Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
File: AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json)
Hash identifier: KsUqC2xFj17VR5p+hjpesJAI0SM9vlPgwGKhVW1/P3U=
Subject key identifier: 5C:D1:73:39:ED:34:1A:7E:CC:CD:2B:2B:94:D0:3C:47:6D:DC:84:24
Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
Certificate issuer: /CN=00a856a4173895af44b8fd34455469a5c4d6173b
Certificate serial: 0196D32CE2538920D6886BE770A7B76DF2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
Manifest number: 84
Signing time: Thu 15 May 2025 09:00:56 +0000
Manifest this update: Thu 15 May 2025 09:00:56 +0000
Manifest next update: Fri 16 May 2025 09:00:56 +0000
Files and hashes: 1: 4mezRfHPXPaCo28qoJyolX64C48.roa (hash: QHUvtDK2DiCjdwwLpsM73EoVrUrKJFVkLwmkkTWUE3k=)
2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: kdgkDVMDrZg9VwSn3OQIN9US9cin9NXnOdxZIxkNARg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:2c:e2:53:89:20:d6:88:6b:e7:70:a7:b7:6d:f2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b
Validity
Not Before: May 15 09:00:56 2025 GMT
Not After : May 16 09:00:56 2025 GMT
Subject: CN=5cd17339ed341a7ecccd2b2b94d03c476ddc8424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:a9:94:46:f0:28:97:c6:70:fe:0e:bc:0a:
1a:e9:2f:40:7e:6d:fb:ad:ee:4a:2c:2c:51:50:42:
19:f5:22:61:15:3f:c9:61:86:7c:98:37:88:a4:fc:
ed:da:ee:ee:3a:6c:13:8d:b3:4f:f8:b3:c7:85:67:
ff:05:4e:e5:07:02:57:60:4d:16:91:4e:21:58:6f:
9e:63:9e:3e:6a:33:da:68:3c:4b:23:b1:2f:67:65:
60:bd:af:9a:cc:02:be:ef:d1:01:3d:a9:98:09:be:
00:b3:01:d2:4e:1b:a3:0d:e2:7d:58:4d:7e:08:9a:
96:d7:a0:34:26:17:35:a6:78:2c:cf:54:cd:1d:90:
73:00:7b:98:e5:85:12:a9:61:ed:d0:82:09:31:98:
ae:26:77:19:2a:92:07:a3:33:d0:99:34:c8:a7:fe:
30:81:18:ca:9c:8e:78:24:d6:5b:92:b4:e7:9d:c3:
98:03:c6:48:ee:41:d8:dd:da:af:e4:b2:b1:90:79:
d6:76:2b:e2:af:59:93:6a:7d:21:62:cb:8f:f3:80:
ce:47:d8:c8:a0:38:a0:8d:36:ce:20:98:8d:fb:26:
0d:17:3c:8e:ef:f4:ce:77:96:3c:c4:58:99:a6:7e:
77:47:cd:a8:8d:67:f8:44:b3:bb:13:1b:f9:b3:1e:
cb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D1:73:39:ED:34:1A:7E:CC:CD:2B:2B:94:D0:3C:47:6D:DC:84:24
X509v3 Authority Key Identifier:
keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f4:72:cc:d0:ae:c8:ba:39:0f:98:ea:e4:33:b3:cc:1a:bc:
8c:04:61:f7:e1:df:fb:9e:59:b5:4b:c6:85:38:a9:6b:0d:6c:
fb:52:7c:d7:80:a2:b2:36:cf:be:43:08:3d:f8:9e:0a:a6:24:
1a:f0:cb:97:aa:d3:41:e9:8e:84:67:14:ca:ae:85:db:4e:d0:
65:2b:d8:47:45:93:54:5a:d9:e8:ca:a7:3a:ff:b2:39:b5:26:
d2:4b:60:01:8a:a2:2d:51:48:b9:ce:e9:c2:2a:50:fd:18:63:
a7:8c:11:e4:69:f8:94:49:9f:d8:f5:6e:ab:3e:89:fb:cc:6d:
a8:e4:ec:f6:6f:2a:64:5c:20:e8:fa:d4:c8:91:e9:a2:d3:58:
80:6a:1c:a0:86:43:10:c4:68:88:78:97:5d:c8:9c:0b:17:42:
39:1c:19:82:c3:c1:b8:5b:b1:9c:3b:67:6e:ce:71:8e:7e:04:
e0:17:d6:18:c0:04:53:b7:23:5c:f6:8e:0e:71:0e:b0:ce:f4:
92:38:33:ba:0b:3c:f7:cb:5d:4a:04:4f:b9:81:e5:95:d7:cc:
fb:e9:d6:98:77:29:65:e5:14:08:ca:99:50:41:b4:34:09:9c:
39:5a:47:90:24:05:c9:21:2d:bc:59:fe:24:7a:04:d1:07:73:
2b:a2:b2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 19:01:22 2025 by rpki-client