Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File: acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier: SSx9nX05NDTeb05k5W5+4oGJoXsRKKA3CuhwPyyrNJE=
Subject key identifier: 00:2F:19:B2:E0:63:6E:D1:F7:2A:1B:44:A6:1F:24:94:4A:03:5E:F7
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial: 01967642ECF5FB03E663358238F9C53DA67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 08:00:19 +0000
Manifest this update: Sun 27 Apr 2025 08:00:19 +0000
Manifest next update: Mon 28 Apr 2025 08:00:19 +0000
Files and hashes: 1: RkLlZjAasSrGiOmklIx_O-q25zk.roa (hash: Gwgv1/PPnszGyK+vUndl8BVc2mtdNprpDuh7CKowocQ=)
2: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: gVegawFegP7BRQH10smpDKN+O+dBVENKStxMqSAivTY=)
3: iLjCLg8Y0QSYNaQ0b-3HMIIKDDY.roa (hash: KCNb4IsFzC9RfJdx7AFbupcSXkYx7SjrNORvTA5EESA=)
4: jyBvJ0cOfKi9WwiQt60pyraI-oY.roa (hash: y3Y58DOqvcc4jvZsYybVxfvwXagMIIOulZAsS9iNgBc=)
5: s9L9BNwHKJhVemHf55wRw3Mdhbk.roa (hash: beDBJWuacokDomSZPce/uodduuYfGqhfMVgZDVtONCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:ec:f5:fb:03:e6:63:35:82:38:f9:c5:3d:a6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
Validity
Not Before: Apr 27 08:00:19 2025 GMT
Not After : Apr 28 08:00:19 2025 GMT
Subject: CN=002f19b2e0636ed1f72a1b44a61f24944a035ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:4d:0c:98:66:14:6d:79:65:be:4d:8e:2e:
9e:5f:22:37:e4:30:54:43:91:62:00:0c:dd:bd:c1:
49:0c:60:94:2e:ea:c5:cf:f7:fa:9c:67:f8:5e:4d:
f4:fb:9b:77:9a:63:3e:91:74:8d:1e:de:09:f1:86:
26:c8:03:c2:a7:be:fb:5c:ae:0d:9c:07:29:8b:56:
a4:5a:4d:5e:5c:98:25:ae:6d:e1:b1:f9:0e:9d:1d:
44:75:40:2a:d0:76:10:cb:68:6c:3f:18:bf:8c:3e:
36:c2:e9:12:25:2d:fe:f3:6b:1b:7d:b8:75:ae:92:
0f:6b:e1:f8:c2:cd:13:d8:b2:2b:3c:f4:56:10:ce:
20:66:af:77:6c:0d:df:0a:2b:3d:d3:46:fc:65:00:
4d:dc:b8:a0:04:b3:bf:86:e9:ad:d7:d5:50:a8:4f:
c5:37:5f:df:a7:ce:72:6d:4c:a2:6d:84:af:b7:0a:
0b:21:87:dc:66:ed:0d:ef:ff:6a:5e:1f:2e:76:ea:
33:99:53:ff:8c:70:fa:76:68:c2:c7:d1:e7:cb:57:
f4:a9:d4:b2:9e:08:52:ba:ba:b8:98:c1:6e:c2:90:
e6:1e:3f:2e:96:fd:4d:ac:2e:08:1d:8c:22:88:95:
6c:d5:8e:f0:89:94:8a:53:61:66:35:f2:c2:f7:0d:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2F:19:B2:E0:63:6E:D1:F7:2A:1B:44:A6:1F:24:94:4A:03:5E:F7
X509v3 Authority Key Identifier:
keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f6:0d:8d:c5:63:08:ae:a4:03:33:e5:9d:ae:f3:5c:b8:71:
22:f9:db:8c:de:42:3a:12:09:fc:0a:00:87:90:49:12:74:23:
a7:ed:75:a7:c7:0d:6b:49:28:ef:a7:03:d0:94:2d:56:76:49:
45:38:2e:1c:12:c3:20:5a:49:d1:d0:2a:07:1d:ed:ad:19:5a:
b1:c7:d5:d6:e6:f0:0b:68:c3:7e:04:22:09:17:c9:2f:5d:7a:
f8:5f:a2:3a:2e:25:54:c8:1d:6e:76:53:d3:df:77:ed:ab:b6:
2d:92:ab:b1:5f:d9:e0:5e:20:3a:78:ad:3d:f2:61:eb:30:f9:
1e:4e:f3:09:e5:3d:08:3e:bf:3a:9a:39:2c:ce:4f:a5:50:1d:
0f:3a:29:92:c5:19:98:04:27:9c:41:c5:71:03:f9:cb:30:11:
57:e3:62:b6:00:3c:da:ed:b3:b3:58:1e:8b:fe:25:0d:b3:3a:
ff:3c:d8:f7:c8:cc:fe:bf:aa:72:15:1d:56:fe:32:51:99:d5:
da:05:5d:fa:89:92:64:87:72:bc:d5:8c:bf:03:e2:21:81:d0:
fa:57:42:5f:a7:32:9b:16:05:bb:92:1b:d9:2e:11:8c:53:83:
cc:55:ac:49:a8:23:f5:73:43:40:da:19:f9:e5:66:67:fb:bf:
95:3d:f3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:06:51 2025 by rpki-client