Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
File: Ac8qcbLHv1QcbMBBUc0CB402mSY.mft (raw, json)
Hash identifier: QJZMB6tj3ICALiAKTXlKEVYodP/Uj29H6xI8xZqLpus=
Subject key identifier: BE:E6:F8:72:F8:F5:60:FD:03:5B:6A:B7:DC:89:C0:0F:D0:91:B3:4E
Authority key identifier: 01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
Certificate issuer: /CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Certificate serial: 01969DBECBA7BEC9A5A2605801CC839EAA8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
Manifest number: 022A
Signing time: Mon 05 May 2025 00:00:48 +0000
Manifest this update: Mon 05 May 2025 00:00:48 +0000
Manifest next update: Tue 06 May 2025 00:00:48 +0000
Files and hashes: 1: Ac8qcbLHv1QcbMBBUc0CB402mSY.crl (hash: 4s9tw1Tw1iQVJzg+PlKRlWm9G7YNgMZN2l94tiB8UQM=)
2: rygZTFCBNWEkh81f14PWqNNI1kI.roa (hash: Nw/ZIl2uHVeZMov8V5+Nv9xGTV5/WVlGxw5x2u+Et/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:cb:a7:be:c9:a5:a2:60:58:01:cc:83:9e:aa:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Validity
Not Before: May 5 00:00:48 2025 GMT
Not After : May 6 00:00:48 2025 GMT
Subject: CN=bee6f872f8f560fd035b6ab7dc89c00fd091b34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:5a:6e:20:78:7a:4f:65:b9:c2:c6:50:26:
8e:f0:e9:3f:ff:23:16:30:13:fd:8a:39:33:b6:d7:
43:91:aa:03:00:bc:83:35:da:34:19:d1:cc:98:44:
5d:f5:01:ef:f3:e1:c0:24:ac:8c:14:69:82:4f:74:
0b:23:de:2c:4b:3f:9f:2c:9d:2c:6d:65:71:38:8f:
3a:10:0e:19:a3:1a:6d:f3:c1:93:f2:ec:02:78:fa:
c0:a7:35:b5:77:7b:44:a8:b5:3f:08:0a:a3:75:93:
c0:01:2a:e6:9c:5c:5e:8b:d5:c9:04:76:06:a3:4e:
28:dd:a5:cb:14:19:34:da:60:6a:c6:60:38:f6:a1:
c6:4b:94:3d:9d:c6:53:13:a1:55:06:20:d1:16:a2:
9d:44:90:69:54:3c:8d:e5:be:96:fb:c4:19:d7:23:
b4:e9:10:9a:bd:ab:ef:b9:cf:a1:3e:de:64:e9:bc:
d2:2d:ef:dc:4c:14:7c:33:7d:26:f1:58:34:ba:54:
b8:ab:4e:5d:da:02:e8:59:60:ee:08:cd:bf:80:30:
6d:ee:3a:e6:06:80:f8:62:5e:d8:15:56:a7:4a:57:
97:8b:7c:84:e0:d4:5c:fe:8b:cd:de:20:60:84:78:
6d:5a:50:f6:39:3b:26:23:4d:43:9d:ed:93:de:d9:
78:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E6:F8:72:F8:F5:60:FD:03:5B:6A:B7:DC:89:C0:0F:D0:91:B3:4E
X509v3 Authority Key Identifier:
keyid:01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:02:17:fe:76:75:dd:87:54:63:e4:94:88:76:34:b1:c5:df:
38:63:6e:64:70:65:db:f9:0e:c9:2a:62:ea:ea:a4:99:c0:33:
c7:34:61:b4:f4:a8:64:58:c2:33:49:15:cf:45:ea:a5:2b:31:
21:87:af:53:5f:69:04:b1:91:6e:57:09:b1:eb:bb:69:39:0e:
1a:3e:39:89:73:4d:52:e6:1c:d6:cc:38:f4:fc:cb:d8:dd:a0:
c4:7b:6a:2c:0a:7e:fb:44:81:80:2d:f8:82:23:a7:7a:ad:75:
30:cb:57:9b:89:36:e6:62:05:35:d4:7b:e8:51:9c:df:3a:3e:
39:83:6e:59:4d:e7:0c:26:81:c8:5e:20:e0:0f:7f:f4:d9:b3:
3d:48:c9:d9:8d:a5:3f:ed:7a:e7:a7:35:9e:95:5d:0c:ef:18:
dd:a3:a8:3c:9c:d7:8b:46:cb:23:f4:68:9d:a3:b6:55:f7:57:
3f:58:35:70:6e:c2:3f:83:33:e7:36:cc:e4:8c:14:eb:3a:fc:
b9:43:d7:a6:eb:43:ef:2f:87:d9:01:f0:42:51:25:e0:c3:b0:
96:e9:8c:a1:2c:fb:5e:3b:8a:23:ae:41:4b:f9:ff:bc:6c:a0:
28:76:70:4f:a6:25:e2:39:ba:a3:7a:3b:6c:0a:fe:10:81:1a:
79:39:64:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:52:02 2025 by rpki-client