Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
File: AQChacjmlsoWm1mcehcRk__wbSo.mft (raw, json)
Hash identifier: D0JGcRbZQluxl6mgf1eWoAnm4AiJiImwNDWiSJjcPRs=
Subject key identifier: D3:FC:D3:C5:1F:8F:16:F5:68:2A:00:A1:09:F3:9D:36:08:12:59:6A
Authority key identifier: 01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
Certificate issuer: /CN=0100a169c8e696ca169b599c7a171193fff06d2a
Certificate serial: 01967530BE0CDB1FF4A16C397743062B13CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 03:00:50 +0000
Manifest this update: Sun 27 Apr 2025 03:00:50 +0000
Manifest next update: Mon 28 Apr 2025 03:00:50 +0000
Files and hashes: 1: AQChacjmlsoWm1mcehcRk__wbSo.crl (hash: dbyte97YsV6W0etztywAInTgYxyhpn52u+EtK8Ryc1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:be:0c:db:1f:f4:a1:6c:39:77:43:06:2b:13:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0100a169c8e696ca169b599c7a171193fff06d2a
Validity
Not Before: Apr 27 03:00:50 2025 GMT
Not After : Apr 28 03:00:50 2025 GMT
Subject: CN=d3fcd3c51f8f16f5682a00a109f39d360812596a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:89:f4:54:6d:90:2f:9e:83:4c:f2:fe:84:
c2:85:f7:de:2c:20:8b:ef:63:b3:cf:72:ae:24:46:
0b:02:8b:9f:e8:50:04:e0:33:75:94:68:1b:8a:7f:
91:f2:89:53:ca:96:a9:69:1c:bc:3d:02:bc:5e:de:
5b:68:0f:78:9e:6b:69:61:9f:6c:e1:e8:16:5d:8d:
dc:c0:40:56:e1:37:e9:ee:eb:f2:c0:62:4e:99:83:
13:a4:60:06:4e:f6:ec:c7:de:eb:ce:5b:0b:58:e5:
22:16:d5:8f:a7:75:70:65:ec:43:96:40:a2:ff:ed:
da:26:84:0e:f7:1e:ba:db:a2:37:a2:f2:7c:3a:f2:
9d:9f:b0:1d:9a:13:32:40:74:c2:d8:cc:16:97:1a:
77:23:86:6d:cc:d8:f6:99:74:e4:e6:88:03:c7:23:
d2:76:de:8a:33:b9:d3:a9:21:a3:d6:33:77:4f:ec:
46:0f:b3:50:f3:33:b3:49:eb:05:fd:2e:80:d8:12:
7d:ae:b5:d8:9f:d0:a2:fd:46:66:79:73:66:ce:a5:
cb:99:bd:a2:04:13:4a:2f:89:ec:31:2b:bb:8b:53:
e4:3d:c9:0b:83:b0:0f:e8:6d:7b:29:52:5f:18:10:
48:f4:35:46:5c:1d:2a:92:3f:e6:db:52:bb:93:36:
79:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FC:D3:C5:1F:8F:16:F5:68:2A:00:A1:09:F3:9D:36:08:12:59:6A
X509v3 Authority Key Identifier:
keyid:01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b1:28:d6:48:d6:53:d0:b3:d5:55:83:72:aa:b8:31:4a:dd:
95:d8:f5:c7:fb:51:41:62:c2:b8:cc:f1:3a:1e:bf:94:39:9c:
91:91:ce:38:27:04:3d:de:7d:4c:40:04:4c:ea:e1:b4:92:5f:
bd:f5:0f:89:cf:86:b1:e3:7b:4a:3e:85:f6:b7:72:f3:67:9c:
b6:6f:8f:f1:b2:7a:2e:31:f8:5e:71:21:8d:6e:5a:79:ea:60:
53:ed:3b:2a:01:96:63:c8:ff:07:aa:38:9b:57:09:7f:d0:df:
92:1b:80:1b:ee:d7:d0:6f:c8:cd:16:14:63:bd:29:fe:83:3a:
8b:36:03:17:ae:33:77:86:3e:73:8c:e5:1d:a4:d1:8b:37:97:
4f:08:ef:c9:9b:c4:1c:7c:1b:fb:5d:52:df:5b:d2:5f:cf:8f:
fd:e9:20:2e:e1:0d:42:66:2b:b9:95:d5:86:cf:56:e1:0b:cb:
42:b4:7c:df:73:8b:82:87:0c:5b:3f:af:a4:b7:7d:1c:b4:95:
cc:3b:cf:e2:13:14:0e:19:7c:8e:14:8f:44:21:e9:a2:9e:5b:
f4:36:63:7a:d0:8f:bf:9a:6b:f9:ff:5e:d0:be:c1:3a:c2:8c:
85:fe:28:e8:43:39:ba:0b:82:0c:11:f1:f2:51:9f:a5:08:de:
cb:d2:f6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:10:19 2025 by rpki-client