Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
File: ArcBQMA9kMkS3xHw_YNySbfLLhI.mft (raw, json)
Hash identifier: 3XBbwys6cpmsYj8p0yy2H6pBvAwd1pTxpVE2T3DHI34=
Subject key identifier: 19:91:AF:0D:BC:CF:0C:DB:A3:21:6F:EA:14:A8:1A:56:A8:96:1C:A7
Authority key identifier: 02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
Certificate issuer: /CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Certificate serial: 019674C2C9AD7AF879479C3509A38D7ABA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
Manifest number: 1509
Signing time: Sun 27 Apr 2025 01:00:44 +0000
Manifest this update: Sun 27 Apr 2025 01:00:44 +0000
Manifest next update: Mon 28 Apr 2025 01:00:44 +0000
Files and hashes: 1: ArcBQMA9kMkS3xHw_YNySbfLLhI.crl (hash: 1jgJccyoWVzJXmYuktDHxwMZiX14K50wIKsLEB8L8XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:c9:ad:7a:f8:79:47:9c:35:09:a3:8d:7a:ba:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b70140c03d90c912df11f0fd837249b7cb2e12
Validity
Not Before: Apr 27 01:00:44 2025 GMT
Not After : Apr 28 01:00:44 2025 GMT
Subject: CN=1991af0dbccf0cdba3216fea14a81a56a8961ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:f9:cb:1c:65:97:34:d7:16:29:6b:0a:f7:
1b:7d:d0:d0:b4:37:26:b2:c8:97:5b:ed:2f:59:d3:
47:79:73:7b:31:15:84:ee:04:96:f7:47:ec:ba:6e:
76:65:27:66:8b:4a:28:38:7f:76:71:b3:4a:f0:09:
9a:a0:4f:3d:50:ab:7c:a2:15:81:8a:72:06:c6:f8:
13:db:93:04:5f:0f:63:02:c8:e7:48:52:1a:cd:94:
b8:a7:2d:e0:45:56:80:e9:d5:95:62:8c:45:b4:ff:
9f:16:e3:b1:f4:15:58:07:0e:bf:ed:49:ed:e9:14:
2d:73:d0:40:97:3b:da:d1:88:d5:22:9e:13:aa:4d:
ed:9c:62:23:de:a4:57:7e:fc:90:72:49:96:10:01:
7b:a7:be:48:1b:f0:a4:f3:dd:d8:74:e2:0d:70:11:
da:1e:88:cd:77:1a:57:39:fd:93:e4:bc:a2:c5:89:
a7:6c:3e:8b:96:34:3d:88:55:e1:a0:67:c0:1f:d2:
f5:d4:42:cf:0c:28:d7:17:95:a5:9e:06:08:c3:1e:
64:3a:4e:50:08:0a:06:f3:59:50:28:7c:72:ba:59:
bc:a0:16:2b:2f:52:32:8c:11:fb:98:db:3c:45:72:
c4:6f:51:a6:eb:40:30:c0:c9:2f:81:33:42:88:65:
24:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:91:AF:0D:BC:CF:0C:DB:A3:21:6F:EA:14:A8:1A:56:A8:96:1C:A7
X509v3 Authority Key Identifier:
keyid:02:B7:01:40:C0:3D:90:C9:12:DF:11:F0:FD:83:72:49:B7:CB:2E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArcBQMA9kMkS3xHw_YNySbfLLhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d994b-8cf4-4529-bdbc-b38dcf2f010c/1/ArcBQMA9kMkS3xHw_YNySbfLLhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0d:23:b1:cc:78:72:ce:48:3a:7b:45:71:da:16:3b:0f:69:
c0:be:8a:26:72:5a:6a:8e:cd:ae:cd:9e:c6:c5:75:48:01:5b:
4b:8e:b0:d6:84:6f:6b:7e:14:e5:06:a2:ca:48:2c:8a:ad:f1:
29:7e:ee:e4:85:84:42:74:13:48:c7:27:8f:3b:c1:3f:a8:80:
0b:a0:da:77:df:e7:9d:0d:77:40:56:21:e1:5d:ea:d3:dc:15:
f6:b2:d8:d5:f2:63:2c:75:82:9e:00:a4:0f:35:ae:5c:2a:14:
87:43:3c:82:63:41:7a:98:2d:86:a1:4b:54:85:b2:77:9a:8e:
8e:cf:a8:18:d2:2d:1b:48:95:82:5d:91:bc:2e:da:1e:ee:86:
db:70:a2:c0:f5:e5:5d:49:b8:89:53:01:09:ee:ff:00:cd:66:
da:a9:b9:dd:6d:40:b3:4d:94:b8:ce:26:7f:52:e6:a5:59:a4:
09:73:97:69:19:3e:ce:8e:fe:fe:23:79:30:91:20:10:f7:2e:
52:26:2d:b5:e4:d8:85:02:ee:87:64:42:65:ad:a9:13:3d:4b:
fe:82:46:9a:03:cc:ed:1b:b9:7c:be:6b:54:44:26:aa:ee:ae:
70:4c:6f:fb:7b:42:30:41:01:c1:b1:1d:ea:5a:72:97:11:db:
36:d8:3a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:14:34 2025 by rpki-client