Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
File: AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json)
Hash identifier: d3vhm/n0p6JhOMnGYuIpeVu492WMPUm1X+iOHQnHYN8=
Subject key identifier: 70:F2:27:1C:BF:2F:3A:ED:22:A0:5F:4F:74:F0:C7:D7:45:4C:66:95
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 0196B032B72FBAC2E28AB18A00FA77CAE491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
Manifest number: 0690
Signing time: Thu 08 May 2025 14:00:35 +0000
Manifest this update: Thu 08 May 2025 14:00:35 +0000
Manifest next update: Fri 09 May 2025 14:00:35 +0000
Files and hashes: 1: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: fGKhVVHFrxFaHd4xnI7sszai7jPu6373WtYYt85C/6g=)
2: F0fLEPNHCyvyIlmIFcsqkPyplGA.roa (hash: km4WfLRxUHxr5HonrrBoTZPZXAmt4eVnZ393OPRJNmw=)
3: I52JmxS8ms2LXewaNvexpBIItdM.roa (hash: wE72dqwKEdun5Ic36ck9eG0u4nkqju4VoFB4cJuV7v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:32:b7:2f:ba:c2:e2:8a:b1:8a:00:fa:77:ca:e4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: May 8 14:00:35 2025 GMT
Not After : May 9 14:00:35 2025 GMT
Subject: CN=70f2271cbf2f3aed22a05f4f74f0c7d7454c6695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:c2:4f:f8:a5:5e:ce:cb:62:22:7c:b8:ca:
12:96:ef:f2:47:8f:a0:48:42:3d:da:03:32:65:49:
ca:9e:40:19:4f:87:5f:95:25:01:f1:9c:a3:0a:3c:
b3:dd:fd:1f:55:e5:a2:10:1b:eb:3e:ef:91:e7:a1:
8e:29:f4:cf:97:b0:b5:1f:29:9d:55:71:30:8e:87:
f5:bf:70:91:ce:fd:d7:67:79:ce:01:bd:fb:36:2a:
eb:b6:3e:ef:da:62:83:0f:a8:52:ac:3f:82:46:84:
57:bb:55:0a:35:16:6f:6c:9a:48:f1:57:08:86:64:
1a:47:1a:6a:69:58:62:30:24:8e:b2:c1:98:8f:e0:
5a:ab:9f:a8:cf:1c:b7:af:50:43:0b:fd:4d:ee:72:
3b:9b:68:21:cc:9e:49:97:2c:ae:00:73:e7:d7:64:
d2:35:6c:20:26:6b:bd:5a:ba:ac:24:31:0e:23:60:
6f:c1:fa:53:30:a8:43:c1:74:64:c9:7a:69:e0:b1:
56:8f:f3:2e:81:b1:d8:af:1e:c7:fb:33:ad:99:af:
8f:3c:90:26:a9:ec:82:fe:35:06:3d:53:c6:d4:06:
92:ef:c3:2f:60:8d:e6:df:52:d1:c5:61:2f:21:6d:
5b:4d:3f:1c:5a:20:4f:ec:0b:bc:46:b7:cb:27:13:
3a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F2:27:1C:BF:2F:3A:ED:22:A0:5F:4F:74:F0:C7:D7:45:4C:66:95
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f2:61:1d:16:d1:95:4a:73:f5:91:5d:2f:c7:ca:20:5a:bd:
3a:dd:96:8e:3e:9a:4d:f6:e7:ff:2f:55:9f:a6:39:a8:0c:8f:
24:13:35:f3:f7:e6:03:c7:b4:67:b2:a2:7b:1a:d0:ce:7c:43:
08:35:cb:0b:13:7e:45:51:64:9e:a9:13:7f:e0:61:ac:20:0f:
45:7b:7d:1d:05:1f:33:52:45:4c:f9:ba:c5:ee:bc:4e:8d:15:
66:b4:d4:78:d9:80:89:00:88:a9:2a:ec:16:56:ec:33:5b:d6:
dd:4d:a0:43:79:ef:6a:4f:2f:c1:22:67:2e:21:f6:83:e9:14:
6a:06:c6:1c:ca:60:17:dc:d9:86:18:cc:5e:20:5f:d7:f0:df:
00:7e:15:77:17:24:a7:df:18:f7:ff:ae:ce:9b:bd:3c:7a:13:
a7:0a:4f:d1:60:ac:20:34:94:b6:93:eb:a5:9e:a6:0d:12:0f:
b2:fb:a5:4b:fb:28:43:22:2a:84:b4:35:44:a7:d6:7d:08:03:
16:9b:05:e7:75:d1:58:0c:97:fc:91:9b:1f:f4:73:1e:e3:3f:
87:dc:f6:35:8c:b2:d1:a0:43:b3:5e:48:03:19:7a:51:99:8f:
c6:f6:59:b7:b2:b7:36:77:eb:fa:5b:15:a3:bd:62:ad:df:f1:
04:ad:e3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:39:19 2025 by rpki-client