 2025 07:01:21 +0000
Manifest next update: Tue 13 May 2025 07:01:21 +0000
Files and hashes: 1: ACQ0xzoO6iLG5EEHLpPbd8foovE.crl (hash: 7oUN/vjrLJ4xiR/g+/CnZ9or6M0z8zLi2wuNrUSTbAk=)
2: cHH8n9jIhtvEhfYf9DzKMDe1sMM.roa (hash: 24RyHXYm2+n9v+uk7dd0yGKCI/vamDa6gkuFRLODvdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:52:f4:a7:b6:00:13:a9:7d:78:ab:b3:e3:70:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Validity
Not Before: May 12 07:01:21 2025 GMT
Not After : May 13 07:01:21 2025 GMT
Subject: CN=bfc1b4e7e5c1db990c7a310467a144af51433179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:4d:15:6a:9c:07:9a:ce:e1:e4:65:c3:43:
95:f2:86:52:f0:c8:49:c0:1a:04:5f:f4:a2:c1:87:
58:cc:54:0a:22:d6:10:3f:77:5d:57:f0:f6:db:6a:
7c:ca:18:bc:a3:8f:5b:c9:2a:da:e1:2b:61:a8:db:
55:b3:58:34:3b:bf:5f:7a:e2:59:52:a1:71:3c:7a:
e0:0c:d7:bb:9f:56:72:97:24:08:56:6e:26:5d:12:
51:ac:1c:8d:ad:cd:d5:6f:fa:98:39:95:ac:28:cf:
2e:20:a5:75:57:f8:39:2e:ac:09:21:f7:7e:0d:7f:
34:28:d7:38:43:67:03:38:bd:a6:da:2f:d2:bc:67:
cd:17:ca:96:d3:d0:3b:63:e7:cd:b7:35:71:c4:9d:
95:be:60:82:95:15:aa:c5:95:67:a7:71:f1:6e:e3:
99:90:bd:c6:68:3a:5d:41:18:6f:d2:45:b0:2d:ff:
45:e2:2f:01:51:1a:75:30:91:4a:dc:bf:e0:70:b8:
be:49:33:3a:3d:28:de:5f:f4:1f:5a:a2:43:b0:c3:
86:6a:19:fd:ca:e9:d3:7c:e9:5e:f0:ee:c2:26:31:
8c:a0:bf:e1:50:6b:13:f4:ad:e2:de:6e:57:33:d5:
eb:2d:bf:38:5d:fe:5b:18:ab:c2:79:3f:08:96:1a:
a2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C1:B4:E7:E5:C1:DB:99:0C:7A:31:04:67:A1:44:AF:51:43:31:79
X509v3 Authority Key Identifier:
keyid:00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b3:16:b2:23:64:05:76:c3:81:39:cb:8b:b0:9f:d4:c5:95:
3a:b5:a2:f4:62:d3:10:5b:0d:74:10:71:2f:eb:76:e1:75:57:
17:89:bc:e9:34:a8:e4:44:fc:e1:6a:e3:a8:02:fd:79:c1:4d:
e3:a8:b6:f4:ae:41:92:02:6f:94:bc:e9:d7:44:54:5a:2c:8b:
14:7a:ed:f7:6c:6c:e6:0c:21:80:5b:05:2b:44:04:c4:2d:45:
fe:bf:25:c0:c9:03:3c:9f:86:c0:19:27:c2:fa:34:49:1d:8a:
97:71:c6:ed:65:e1:3d:4d:ac:6a:c1:fb:89:92:ae:78:52:6f:
7d:70:4f:bd:5a:fd:49:03:8d:45:bf:cd:bb:44:14:6c:26:ec:
04:0c:0d:b8:b8:f9:8c:ed:92:93:1d:62:ca:7e:8a:cc:1b:5c:
87:44:a1:21:de:5e:48:e2:ab:c1:2f:cf:1e:5c:c8:59:52:e7:
e5:b2:ea:ec:31:1f:f0:04:51:c7:2b:79:07:a4:43:9f:1e:ec:
50:01:37:a7:fb:54:09:db:bb:55:d5:e8:cd:fd:23:42:57:b1:
a6:a7:22:7f:96:af:e1:db:ce:f4:62:6e:ac:31:a1:cd:d3:64:
e2:f7:44:a4:5a:44:7f:e0:05:70:eb:c3:82:65:db:b2:a8:87:
51:d2:33:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:16:10 2025 by rpki-client