Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: yiCFmQU52l0bE81FylIWQMvjj0AYT47xmgi6T++hV1g=
Subject key identifier: AC:E7:23:BC:A4:16:3D:51:89:B4:C4:4D:C6:88:C5:F0:CB:40:8F:23
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 019677FB7A6779B04518811687DF052BF399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 03D6
Signing time: Sun 27 Apr 2025 16:01:31 +0000
Manifest this update: Sun 27 Apr 2025 16:01:31 +0000
Manifest next update: Mon 28 Apr 2025 16:01:31 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: gw3DEqogxT7+vPJMzp25wL9qsWyEYXpNrNQvkj9Zfgs=)
2: ihNwlKbuNiGlnJM8yFd2Nxrvaqo.roa (hash: auV56nH817P5x20E5reCmB5GZHUds7d7BudXxN/HlG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:7a:67:79:b0:45:18:81:16:87:df:05:2b:f3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: Apr 27 16:01:31 2025 GMT
Not After : Apr 28 16:01:31 2025 GMT
Subject: CN=ace723bca4163d5189b4c44dc688c5f0cb408f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:aa:95:0a:91:57:d9:bb:37:7a:bc:f5:d3:b4:
f1:e3:ff:f1:cf:57:fa:d7:04:e9:fb:e3:00:e8:7b:
a9:84:6d:7a:5b:31:05:02:cc:f7:77:63:ac:ca:e2:
12:31:f0:0d:ed:28:c8:40:c5:c6:e2:a6:4b:58:a3:
0d:f4:69:24:89:f3:75:8c:f5:69:1b:23:79:c7:1b:
5e:e5:02:dc:b2:fb:cb:40:ac:66:2b:74:4c:8b:73:
80:09:28:2c:f5:b1:a4:2e:4b:f3:9f:2a:6f:f8:15:
ff:9f:2f:3d:87:8e:9c:e9:c9:ef:67:a5:70:62:76:
39:09:b3:1d:1f:b4:9b:ad:e1:d6:9c:cb:56:d8:f7:
1e:7e:45:1c:2c:7b:22:3f:fa:2d:e0:30:ef:e1:c1:
8d:23:5b:b0:07:ad:29:d7:4d:c8:f3:84:2b:76:d5:
c6:e8:3d:d1:10:99:7f:d3:07:75:e7:b6:25:8b:6d:
bf:67:01:3b:87:29:9c:0a:7c:57:8a:50:e9:ec:60:
9a:b4:d1:bc:b1:b6:0b:62:55:a9:9b:5a:92:40:c3:
53:47:30:8d:7b:6e:52:97:55:c7:4c:61:d2:92:ca:
14:c9:7c:f1:83:04:7a:f8:54:27:12:84:66:3c:bf:
ef:0c:99:e3:1b:47:b2:03:9f:17:82:75:39:f9:d8:
c4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E7:23:BC:A4:16:3D:51:89:B4:C4:4D:C6:88:C5:F0:CB:40:8F:23
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:86:a3:4d:20:34:e1:b8:83:09:09:35:23:a4:bc:b2:f8:89:
df:b5:08:5d:b0:b5:3a:b2:57:a6:9a:0e:4b:6f:70:99:58:86:
91:6e:78:c4:ad:1d:26:d4:eb:4d:06:e0:2c:1a:8f:d2:57:15:
03:1e:ae:4e:03:75:a4:55:03:54:93:4c:bc:4a:6d:a4:65:8c:
d6:35:2b:d3:ba:10:16:e8:2a:00:c9:42:6f:e6:8e:b1:73:5a:
31:90:70:7f:a7:10:8c:80:9f:1f:a4:29:b1:01:25:2c:e6:1d:
80:5d:fe:4f:0a:dd:71:f5:55:9d:75:2b:cb:59:b0:6d:5a:fa:
5e:48:34:ed:47:38:2e:43:08:25:5e:99:38:00:e6:0e:95:98:
dd:36:b2:78:de:b6:2b:b9:72:dd:66:18:39:5d:d7:78:18:1e:
40:35:fe:41:93:f0:5e:a7:3d:2e:30:3b:e3:49:54:c2:63:58:
4a:2a:d9:a6:98:9d:52:11:64:73:e8:75:f1:ca:6a:a7:ba:57:
b7:d0:24:1b:68:19:87:48:62:68:a6:40:2c:7e:80:5c:e3:f9:
8a:e1:d2:46:73:96:36:d6:d8:b4:91:42:99:d3:41:20:d0:04:
a6:58:a1:c3:ed:1f:9e:9a:30:22:79:00:65:f6:3b:b1:26:b9:
e2:a3:0e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:30:08 2025 by rpki-client