Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
File: ABCrc5F2m18sVOM8i1p9-fN6M6g.mft (raw, json)
Hash identifier: 8i3sfNMD2buburaf6yzWc6FUZpb/gruTdL9fRRVHFTM=
Subject key identifier: 8A:64:E1:F1:A7:DE:1C:10:84:BF:64:57:29:1A:9D:DB:27:4A:CD:41
Authority key identifier: 00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
Certificate issuer: /CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
Certificate serial: 0196A2771BE83D4959BF955DBCB74C705020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 22:00:37 +0000
Manifest this update: Mon 05 May 2025 22:00:37 +0000
Manifest next update: Tue 06 May 2025 22:00:37 +0000
Files and hashes: 1: ABCrc5F2m18sVOM8i1p9-fN6M6g.crl (hash: xWMR9hPxvRCLoniizSVGcmZBh1+zt0YBj0aZ08TAE2c=)
2: bucOkPeZ9hgmXR-Cim7gffbbCvY.roa (hash: izYXDRbk9TNl9PM3HDiVbSwwP9wF9slECQZLPrOfqi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:1b:e8:3d:49:59:bf:95:5d:bc:b7:4c:70:50:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
Validity
Not Before: May 5 22:00:37 2025 GMT
Not After : May 6 22:00:37 2025 GMT
Subject: CN=8a64e1f1a7de1c1084bf6457291a9ddb274acd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:09:08:49:d5:53:a7:1d:ed:fa:07:c2:65:
48:b9:b2:bf:f8:88:5d:98:f6:e0:92:2c:35:e3:eb:
46:c0:98:e1:f1:62:6e:f9:64:7c:55:ed:d8:06:f6:
7b:d4:45:29:0e:e1:c9:e2:48:1e:42:60:4a:3a:ae:
cb:77:7f:5e:61:24:73:40:82:f4:01:1b:a4:c0:96:
ac:59:89:8d:3d:84:df:50:97:35:f7:da:bc:8a:59:
a9:28:e0:c7:8e:a4:19:6d:67:96:f6:2f:6a:37:25:
0d:81:b3:49:5c:c7:e2:7f:8a:91:2e:d2:ad:81:70:
18:84:70:db:97:1c:aa:bb:fa:e9:76:39:c6:c9:e5:
af:1e:bb:46:b7:0f:ec:f5:e2:46:34:1f:ba:a1:6e:
33:e4:1d:60:ac:c6:ca:77:cb:b6:8f:9c:7c:22:62:
11:1d:e8:cb:4c:3b:50:5c:fd:6f:c0:c1:d4:0d:e1:
9a:ba:ab:34:8d:20:5f:5f:22:c1:25:a3:42:fe:52:
a9:39:96:d8:3e:b4:f9:89:cc:ea:5d:05:3b:28:2f:
b0:0c:e5:8f:f4:c3:12:1b:40:96:f7:5a:47:e0:37:
e4:7f:a1:fa:c2:6d:0c:06:0c:f2:8a:6f:62:72:d1:
04:c6:75:22:31:41:a7:d3:fa:21:dd:d6:0f:9e:6a:
06:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:64:E1:F1:A7:DE:1C:10:84:BF:64:57:29:1A:9D:DB:27:4A:CD:41
X509v3 Authority Key Identifier:
keyid:00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fa:3a:af:66:99:55:1f:2a:31:b0:41:2c:e0:6c:b5:65:f3:
3f:a7:17:14:d8:94:9b:24:91:32:d8:9a:66:b1:c8:3d:ef:38:
25:e3:f1:28:d2:e5:13:f5:d3:ee:9a:83:e1:b9:71:6b:0e:fc:
00:1d:38:c8:9c:d0:d7:9b:c6:60:9f:b0:47:8f:ca:44:f4:2e:
41:cc:fc:24:ef:0f:0d:5e:4a:17:e7:4d:35:7d:ae:1d:0b:90:
84:0e:6f:71:da:91:df:f3:0a:f9:42:4d:f3:0d:e8:46:0c:fb:
92:e1:9d:2b:46:55:2d:68:8b:0b:d0:4c:58:8d:53:b0:9b:0a:
e4:0e:b8:14:52:53:64:32:e7:b4:74:f7:4a:fd:44:9f:91:dd:
f1:f5:2f:c2:28:c2:f2:c3:43:04:a1:bd:d3:3a:09:dc:db:5a:
d5:35:44:dc:6a:b6:2d:64:02:bf:75:f7:ed:7d:70:93:11:ab:
a3:90:5a:f2:cf:87:b1:16:ba:ee:63:61:f5:b7:54:d2:b7:4b:
a8:06:e6:37:e9:14:6e:7b:27:35:c7:7a:89:ff:01:69:1a:0b:
30:a6:03:9d:a9:3a:1a:8c:82:b7:23:48:0f:45:aa:76:12:26:
c0:63:13:1d:a0:5e:50:a5:80:74:92:ec:fa:e1:1c:36:80:7d:
80:7b:eb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:44:12 2025 by rpki-client