Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
File: ABFADVSPohr4GaDG4j53pgEutek.mft (raw, json)
Hash identifier: A8zgJ1CLAiRwNPFylZXXJAEEkjVTwzyow4KIupjLqzA=
Subject key identifier: DD:42:CF:E0:C7:99:72:31:F7:8B:E5:8A:35:66:4A:BD:4A:30:73:18
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 01967868ABD105F7561F2E5562144F61A33E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
Manifest number: 14A4
Signing time: Sun 27 Apr 2025 18:00:47 +0000
Manifest this update: Sun 27 Apr 2025 18:00:47 +0000
Manifest next update: Mon 28 Apr 2025 18:00:47 +0000
Files and hashes: 1: 1-4u4Dw9kw9Y9CEi6GTjA8RhiXyk.roa (hash: Kdt5sjduBNPRdliFvzUojjEC7aaeGnPMG73opbmbK+Q=)
2: ABFADVSPohr4GaDG4j53pgEutek.crl (hash: tGu9QXJ2VdWf6BResXunAcbuZRSDRRLw8AMmYL478cw=)
3: nFTNuRdL8Z-Wdwlm8A1gxGSf2iE.roa (hash: Be/+xAPsxrgz7pa9P1aEcP7attPVHrGgMu7I83eiMD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:ab:d1:05:f7:56:1f:2e:55:62:14:4f:61:a3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Apr 27 18:00:47 2025 GMT
Not After : Apr 28 18:00:47 2025 GMT
Subject: CN=dd42cfe0c7997231f78be58a35664abd4a307318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f0:4c:96:9d:81:1f:95:c8:2a:a5:8b:b1:81:
f4:2d:29:3b:09:21:9f:d7:5b:88:62:59:5c:d0:c7:
83:9e:16:51:31:25:23:bb:c9:ef:8d:d1:83:0c:0c:
48:3a:af:93:9e:be:ce:65:a1:1e:f4:12:2a:01:54:
cb:8a:f2:7a:14:a9:2b:5a:eb:5e:a0:9b:2a:e3:c0:
a7:f3:4c:af:a8:2d:3e:22:b1:0e:0c:6e:e7:e1:38:
4e:04:b7:08:86:0d:92:1e:37:6b:73:55:d9:04:64:
62:ca:b2:5d:69:fb:42:cc:c8:12:7a:7d:0e:13:f6:
d5:0f:82:27:85:6a:e5:a4:9b:25:c6:e0:7c:f7:4c:
cf:88:5f:c9:f9:14:15:f6:52:89:b8:40:19:20:91:
36:5f:ce:27:61:73:24:72:84:73:5d:1d:15:2c:bb:
63:e8:5f:50:a5:11:b3:35:8d:ca:9a:c2:bb:cd:95:
cf:90:4c:6b:94:33:3e:a0:40:71:5c:44:90:dc:2c:
ce:15:b1:e9:50:b1:40:82:f5:80:ef:66:9d:cf:c2:
16:95:18:ee:e0:51:72:76:e1:67:a8:ca:d9:27:7f:
ea:1c:3a:57:95:71:a1:aa:8b:a5:92:2e:b2:0a:ff:
45:37:44:70:73:ef:fd:23:12:55:81:d7:19:f3:b1:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:42:CF:E0:C7:99:72:31:F7:8B:E5:8A:35:66:4A:BD:4A:30:73:18
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:38:5e:0e:a7:30:82:e8:7a:72:b1:1d:d1:58:a3:6a:2b:d0:
dd:83:e4:53:f3:2a:47:96:44:d7:b7:fc:dd:f7:11:00:80:b8:
03:e9:a2:b6:aa:bc:ca:09:86:8e:5c:27:07:35:21:57:41:73:
6b:6e:7f:50:18:e0:af:bf:29:05:c2:6b:96:ae:50:ea:c2:51:
3f:1d:41:92:21:1f:9c:cd:ba:07:07:01:7d:65:d5:20:61:14:
77:81:9e:28:14:7e:1c:25:2d:63:72:e2:d7:9e:63:1c:25:c0:
84:e4:26:cf:33:af:a1:5b:0c:d9:c0:a9:cd:dc:d0:c9:96:a6:
57:c2:7e:dc:c6:49:a4:a7:23:e4:2f:d6:9f:22:55:c2:6d:44:
4b:75:53:58:e5:65:91:6d:3b:c8:45:ea:9e:cc:0d:4b:4e:a0:
08:03:4f:f4:a8:3c:fd:14:8e:ba:1e:43:16:00:c3:12:80:3c:
90:f4:a6:6e:e1:e5:f1:ad:7f:9c:07:1c:4b:35:17:08:10:f4:
4b:70:3d:42:4a:21:55:58:8f:e4:63:12:b5:b5:ef:be:ad:fc:
e0:03:58:9d:e2:59:38:d4:3d:12:00:23:ab:b9:20:cc:a7:56:
4a:c7:c5:a3:ba:fd:3b:9d:1a:44:c8:04:87:90:46:ba:51:b9:
b8:a0:1a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:18:14 2025 by rpki-client