Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/raavh7Q2lN05mUwOMhQwaHVRny4.mft
File: raavh7Q2lN05mUwOMhQwaHVRny4.mft (raw, json)
Hash identifier: XsAVUYJ8XQA3SiMnD6w9kg2l+krbO9dkMUi3Ff7R8eE=
Subject key identifier: 16:CA:31:74:E2:19:75:FD:EE:FD:69:0B:F5:A4:F0:12:82:F0:BC:03
Authority key identifier: AD:A6:AF:87:B4:36:94:DD:39:99:4C:0E:32:14:30:68:75:51:9F:2E
Certificate issuer: /CN=ada6af87b43694dd39994c0e3214306875519f2e
Certificate serial: 01968B1365F47FB09FE7589CF87583526558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raavh7Q2lN05mUwOMhQwaHVRny4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/raavh7Q2lN05mUwOMhQwaHVRny4.mft
Manifest number: 0A76
Signing time: Thu 01 May 2025 09:00:26 +0000
Manifest this update: Thu 01 May 2025 09:00:26 +0000
Manifest next update: Fri 02 May 2025 09:00:26 +0000
Files and hashes: 1: raavh7Q2lN05mUwOMhQwaHVRny4.crl (hash: oEH5mkAPDdK1K5Atb+ZbHKMJTVz9UlyYcCZ0jaiJTLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/raavh7Q2lN05mUwOMhQwaHVRny4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/raavh7Q2lN05mUwOMhQwaHVRny4.mft
rsync://rpki.ripe.net/repository/DEFAULT/raavh7Q2lN05mUwOMhQwaHVRny4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:65:f4:7f:b0:9f:e7:58:9c:f8:75:83:52:65:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada6af87b43694dd39994c0e3214306875519f2e
Validity
Not Before: May 1 09:00:26 2025 GMT
Not After : May 2 09:00:26 2025 GMT
Subject: CN=16ca3174e21975fdeefd690bf5a4f01282f0bc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:77:cb:83:8a:57:09:b9:1b:ed:c4:01:4a:
7a:d7:eb:2c:3e:dc:59:ea:cd:ae:7f:30:70:a3:94:
5e:8d:03:59:f0:ae:38:8d:3f:40:b9:a4:ae:8c:e0:
44:47:25:68:ab:6d:e8:4d:3a:4a:a0:df:53:8e:cd:
31:38:75:e5:92:85:38:ea:42:de:97:b7:e2:7d:fc:
ff:d7:74:90:a3:3d:63:eb:65:f2:0f:0e:79:46:9d:
b5:25:cd:fd:bd:00:87:b6:e5:79:a2:5f:55:bb:63:
e2:92:7a:1e:1e:4d:07:89:ae:14:9c:ef:27:16:13:
5c:fe:e4:74:73:bb:d3:33:69:a6:82:23:35:49:5a:
bf:41:21:e2:a6:65:4d:24:dc:c2:16:4d:28:a7:66:
71:b7:8f:22:ab:c3:c7:fe:75:21:9e:eb:6c:36:49:
fc:5f:68:28:b1:25:4c:2b:ae:ab:e2:d7:74:52:de:
8e:c5:cb:fc:b9:0c:43:40:b8:ed:9b:44:28:ba:7d:
4e:83:ca:1b:cd:b8:ff:ee:99:4b:38:6c:8d:eb:6c:
7a:4f:12:69:09:b4:ae:3c:e0:c9:cb:04:b1:9f:8d:
0f:66:14:6b:f9:bd:9c:f2:25:88:7b:48:4f:55:37:
0a:a7:3d:57:06:e5:c4:b4:49:bd:f2:ad:ce:dc:b6:
2b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CA:31:74:E2:19:75:FD:EE:FD:69:0B:F5:A4:F0:12:82:F0:BC:03
X509v3 Authority Key Identifier:
keyid:AD:A6:AF:87:B4:36:94:DD:39:99:4C:0E:32:14:30:68:75:51:9F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raavh7Q2lN05mUwOMhQwaHVRny4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/raavh7Q2lN05mUwOMhQwaHVRny4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5c8be-7db9-4057-a807-39e357384ae4/1/raavh7Q2lN05mUwOMhQwaHVRny4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:be:8c:ee:65:58:5c:ae:ad:10:5d:94:22:53:18:21:7e:47:
42:99:28:98:ad:e6:0d:bf:2e:d2:07:ae:8a:a4:b7:3d:9c:05:
c8:77:c2:7b:d6:64:1e:39:2c:09:91:e5:92:e4:d0:29:c0:98:
c3:07:b0:89:9e:79:75:72:f9:58:b9:35:77:de:5e:f0:4d:ac:
da:ad:3c:66:9f:49:0f:56:91:9a:f2:45:b0:4f:e3:60:6a:89:
95:79:bb:a2:5a:2b:73:f3:89:28:76:bc:c8:47:76:6c:70:d3:
06:ea:ac:a4:48:50:a8:08:05:05:43:86:29:1e:5c:1d:f9:52:
95:60:d3:7f:66:44:13:18:5e:4e:b4:d3:f6:0b:d4:74:18:d1:
68:43:78:54:e3:01:b5:c8:01:32:2a:22:8c:1b:14:73:35:52:
77:de:ed:41:63:60:6c:3f:63:d3:1d:22:c9:ea:14:ce:ec:70:
4d:27:63:de:c3:8e:60:ec:8e:71:50:69:3a:05:08:74:8d:19:
03:2b:b0:ff:c4:c6:45:96:b4:a4:76:e1:25:e6:91:e8:4e:69:
08:48:d9:04:28:36:37:54:48:6d:dc:b0:e2:f2:3f:be:38:f1:
2b:6b:45:93:bb:ff:f1:17:a5:90:56:a0:12:fb:81:12:98:fb:
81:02:d2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:02:46 2025 by rpki-client