Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
File: AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft (raw, json)
Hash identifier: dWS9uKoBVuCSixx7hDPEsqeDlfuvqdfYvSYPkf4LlT8=
Subject key identifier: 2C:36:61:02:0F:82:DC:F7:DB:5B:A1:FF:77:41:76:0A:60:BF:42:88
Authority key identifier: 00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29
Certificate issuer: /CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
Certificate serial: 019675305D811DB8BC4E1096BBF0A694C2D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
Manifest number: 047C
Signing time: Sun 27 Apr 2025 03:00:26 +0000
Manifest this update: Sun 27 Apr 2025 03:00:26 +0000
Manifest next update: Mon 28 Apr 2025 03:00:26 +0000
Files and hashes: 1: AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl (hash: iGVZkVXhcUFg+euFgO3nXnKWffWD5nWXvMAK6ogLZxk=)
2: e0RKB6c0KB07YznYp0xB1MsPmzk.roa (hash: qPmTA1Xz3mqQ1fzxdYI8NmB7dWpfMeJeVGXYLIJQJaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:5d:81:1d:b8:bc:4e:10:96:bb:f0:a6:94:c2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
Validity
Not Before: Apr 27 03:00:26 2025 GMT
Not After : Apr 28 03:00:26 2025 GMT
Subject: CN=2c3661020f82dcf7db5ba1ff7741760a60bf4288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:68:3e:9c:4c:93:f7:0c:b0:c9:63:78:cd:53:
65:2f:49:2b:48:34:2a:89:1e:8c:17:17:6f:5a:00:
b3:13:c1:56:75:dc:c3:54:c3:d3:f9:67:1e:ea:d1:
7f:51:56:e1:ac:a0:d0:1b:52:84:4a:8a:34:58:f3:
39:bc:d6:9e:28:c8:c3:b7:be:66:ca:28:61:aa:a3:
ac:99:2d:57:d2:74:aa:ad:01:f0:9f:3a:d0:f7:58:
40:f4:eb:d9:bd:d0:d5:a2:7e:c6:43:d4:1e:8c:ff:
ca:8b:9a:3d:6a:28:ba:42:d0:fb:33:ba:2e:be:ff:
38:1f:e4:cc:16:5f:3f:19:d8:a2:f6:0f:20:fd:46:
f4:80:7d:9d:25:5c:78:c1:84:3e:0d:00:06:40:b6:
38:ee:43:76:92:cc:cc:18:0e:13:3a:96:98:60:5f:
79:9b:44:9a:b7:4b:11:b3:27:0c:5e:0c:32:e2:ad:
8b:da:60:ef:e7:20:79:9e:6d:3c:2c:1a:bc:79:02:
8c:5b:20:30:5f:c0:c5:41:b0:41:d6:5b:29:36:70:
18:fa:15:35:50:b8:65:98:dd:e7:2a:d6:6e:7e:62:
02:e0:96:14:10:5c:c9:fd:14:3f:eb:14:df:fc:76:
33:cd:7c:25:c1:39:82:6e:ec:a3:dc:6a:e1:cb:c1:
f5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:36:61:02:0F:82:DC:F7:DB:5B:A1:FF:77:41:76:0A:60:BF:42:88
X509v3 Authority Key Identifier:
keyid:00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:70:ef:4c:92:87:60:9f:75:81:a3:de:ba:90:1c:20:80:6c:
d0:3a:b5:81:f0:a4:03:8b:38:f8:40:0b:e8:ee:bd:93:50:0e:
e7:96:d1:16:a1:05:dd:0a:48:17:b1:3a:5c:6b:4b:2d:47:f7:
a7:d4:77:cc:90:b5:40:6f:e9:9c:79:d2:6e:4d:01:54:4b:67:
ad:4a:82:a5:6e:9a:69:85:d8:57:d1:32:9f:fb:c8:a6:34:fe:
c4:d4:bc:63:5c:51:0f:9a:d0:80:a7:a8:87:d2:c6:40:35:c8:
4a:f1:ba:26:b6:f7:16:d1:9a:9a:87:6c:df:ee:29:5b:35:65:
f2:ef:0e:49:53:47:e8:f4:e3:99:dd:a4:90:22:41:93:1b:db:
0f:e1:07:78:4b:ed:70:45:49:5e:95:5c:f2:b1:90:19:8b:df:
c2:b7:46:42:75:f3:3c:e7:3a:31:5a:55:13:b0:a3:3c:22:70:
0b:2b:e4:07:86:89:ab:5a:6b:18:b5:82:2a:75:e4:b7:4e:5b:
15:13:be:aa:5e:51:dd:90:69:a3:5a:b1:a2:9b:37:fc:a8:10:
0a:66:89:fc:77:f5:fe:da:12:73:06:fe:5e:f4:8f:5b:4c:be:
cd:4f:26:d3:c2:6b:aa:63:ac:29:87:1c:3e:98:72:45:d6:a6:
4d:66:dc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:51:48 2025 by rpki-client