Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
File: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft (raw, json)
Hash identifier: dDyi27woSrt1hxsvfhCw+FCJXoWygwp1mTZylumDOJ0=
Subject key identifier: 17:AA:20:BE:80:B7:81:F1:64:D4:88:B3:FA:6A:94:A2:46:7B:0C:D4
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial: 01967679E6309CD299D0F1D56F70951A229C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
Manifest number: 0E00
Signing time: Sun 27 Apr 2025 09:00:22 +0000
Manifest this update: Sun 27 Apr 2025 09:00:22 +0000
Manifest next update: Mon 28 Apr 2025 09:00:22 +0000
Files and hashes: 1: ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl (hash: 42oXr99PQdowbMpwJ8w7BYCIh6j8IjdLZKBH56yNeYM=)
2: BFXbBXmgj_U02tRnQ5cIwT3U598.roa (hash: Y3AkRUWe6b+8HIEcIYVHhjtW0X1zsv/QwB6RX5f9lr8=)
3: KkxpxMmS8S1Mkz143AE6R41uFZE.roa (hash: eXPgSZI2TwSvGEkwL2CEgSDrAeeuar7/NsGxHBBximA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:e6:30:9c:d2:99:d0:f1:d5:6f:70:95:1a:22:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
Validity
Not Before: Apr 27 09:00:22 2025 GMT
Not After : Apr 28 09:00:22 2025 GMT
Subject: CN=17aa20be80b781f164d488b3fa6a94a2467b0cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d0:f3:88:14:c4:34:41:fb:27:c3:5c:8b:38:
82:30:c4:8e:e7:6e:d5:30:67:b9:fa:55:2b:d4:6c:
59:2e:b9:3e:03:3b:0e:6f:2b:e8:d3:ae:76:1b:ed:
a6:a5:ed:93:1d:13:77:81:9f:2b:87:a4:39:70:1d:
14:cf:a1:ae:c0:8c:da:89:ca:de:77:0f:04:92:fb:
2c:b4:f3:65:3a:08:91:d8:14:a1:ea:a0:fc:15:69:
57:e7:33:f3:b2:9d:d8:93:13:db:d9:02:66:45:8a:
e8:b1:4e:bf:e6:46:e7:1f:8e:23:07:8e:79:9a:42:
09:b9:2c:05:53:7e:d1:98:13:56:4a:5d:a3:32:5c:
1c:27:5f:e7:13:f6:a9:0d:55:c1:db:9a:b1:9d:85:
f5:1d:b5:aa:ba:e5:9f:ae:fd:40:d4:a7:fb:a8:31:
c6:3b:a8:fb:e1:17:59:e7:6c:89:7b:93:a0:03:a3:
0c:1c:2b:59:66:2e:64:c1:4c:f6:e0:23:de:ad:05:
a7:ad:d0:33:b3:e5:9a:77:8f:5a:da:fa:41:58:5e:
8c:38:01:7a:9a:6e:90:1c:0a:aa:5a:c6:78:b5:dd:
48:c6:18:e9:25:aa:ef:ea:b3:49:8f:4a:ae:df:59:
c3:38:7f:a4:a6:dd:65:60:ee:4d:69:5c:a9:6c:da:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AA:20:BE:80:B7:81:F1:64:D4:88:B3:FA:6A:94:A2:46:7B:0C:D4
X509v3 Authority Key Identifier:
keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:11:72:7d:51:a5:50:4b:8c:57:a6:f5:b6:b6:59:7b:15:9b:
ec:da:9a:36:a7:3d:7d:3b:a9:99:59:99:be:b8:13:a7:8a:7d:
5f:27:13:75:b1:d7:ae:10:19:f9:f2:0c:ef:ce:a6:2a:da:9e:
e2:f6:bc:7a:29:b2:4c:ea:ab:31:d7:68:47:11:a9:65:94:79:
55:64:fd:e9:79:c7:3b:f6:e0:39:14:c8:e0:1b:66:ea:c5:b7:
93:94:a4:2d:b1:03:61:eb:8e:95:21:8a:e3:d1:88:ba:65:13:
35:62:52:26:e2:af:27:3e:26:77:98:99:3f:34:3d:ec:a6:04:
32:02:7e:c6:f3:78:77:70:17:ba:48:de:b4:2f:bd:83:a4:cb:
f3:f2:af:76:87:bb:2e:c0:14:48:7d:cb:6a:59:1e:c9:41:b3:
32:81:0b:46:f8:ba:bc:eb:d4:bb:66:d7:d5:ef:6b:28:f2:3f:
11:24:04:ce:5f:af:ff:ea:c4:c5:a1:bb:eb:e2:1a:4f:c4:23:
93:75:47:2f:1f:fb:4b:2c:57:f7:87:d1:8d:1e:ac:c0:b2:38:
47:63:75:43:59:59:a8:07:bc:bc:5e:e8:43:c7:6d:47:7e:02:
0c:a7:c7:75:bd:3b:a2:a7:9a:b2:51:1f:a1:9f:e3:6e:3e:ae:
2a:1d:30:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:32:05 2025 by rpki-client