Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
File: ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft (raw, json)
Hash identifier: aCf5kFBzKU57X1kqN2YAMYm0oYDU55YgCj7ephJDeqo=
Subject key identifier: AC:54:76:41:9B:1C:E2:E4:3B:98:E2:C1:20:27:46:27:22:8A:CD:B1
Authority key identifier: 8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
Certificate issuer: /CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Certificate serial: 019677FBD1008075B7F3D79514F45745749B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 16:01:53 +0000
Manifest this update: Sun 27 Apr 2025 16:01:53 +0000
Manifest next update: Mon 28 Apr 2025 16:01:53 +0000
Files and hashes: 1: ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl (hash: 2j4MbBASxzPnif+hwplkRfGEF+Q7D64I0xlQ5pjm6JI=)
2: lFrZ4rR-rCiMWVmFnQGdm-QJh_E.roa (hash: kVQOvcnOHC3sx1NCMIDWqYKbqcHGycyRdXwqqPFVOgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:d1:00:80:75:b7:f3:d7:95:14:f4:57:45:74:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Validity
Not Before: Apr 27 16:01:53 2025 GMT
Not After : Apr 28 16:01:53 2025 GMT
Subject: CN=ac5476419b1ce2e43b98e2c120274627228acdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:2f:16:d0:da:d8:fd:89:0e:f0:6c:0c:af:
1a:44:1c:9a:91:10:2b:07:c3:af:7d:df:3c:be:36:
c9:94:73:49:64:bb:8e:17:6c:b0:26:f3:df:99:d7:
78:bb:2c:cc:94:00:c1:68:5c:23:61:c9:86:44:9b:
aa:8c:ae:94:5c:eb:90:f9:1d:f3:96:99:2b:9a:4f:
dd:a8:eb:0e:b4:09:e4:27:0a:c3:41:5f:30:18:b8:
48:70:be:3c:08:00:80:f9:ac:de:6b:c7:2e:1a:3a:
cd:66:04:35:b1:44:df:18:5f:7d:2d:0b:30:0d:5d:
0e:e7:37:8d:08:9d:f9:aa:a1:2e:46:cb:67:a2:5a:
2c:c2:01:8d:db:ad:c2:bb:70:bc:3e:47:43:dd:a8:
d8:07:39:57:be:b1:e1:7d:92:ce:7c:25:ac:7e:e3:
44:93:34:19:fe:5e:9d:f0:35:00:4d:bc:10:e4:86:
6f:d0:0a:a9:76:ff:81:85:48:ab:11:f0:dd:7c:de:
c3:98:d8:df:c4:c3:1f:29:52:7b:32:3e:d4:93:5f:
21:50:be:ae:c5:97:8c:64:c7:ab:e2:74:60:82:75:
07:64:79:7b:fb:0f:a3:3d:87:d5:c3:b4:55:9b:3c:
37:54:3d:64:53:7f:cf:e0:86:d4:26:27:a1:87:55:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:54:76:41:9B:1C:E2:E4:3B:98:E2:C1:20:27:46:27:22:8A:CD:B1
X509v3 Authority Key Identifier:
keyid:8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4f:d7:09:28:fe:23:0b:6d:65:7c:40:9e:b9:7d:70:ca:90:
16:f9:9c:76:14:22:0f:4b:eb:74:f3:0b:cb:74:16:4d:8e:d8:
ef:2a:c9:8f:f1:0f:55:9c:58:d5:3a:53:30:48:21:19:3b:f7:
e0:35:36:60:3e:94:bd:89:fd:0f:ec:33:63:4d:f1:28:ab:b7:
df:19:74:1e:31:14:79:c6:45:1e:04:5b:8d:db:99:8b:30:e3:
e9:4b:6e:05:d9:3b:fe:d3:6c:a7:38:07:7b:56:38:5f:ca:b5:
20:b8:52:f0:e7:5f:2e:1b:c6:a4:3c:72:5b:d5:45:65:de:8a:
bb:82:b9:db:a5:f9:18:28:87:db:61:7e:4e:26:e7:b0:b4:c8:
f2:0e:fb:f5:ab:f7:bb:85:65:05:8a:b5:78:27:cc:a2:d6:25:
2f:dc:52:4e:3c:49:fa:ea:44:a0:85:79:30:37:e8:a6:38:1f:
36:5b:6e:74:03:6e:f2:91:ae:83:e5:d4:13:dc:68:1c:08:d3:
98:b7:e2:47:aa:cf:dc:35:ee:70:a8:3c:a2:22:24:cc:c8:4d:
8a:e5:e2:9c:05:7a:5a:ee:a3:d7:77:1a:ad:9f:79:b5:9d:99:
48:8e:6b:e0:b2:1c:f1:d2:5c:ad:cb:cc:87:f4:50:d7:9d:51:
4c:3a:6b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:37:21 2025 by rpki-client