Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
File: AVkheESIrdmgVmH_EXh-x1TmBeU.mft (raw, json)
Hash identifier: sMKIdE2VYSazDinOU2Y3vEI7AeZ4xA5nklixAWi+MEo=
Subject key identifier: 17:E0:6E:C6:17:E3:D5:50:2C:3B:6D:A0:79:60:34:3D:3D:5C:19:E2
Authority key identifier: 01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
Certificate issuer: /CN=015921784488add9a05661ff11787ec754e605e5
Certificate serial: 0196B9A4A1C6021062EC8DA029DD177AEF7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 10:01:36 +0000
Manifest this update: Sat 10 May 2025 10:01:36 +0000
Manifest next update: Sun 11 May 2025 10:01:36 +0000
Files and hashes: 1: AVkheESIrdmgVmH_EXh-x1TmBeU.crl (hash: t5gKmy1gTqeZGEuo7qfyy+T7yl5TTnN6zJwQR/QJCgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:a1:c6:02:10:62:ec:8d:a0:29:dd:17:7a:ef:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015921784488add9a05661ff11787ec754e605e5
Validity
Not Before: May 10 10:01:36 2025 GMT
Not After : May 11 10:01:36 2025 GMT
Subject: CN=17e06ec617e3d5502c3b6da07960343d3d5c19e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:9e:c6:e8:45:89:54:4e:97:f6:c6:5f:9c:
87:9b:a4:76:62:ad:5c:f2:a8:ad:54:1a:42:95:75:
e0:7a:09:c2:f7:2c:28:cb:75:88:4c:3e:8b:7d:c7:
46:5e:1b:a5:64:73:1e:d2:78:5d:7b:7a:09:ff:23:
d0:48:0a:8f:10:5d:64:c7:16:40:a6:67:6c:cf:dd:
06:71:92:b5:06:72:15:6b:01:9a:fb:d1:b5:73:72:
03:56:33:e6:4b:ef:a0:23:be:41:9e:06:e6:96:1c:
04:c5:39:90:ee:a5:3d:ec:86:2a:b2:e8:65:60:4f:
a7:4f:29:d0:5f:41:46:7c:88:e6:92:86:62:f9:66:
8e:53:4a:bb:55:36:da:d2:bc:2d:61:ec:07:5c:da:
3f:2e:bb:83:4c:5b:7e:4e:0e:59:be:5c:2d:10:29:
bd:4c:f9:70:d9:4a:7d:a2:d4:54:8b:10:91:86:68:
7b:76:0f:15:93:ad:00:c5:9a:55:04:c1:3a:e5:05:
88:18:9f:9d:23:b5:09:35:ab:5b:2e:b0:fa:42:18:
b6:20:30:3f:f9:f9:b3:05:9c:2e:91:3c:e6:ff:e3:
41:a9:03:56:45:f5:cb:fb:77:1d:f5:e0:36:d5:7b:
9c:0f:58:3d:d2:b3:e9:72:42:d3:41:f2:93:c7:2f:
d7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E0:6E:C6:17:E3:D5:50:2C:3B:6D:A0:79:60:34:3D:3D:5C:19:E2
X509v3 Authority Key Identifier:
keyid:01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:95:d1:a9:87:8f:56:e8:bd:06:d5:b2:e5:20:8f:a5:87:bc:
c0:b8:2c:4a:ae:70:f1:2c:4d:72:3c:ff:74:3c:26:54:f8:a9:
ba:8f:28:99:53:d2:c5:06:53:4e:fe:7c:5b:74:4a:f8:11:34:
a6:7e:b2:73:52:26:1f:6c:4a:bc:b6:96:ed:b9:a5:d7:79:38:
82:44:41:d4:a3:ec:53:a0:cc:dc:d3:7b:8b:b6:c4:34:ad:b2:
67:db:b4:69:26:26:5d:71:f6:4b:03:e1:99:90:1d:9c:2d:7b:
8d:28:d8:c6:f5:88:19:cf:4d:46:57:ce:06:ed:e6:78:f2:ab:
d3:21:b1:92:7d:58:a6:b7:61:d0:ff:88:ad:3c:93:4b:50:d0:
64:50:8c:83:60:86:8f:f1:af:60:19:06:c4:5e:f6:00:68:56:
3d:1f:7a:41:9b:d0:14:d2:70:0b:be:c2:cb:6b:e4:53:e5:b1:
7e:59:47:e6:e8:08:af:9b:34:d4:0f:11:22:85:93:1a:78:ab:
2c:86:1e:bb:56:c8:a4:c4:9b:b2:22:e8:15:3f:68:cb:0d:f6:
13:18:ff:db:f9:39:e7:9b:09:c2:59:c0:2b:2c:06:6a:8a:a2:
83:4f:12:69:45:f4:ba:6c:99:21:8b:e5:29:3a:89:ab:39:cc:
f3:b7:75:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:36:42 2025 by rpki-client