Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
File: AVz-48K26knSnhA-I6Uixi44UxE.mft (raw, json)
Hash identifier: NOd12bnddfP6jQfmH9iQcLy4mLgWTfQb6QLt+ZmFsxY=
Subject key identifier: 64:14:93:9E:2F:58:E8:DC:5F:30:50:AC:9C:15:79:AD:D9:D2:34:E0
Authority key identifier: 01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
Certificate issuer: /CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Certificate serial: 0196C8721D51E8A1E80847AF451219B325F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
Manifest number: 124F
Signing time: Tue 13 May 2025 07:00:43 +0000
Manifest this update: Tue 13 May 2025 07:00:43 +0000
Manifest next update: Wed 14 May 2025 07:00:43 +0000
Files and hashes: 1: AVz-48K26knSnhA-I6Uixi44UxE.crl (hash: YsWAZ1+GCdXP//EAcPt+zInY4M51rKL7UhvNwr+ze7s=)
2: RcE6nYyQF7fwLJ22hRw58pxpEO4.roa (hash: U71UZwrToMoGIgEOhJfqlYI83JHFBKS+bWz/uad49Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:72:1d:51:e8:a1:e8:08:47:af:45:12:19:b3:25:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015cfee3c2b6ea49d29e103e23a522c62e385311
Validity
Not Before: May 13 07:00:43 2025 GMT
Not After : May 14 07:00:43 2025 GMT
Subject: CN=6414939e2f58e8dc5f3050ac9c1579add9d234e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:75:46:8e:dd:12:47:ec:b5:8d:13:ff:ef:
8e:5e:a3:86:67:81:ea:81:29:9c:be:28:31:74:18:
3b:5a:99:a0:5d:63:3b:7d:08:17:53:2e:29:89:59:
50:62:0b:2e:20:b3:be:22:69:bd:9a:a4:3d:0d:18:
43:86:fb:43:cb:cb:f3:f9:9d:81:8e:1d:55:81:98:
e0:be:18:00:cb:c8:c6:c4:0f:1f:7e:3f:c1:ae:bc:
05:17:b4:cd:9a:0c:56:cd:a8:b2:9a:f7:2f:f6:71:
42:84:bd:4f:df:fd:e8:44:32:b9:9c:05:6e:85:09:
e1:59:2b:dd:cb:fb:48:96:25:96:f6:dc:82:be:88:
b2:d7:4b:1d:0b:00:07:34:6a:28:a7:f4:9e:3c:46:
44:27:fe:5b:0d:e3:33:45:73:58:d1:cf:c0:72:ff:
a1:24:dd:2f:e4:71:26:37:72:18:63:0c:dd:ff:c9:
bc:f5:cc:23:97:ca:3a:56:d9:3b:f7:16:49:f1:19:
7f:e7:0f:4c:ed:22:a4:c7:51:c4:e8:d8:2e:db:9e:
b5:92:fb:ca:82:66:1e:b0:bb:ff:d4:45:a5:5b:a2:
f6:9d:35:93:96:18:97:97:13:a6:ea:2e:ca:e9:34:
b3:3a:64:b2:47:f6:a1:91:9c:84:aa:6f:c8:73:8b:
8d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:14:93:9E:2F:58:E8:DC:5F:30:50:AC:9C:15:79:AD:D9:D2:34:E0
X509v3 Authority Key Identifier:
keyid:01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c0:3d:4e:8d:8b:d4:be:a9:06:81:81:57:4e:8c:dc:0c:23:
14:03:a8:8f:07:f6:21:45:b2:13:d0:b0:53:13:0b:dc:0d:dc:
bf:48:6a:f7:be:6c:a5:36:5f:e1:76:22:d0:85:97:91:29:50:
e1:68:dc:7e:19:35:d9:4b:b7:79:a0:26:c9:70:ee:30:d2:da:
cc:ef:1f:bc:5d:30:1c:d8:1d:8e:db:2b:76:5d:aa:27:a3:90:
76:42:c3:9e:b8:c6:7d:6c:69:fe:c9:60:b4:06:82:e5:a2:0f:
35:fa:58:b5:65:b9:46:92:57:41:b1:c8:c9:49:ec:c6:a9:47:
c3:91:cc:43:1b:d3:6e:96:a5:5d:dd:b3:fe:59:b3:d5:a6:03:
7f:12:0c:c0:7f:ea:90:8e:d6:ce:aa:8e:94:e3:c3:c0:5b:92:
ff:28:74:15:1b:16:5b:f7:50:e9:78:b5:4d:9d:ab:5d:f8:32:
f1:8e:ec:fa:f2:8a:f1:c4:1d:65:cd:70:9b:f5:97:88:b9:27:
0d:b9:c6:f3:a4:c8:af:3b:77:7d:3f:02:68:c2:d6:eb:f2:05:
13:cd:01:68:a8:d7:68:43:69:cb:fa:c0:c2:1f:9b:91:67:49:
09:d4:34:a5:6d:8c:2a:e5:f1:26:7b:cd:c2:e9:99:a8:73:b6:
5b:27:29:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:18:34 2025 by rpki-client