Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json)
Hash identifier: CYEG67KSswOwl6hm0qUQJz8iiSAr2e6rqjBHgVS1xEY=
Subject key identifier: 0C:A7:44:D1:5C:7B:F8:17:D1:D5:46:EF:9A:0C:9D:E0:97:09:5E:25
Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Certificate serial: 01968F27B359CBB94B17567D4CA36F6CF8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
Manifest number: 1517
Signing time: Fri 02 May 2025 04:01:05 +0000
Manifest this update: Fri 02 May 2025 04:01:05 +0000
Manifest next update: Sat 03 May 2025 04:01:05 +0000
Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: dgyh/tck7dtABJjd2EvQNgd2VFCUnCIaaBoQHRUcZk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:27:b3:59:cb:b9:4b:17:56:7d:4c:a3:6f:6c:f8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Validity
Not Before: May 2 04:01:05 2025 GMT
Not After : May 3 04:01:05 2025 GMT
Subject: CN=0ca744d15c7bf817d1d546ef9a0c9de097095e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:db:4c:62:db:ca:6d:a5:d2:d5:5b:60:c4:c1:
a0:09:b4:64:96:6c:46:ae:21:d6:22:71:b4:89:f8:
4c:aa:3a:45:61:a1:22:1a:74:0b:b0:32:ff:64:c6:
87:77:f9:8b:89:48:07:f5:a6:c5:11:67:c9:e3:e4:
9d:5a:5a:2e:3e:4f:72:b2:f7:1d:53:aa:63:af:e8:
b9:b8:f7:74:2b:0e:bf:07:e2:00:52:03:32:03:47:
dc:7f:83:ef:b4:f0:e6:ed:5b:29:61:1c:22:d3:6e:
4b:d8:84:29:cd:74:2b:2f:b1:df:a6:f6:54:17:c9:
8f:a5:33:d7:7d:9a:23:9a:b3:a7:ad:97:bf:ab:99:
af:2d:a2:4c:ed:13:d4:d0:d1:97:d5:10:6c:4d:a8:
bf:7d:03:81:d3:71:b5:44:81:61:a8:a4:39:76:b2:
20:47:66:ef:5e:7d:83:4c:24:3c:84:44:3b:a9:2c:
0b:4c:c6:13:a7:13:a9:a9:4d:d5:1f:a7:d9:bd:e1:
98:38:11:31:98:83:7f:00:8a:5a:20:85:60:aa:ea:
e5:dd:69:34:ba:2a:76:68:0d:12:ee:13:77:ba:6c:
19:36:0e:32:62:d3:6a:61:e6:c5:11:5e:d9:75:e1:
a2:b8:32:6b:55:99:8e:1d:f6:32:25:e5:64:19:b2:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A7:44:D1:5C:7B:F8:17:D1:D5:46:EF:9A:0C:9D:E0:97:09:5E:25
X509v3 Authority Key Identifier:
keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e3:eb:52:cb:d1:36:af:09:d6:03:49:14:3a:88:40:5e:b0:
43:fc:bc:b1:cf:a0:44:90:fd:3d:77:3e:86:3b:f6:c0:3b:f4:
bb:e2:e3:07:ad:22:b6:e2:ca:f1:df:92:97:f8:3e:66:40:0a:
f1:d6:48:7a:dd:d5:46:3c:df:f8:19:d8:08:a5:1f:57:80:2c:
d3:6f:47:74:d1:91:53:36:d4:cd:5e:8d:68:e4:77:0b:10:36:
77:20:b1:f3:4e:d1:48:1e:4c:07:fd:b3:85:aa:95:73:3f:74:
35:aa:83:9c:c4:72:75:e2:5f:e9:25:3b:50:c3:94:7b:a5:26:
83:92:bf:ca:0a:cb:21:1b:25:e9:65:a8:ca:57:a5:1e:47:0d:
90:67:b4:4b:07:6c:e9:f9:1d:da:23:32:69:f2:83:94:d1:b1:
ac:fe:17:8b:e8:6b:0f:84:e8:ec:83:66:8a:82:c4:d0:a7:37:
4c:97:d2:2d:97:99:67:db:f7:5a:76:a3:08:69:f0:39:2d:02:
b3:bb:fd:6b:4e:db:23:83:7b:4a:78:8b:53:8f:34:8e:bb:85:
ba:1d:a7:15:7d:65:19:69:fd:49:81:f8:e9:85:40:48:95:fc:
9a:12:db:84:f3:48:54:53:8a:18:dd:90:73:b1:ce:95:99:fe:
8d:33:74:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:07:04 2025 by rpki-client