Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
File: rAsK5lTCnX8fDU4tNRarfe8Msp0.mft (raw, json)
Hash identifier: 1BKhZ50lvZGKe0Ta4Prnc57fHmLZYf2RM4aVbQqIhr0=
Subject key identifier: 12:89:60:13:DE:08:04:E0:46:5B:36:E6:80:D0:05:71:07:92:43:28
Authority key identifier: AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D
Certificate issuer: /CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d
Certificate serial: 0196748BF5E473B8E2CE60EA25C28E9AB5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
Manifest number: 042D
Signing time: Sun 27 Apr 2025 00:00:51 +0000
Manifest this update: Sun 27 Apr 2025 00:00:51 +0000
Manifest next update: Mon 28 Apr 2025 00:00:51 +0000
Files and hashes: 1: rAsK5lTCnX8fDU4tNRarfe8Msp0.crl (hash: ECbvvV07ZZ6kRPmihLpYhy0mADZIr4h6f/i8f+zYUNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:f5:e4:73:b8:e2:ce:60:ea:25:c2:8e:9a:b5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d
Validity
Not Before: Apr 27 00:00:51 2025 GMT
Not After : Apr 28 00:00:51 2025 GMT
Subject: CN=12896013de0804e0465b36e680d0057107924328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:05:c0:84:90:7e:27:3b:e4:24:4e:90:30:
33:64:1d:cd:1c:a3:26:40:52:e1:9c:5a:6d:e4:ec:
75:8d:4b:45:56:45:39:08:bd:04:9c:6e:7d:f6:40:
3b:e0:bf:a1:8e:02:ed:f2:12:ab:37:37:33:67:20:
41:ba:cd:9e:99:97:04:6c:dc:d7:cc:54:ed:3e:b5:
a5:0b:ab:a7:70:19:a5:6a:89:7a:ba:f9:3a:5d:f5:
2d:c9:ea:8d:80:dc:e5:59:be:0d:34:d7:bf:38:e9:
a6:27:a7:5c:79:76:22:11:7d:36:92:d2:00:6b:82:
50:b7:83:0c:c0:9d:29:75:5c:77:21:34:ef:7c:85:
a2:66:67:a1:39:79:2f:44:6f:21:d4:01:4f:98:d1:
b7:c3:bd:2c:04:5a:5d:77:d0:2d:6d:2e:a0:18:75:
18:b7:51:31:3f:73:8a:a4:9c:ed:34:ba:fa:23:15:
df:84:37:f5:f3:0b:0a:d3:13:55:6c:59:f3:1f:6d:
65:c3:aa:f6:a3:24:ae:06:ca:4c:1f:28:0f:1e:36:
05:d8:55:93:29:91:27:e2:94:33:bf:99:a0:86:c5:
9f:99:80:9e:6a:72:f7:df:fb:ca:7d:65:b7:37:61:
37:e5:46:ba:51:d2:8f:cf:3c:83:50:60:87:bd:d8:
0b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:89:60:13:DE:08:04:E0:46:5B:36:E6:80:D0:05:71:07:92:43:28
X509v3 Authority Key Identifier:
keyid:AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8a:09:f3:05:de:45:3d:d9:34:9c:38:36:e0:51:06:7a:9a:
d0:d7:d6:bb:bf:4d:58:f6:b0:f0:7a:5f:02:b9:95:51:cc:ea:
0d:cd:22:04:cd:15:cc:1d:25:6e:d4:9e:57:ef:9a:c1:24:88:
38:84:f1:29:51:2c:58:d9:2b:25:d9:85:88:3d:24:76:19:ad:
8d:29:dc:bc:92:f4:2a:eb:da:6e:9c:30:a4:80:8a:fa:07:16:
ac:c6:9b:0e:64:b8:5d:ed:10:d6:f8:88:c0:df:67:b0:55:10:
46:34:48:07:ec:6c:7c:d3:e5:07:e5:ea:a4:30:1c:0b:83:c9:
c4:82:66:6c:9d:79:65:e0:ca:27:93:3f:f2:25:9c:0d:36:1b:
b9:68:c4:99:e5:7f:1a:38:e5:3f:69:fa:a1:0c:c4:da:10:b0:
f7:2a:b9:71:42:92:b6:cb:4d:33:39:28:bf:08:cb:ad:d6:e5:
c1:1c:f2:ee:16:19:e9:38:d0:14:02:f1:a0:cb:f1:a3:09:36:
15:7c:5e:70:be:37:44:4e:dd:7c:c6:2e:7f:6a:ab:d3:86:cf:
b7:82:21:dd:e0:97:77:b9:51:27:a2:aa:1e:fa:fc:d8:13:49:
f7:b1:0e:fe:fb:38:a9:5f:e4:a1:86:bd:88:f1:f0:f4:f8:e0:
48:61:71:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:30 2025 by rpki-client