Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: EPMPqggr8qp5NQ2xciX0PBGLFzSzGsl61hoDmb7CcD0=
Subject key identifier: 0E:19:3A:22:34:8E:86:64:33:61:0C:00:92:8F:F0:25:EA:C3:DA:E1
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 0196C5A7BF1DA6B98656221B3E41ADFB090E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 14CC
Signing time: Mon 12 May 2025 18:00:27 +0000
Manifest this update: Mon 12 May 2025 18:00:27 +0000
Manifest next update: Tue 13 May 2025 18:00:27 +0000
Files and hashes: 1: 1-4u4Dw9kw9Y9CEi6GTjA8RhiXyk.roa (hash: Kdt5sjduBNPRdliFvzUojjEC7aaeGnPMG73opbmbK+Q=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: Q5MukmHPR3Ua/hJBAxFA84iFGUshVa7Tpg8KGbHq1/Q=)
3: nFTNuRdL8Z-Wdwlm8A1gxGSf2iE.roa (hash: Be/+xAPsxrgz7pa9P1aEcP7attPVHrGgMu7I83eiMD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a7:bf:1d:a6:b9:86:56:22:1b:3e:41:ad:fb:09:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: May 12 18:00:27 2025 GMT
Not After : May 13 18:00:27 2025 GMT
Subject: CN=0e193a22348e866433610c00928ff025eac3dae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9a:77:91:f2:86:45:7c:3c:9a:24:87:46:b3:
e1:9a:21:c2:17:c0:9b:f7:d9:3c:0c:25:30:f0:8e:
13:9c:47:56:bc:c4:54:70:39:fe:8b:e3:41:55:d1:
b5:5c:cd:20:37:ea:35:8e:af:bb:dd:41:67:7c:7a:
45:45:5b:66:f2:25:3c:b4:14:8f:f8:7b:b6:3b:29:
9d:cf:da:8d:72:73:ca:dc:53:8c:9a:b7:f7:b2:cd:
75:36:1f:88:78:33:ec:0e:b9:2c:c4:39:95:e8:75:
28:8f:31:2c:9d:b4:3e:83:1f:07:25:b4:1f:4b:61:
44:b9:ec:ed:e7:48:25:89:ed:21:ef:77:e8:a7:26:
af:8c:03:7c:ee:98:5a:b6:66:e5:ea:72:41:df:6a:
2f:e6:45:ba:a5:fd:18:8e:cf:87:e8:fb:04:87:68:
80:69:b3:7b:d5:ce:ec:93:ae:df:5c:f7:64:ab:0f:
7c:c9:9c:76:2f:0e:39:a4:fd:e5:81:7e:95:98:74:
9a:80:be:55:45:ec:46:7f:ab:b0:98:df:c3:71:7a:
f9:2b:e4:c4:49:03:06:cd:74:44:58:4b:7e:62:d8:
45:79:17:30:f5:1a:7a:de:78:41:7c:29:0c:bb:5a:
c9:60:a8:c6:9f:05:b5:b7:47:43:b2:9c:35:b9:0e:
8f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:19:3A:22:34:8E:86:64:33:61:0C:00:92:8F:F0:25:EA:C3:DA:E1
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b8:39:3a:1d:d6:80:98:3d:42:86:1e:20:cf:a2:21:1a:46:
94:b2:2c:cb:d0:f9:a3:c4:d6:58:90:39:bb:fe:ef:bf:1d:be:
a8:81:95:f1:d1:d8:f7:dc:b7:8c:fb:13:23:a7:1d:c2:54:db:
b9:2f:d1:46:6f:c5:06:50:2b:34:43:69:da:3f:19:43:e3:0a:
51:e2:50:7c:53:06:d5:c7:68:89:3a:bc:78:c1:07:e8:7f:83:
aa:db:38:0e:67:1d:7c:51:bc:3b:cf:fa:05:c6:6b:a8:55:3f:
85:84:19:eb:f0:8d:67:59:f8:35:78:8b:56:b3:f8:33:88:7f:
8b:73:72:bf:0f:93:fe:32:c2:13:1e:e4:ed:4d:2a:f5:4d:03:
bd:5c:df:77:c5:d2:95:e9:7b:12:9e:d5:fd:43:e5:89:4a:44:
2c:0b:16:06:9e:17:bf:e7:28:a1:a8:8f:7c:37:a0:b2:7d:07:
7e:10:21:90:0d:6f:60:65:a3:b4:7a:fe:7a:a6:05:0a:2f:85:
be:99:1b:34:fe:13:47:c9:06:c6:22:be:00:4b:60:b6:e7:31:
74:64:58:d9:1f:55:cc:d1:4e:20:c4:b1:46:c3:fb:1f:fe:06:
c2:99:36:7a:02:8b:86:58:5d:0e:4a:f6:db:f8:4a:4e:d1:3b:
26:98:15:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:48:21 2025 by rpki-client