Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
File: Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json)
Hash identifier: KgncS5BTuyjQkkGauFtw0YUsbZ1nYuKFMhNHoICgqAo=
Subject key identifier: C8:58:D3:D7:FD:D5:4D:CE:09:13:A0:8A:7F:D8:45:43:E1:68:25:62
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Certificate issuer: /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial: 01967A8DABB2578B897E51BE1ECC1FFAFCD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
Manifest number: 0FEF
Signing time: Mon 28 Apr 2025 04:00:26 +0000
Manifest this update: Mon 28 Apr 2025 04:00:26 +0000
Manifest next update: Tue 29 Apr 2025 04:00:26 +0000
Files and hashes: 1: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: gs2db+/KhmryBVdVd9sK9iJfdnCnr43UOSikIc1hf9Q=)
2: fVmkukCoNZRcRoc3LS-TXPrqhnE.roa (hash: jN7loYTxoFJMSibKv+JC0+n6QXqAWoukHaK+yW79eHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:ab:b2:57:8b:89:7e:51:be:1e:cc:1f:fa:fc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Validity
Not Before: Apr 28 04:00:26 2025 GMT
Not After : Apr 29 04:00:26 2025 GMT
Subject: CN=c858d3d7fdd54dce0913a08a7fd84543e1682562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:5a:3b:7e:61:2b:14:9d:72:ab:e6:a7:2b:
ec:68:08:cb:95:04:86:d1:22:f9:a6:16:f6:fb:1f:
f1:4a:d4:f0:bc:b8:cf:f2:b2:31:6f:f1:60:ff:7c:
fb:e2:fd:16:32:d0:1c:38:d7:a4:85:41:a3:ec:ef:
0e:a3:21:ce:5f:cb:07:7e:c6:e7:1b:72:bb:d2:52:
be:42:4e:e0:5e:4f:f5:dd:b1:5e:04:b0:48:13:c1:
c4:53:b1:3d:5e:29:9c:ab:0c:9b:f4:5f:8f:9a:06:
0d:67:72:45:f9:02:76:85:e2:e1:2f:8f:0b:f5:57:
dc:28:70:73:73:13:d4:a3:25:27:57:cc:54:4d:5e:
14:5f:7f:25:04:a6:7d:9b:df:e7:d2:47:a8:5d:60:
9c:f7:b9:42:ac:91:c5:35:2f:eb:9a:5a:a3:62:7d:
52:9e:59:79:2d:48:ee:5c:e1:97:95:8d:fa:89:ff:
d7:4d:5f:ef:fc:5e:40:e4:e1:d7:e1:2d:e8:7c:70:
25:2b:47:e4:7e:24:04:10:a6:6d:b9:5c:eb:d6:cd:
27:32:18:c4:bf:d5:48:19:c7:c2:1a:80:d8:e8:3f:
79:8c:91:79:64:7c:ac:b0:c6:9c:40:86:79:68:db:
f8:75:99:26:4c:2c:78:f6:db:a3:d7:c5:db:57:92:
d7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:58:D3:D7:FD:D5:4D:CE:09:13:A0:8A:7F:D8:45:43:E1:68:25:62
X509v3 Authority Key Identifier:
keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:70:31:60:53:7d:d2:5c:e8:d1:f3:63:db:4c:0a:f6:d3:f6:
99:bb:31:8d:b3:e4:6c:97:5f:98:27:5a:1c:40:64:27:63:9d:
92:9c:e6:d4:bd:57:0f:18:21:d4:f0:cc:dc:ad:40:8a:5d:6a:
ec:03:f9:cf:df:42:56:f3:e8:80:62:fe:d4:b7:d3:18:d2:bf:
da:77:0b:2c:7f:9d:50:c2:87:1c:9f:99:b3:fb:6a:4b:ed:6a:
7b:a0:63:77:2c:9d:03:df:ac:86:5d:82:76:84:32:0a:7a:7b:
77:43:06:f3:97:33:e0:f2:e5:ab:c2:10:72:a1:f0:e2:b0:e1:
a4:df:93:d3:34:b6:f0:39:90:ef:0e:a8:47:7a:ef:23:8f:bd:
ed:2c:a5:35:13:55:c6:72:90:26:50:b9:26:b2:cc:8d:b5:a7:
e5:78:62:11:73:ce:0f:25:ac:2f:53:70:96:6e:85:11:38:2b:
54:dc:b1:d0:35:61:a5:dc:b7:49:71:ef:bb:06:51:cb:2f:2a:
87:fa:72:99:3d:76:2e:62:35:03:40:50:27:fb:86:04:4f:2d:
09:6d:a6:f3:10:94:54:52:fb:66:4a:f0:9b:ed:8f:40:71:fd:
55:87:91:88:10:64:46:7a:c4:f8:1d:f6:1a:be:e7:65:0b:ed:
34:4b:f2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:52 2025 by rpki-client