Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
File: AL8jAERknAbXXjAsUXUATb_GcmE.mft (raw, json)
Hash identifier: dF0XzsOfP/THdIjCX5j4jnoTmvcvaV24W9raS8jsFnI=
Subject key identifier: D4:12:50:69:D8:71:D9:13:10:C9:6E:B8:16:4A:FA:7E:02:F2:6B:99
Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261
Certificate serial: 0196AFC4E4004F43055F059F647C2169CC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
Manifest number: 0BD1
Signing time: Thu 08 May 2025 12:00:38 +0000
Manifest this update: Thu 08 May 2025 12:00:38 +0000
Manifest next update: Fri 09 May 2025 12:00:38 +0000
Files and hashes: 1: AL8jAERknAbXXjAsUXUATb_GcmE.crl (hash: dqQe2F9JONuD5wPtaX9agk2iw81CtnrjuP4+M4B+E1c=)
2: qzSVGtS_jWsXuo115ysr12jv81o.roa (hash: 6sU/7Xohp1bS1zbTFVnz4YbGVdQCm8u0BmBoUOstkdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:c4:e4:00:4f:43:05:5f:05:9f:64:7c:21:69:cc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261
Validity
Not Before: May 8 12:00:38 2025 GMT
Not After : May 9 12:00:38 2025 GMT
Subject: CN=d4125069d871d91310c96eb8164afa7e02f26b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:eb:2c:ff:02:1c:10:ac:27:5a:95:af:4a:
aa:76:a2:ed:c2:6c:c8:a2:27:a9:ef:ae:19:18:ef:
44:1f:63:26:df:a5:69:8e:f0:ca:d9:16:02:5d:8f:
9d:19:3c:d5:d2:17:91:16:0f:f5:6b:a2:35:62:87:
71:40:a6:74:a4:e2:8c:e4:f9:35:d3:f1:b0:f9:ae:
36:48:35:ec:19:f9:29:b1:fc:4a:3a:79:2a:b8:e1:
2a:fe:2d:f7:71:7a:0e:43:2e:f4:05:25:60:68:81:
26:81:bb:dd:44:ae:4b:54:6e:18:d0:cf:d5:79:65:
38:f2:32:46:07:fc:24:1a:90:8c:6a:dd:68:3d:db:
21:10:c2:2a:18:2b:6c:f7:a8:cd:62:66:16:ec:0f:
c4:95:74:be:02:b4:30:6c:ad:3f:4d:4d:73:81:26:
d7:ee:af:86:e6:69:e7:19:78:3c:20:fd:ce:c8:ef:
d8:e6:2e:5a:05:42:1e:54:d7:ff:5a:3a:21:bd:3e:
00:49:6b:46:e5:6a:0b:1f:22:5d:5e:d7:b1:1c:79:
de:2c:f4:9b:23:bf:43:2c:49:ba:51:b8:ce:a1:a2:
1f:05:04:f7:37:38:df:af:92:32:fe:84:03:c5:b5:
42:20:da:6c:a5:fd:8f:b5:c2:06:d4:fc:7a:9a:46:
63:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:12:50:69:D8:71:D9:13:10:C9:6E:B8:16:4A:FA:7E:02:F2:6B:99
X509v3 Authority Key Identifier:
keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b7:ec:4c:3c:95:60:92:50:1e:df:08:61:30:6e:56:e0:46:
f6:c6:7b:2f:7d:cb:fc:2f:77:27:9b:85:87:06:eb:7b:4e:25:
85:46:1d:13:00:7a:1c:9a:d0:be:6a:22:32:7e:07:3a:95:0e:
cb:16:f4:90:db:43:fe:ca:aa:6f:2b:27:8f:cc:94:cd:41:15:
fa:ea:47:e6:f0:5f:a4:f4:3c:a3:01:d7:86:3d:ca:91:c2:72:
36:92:fa:ab:0e:1e:01:50:8d:17:98:23:b8:66:2b:a7:87:de:
f7:7f:a9:62:9d:52:28:a8:f3:12:60:79:79:9c:1c:43:81:43:
2f:4e:8c:2d:d2:f5:0f:cf:e5:11:cd:2f:66:44:5b:9d:ff:3a:
2f:16:7a:ff:51:df:b1:6a:c5:79:d6:5e:1e:56:b8:b9:c8:b6:
ba:2b:54:ec:37:5b:c3:0d:79:a4:19:99:d6:bc:d4:f6:a8:c0:
fa:ca:6e:a6:27:05:a4:48:1e:a0:0b:86:0c:f1:6f:cd:75:f7:
5f:26:09:16:1d:a1:3f:e7:5c:7f:62:6a:19:83:8f:0f:b0:46:
58:6a:be:37:ac:03:ea:57:cd:a5:d7:5e:d0:59:cb:0d:81:24:
eb:5f:6e:15:9e:90:62:85:3c:72:bb:6e:2b:91:93:68:a5:51:
95:dd:ce:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:51:12 2025 by rpki-client