
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier: Uioa8Ahplnjm3hbzH3G0nq/d1eGBkcHttPgcCCKzWAM=
Subject key identifier: 00:CB:6F:64:CE:12:7C:20:16:24:D6:CE:6C:CE:C8:2C:98:41:FF:09
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer: /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial: 0196A31BBB66E3BFCC5F72FEB4C3260D6276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number: 1523
Signing time: Tue 06 May 2025 01:00:25 +0000
Manifest this update: Tue 06 May 2025 01:00:25 +0000
Manifest next update: Wed 07 May 2025 01:00:25 +0000
Files and hashes: 1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: 4/DXgBaefzNIqujOboUDx3hQmSthh+LMVx9C//j3DWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:1b:bb:66:e3:bf:cc:5f:72:fe:b4:c3:26:0d:62:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Validity
Not Before: May 6 01:00:25 2025 GMT
Not After : May 7 01:00:25 2025 GMT
Subject: CN=00cb6f64ce127c201624d6ce6ccec82c9841ff09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:ab:e2:fa:36:31:29:ef:1a:dd:9a:5b:eb:
94:ab:aa:5a:c0:50:97:e0:4d:d4:d0:8b:47:fa:2a:
fb:f6:81:90:c8:44:4c:5d:21:62:02:00:74:d3:d5:
05:5c:6e:b3:6f:0e:c5:7b:b3:06:02:ba:2a:97:a6:
eb:cb:5d:53:39:79:63:50:4d:74:83:f1:c9:12:1f:
5e:ca:7b:9f:cb:9a:a5:d6:6b:b7:52:65:9f:1e:2c:
f5:08:09:3f:0f:13:74:a9:49:7b:63:c7:ea:0c:48:
94:2f:54:8c:ff:69:47:a4:37:59:6e:26:81:66:ae:
14:59:79:df:99:09:1b:4a:54:bb:b5:9b:26:af:67:
ff:10:50:c6:f8:b5:50:37:00:dd:f5:10:8a:ba:b6:
47:2e:2b:74:61:df:d8:09:fe:1c:a3:9e:07:ba:96:
8a:21:9e:ab:80:3f:72:73:82:f6:4b:8b:3e:cc:4d:
ac:92:11:b8:cd:b2:47:a3:3e:9e:ff:1b:4b:bf:be:
ea:47:e4:32:93:00:98:1e:a0:32:fe:ad:d5:6f:62:
3b:ed:45:2d:06:58:17:03:62:d3:79:dd:db:f0:9a:
6d:24:ba:24:87:96:7b:ba:20:81:65:83:c7:44:6c:
87:d6:5b:be:fd:61:a9:c8:95:75:39:40:4f:8f:19:
fd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CB:6F:64:CE:12:7C:20:16:24:D6:CE:6C:CE:C8:2C:98:41:FF:09
X509v3 Authority Key Identifier:
keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b3:b6:8b:a2:fb:03:f8:9c:44:94:93:c6:ff:7c:58:ac:f5:
f1:ec:9f:2c:2c:ba:d4:f5:03:c8:da:ea:65:31:a0:bf:5b:05:
8b:3b:78:87:cd:98:01:90:10:22:ce:67:be:6f:90:c3:f7:34:
fa:07:29:9a:4d:21:98:84:0e:3e:3c:9b:e0:c7:6d:c2:bd:ad:
27:91:e7:a4:e8:a8:82:37:e2:5c:83:b6:97:b8:1d:cc:93:5d:
6f:f3:ef:29:34:01:53:2f:55:a1:54:4e:8b:46:1a:4b:3e:46:
81:97:bf:40:4d:b2:c2:31:64:37:6d:18:f0:46:e7:db:85:ee:
2f:99:6d:64:80:4a:c3:f6:47:2b:81:6d:e8:9d:02:9c:91:54:
80:15:45:c2:64:b5:2a:f8:24:89:a0:c4:ce:96:d1:5c:47:a2:
19:98:03:aa:fc:76:45:db:e8:60:23:e8:28:5a:20:7c:68:ea:
a6:66:be:74:10:81:46:0f:93:4d:fc:73:fe:5f:b2:be:29:63:
40:a4:f6:ac:7b:7c:bd:bd:4b:dd:66:63:de:de:fe:32:00:34:
1b:40:d6:83:67:59:41:7c:4f:0d:de:ca:62:59:85:9b:70:a2:
00:18:f3:35:36:46:2a:40:ef:4a:29:e0:d2:f3:90:51:2b:6c:
a3:6c:73:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:30:43 2025 by rpki-client