Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
File: AKTVv_pzY0hD6QPjexj97g2sWFs.mft (raw, json)
Hash identifier: 1HbVLEQkW59gl7uHS7Q7P003hoUHKYs3JUD6BDMCpgo=
Subject key identifier: E7:6A:D6:F9:B1:90:BB:DE:11:68:F9:98:E6:6B:4D:64:4F:6B:3A:1C
Authority key identifier: 00:A4:D5:BF:FA:73:63:48:43:E9:03:E3:7B:18:FD:EE:0D:AC:58:5B
Certificate issuer: /CN=00a4d5bffa73634843e903e37b18fdee0dac585b
Certificate serial: 019677FB45697081FADDA6477C6ACD3566D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
Manifest number: 34
Signing time: Sun 27 Apr 2025 16:01:18 +0000
Manifest this update: Sun 27 Apr 2025 16:01:18 +0000
Manifest next update: Mon 28 Apr 2025 16:01:18 +0000
Files and hashes: 1: AKTVv_pzY0hD6QPjexj97g2sWFs.crl (hash: mZPjqmCP5XhAt93zkFy2I9V1OO3XrBQ8ApDMlYgeEoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:45:69:70:81:fa:dd:a6:47:7c:6a:cd:35:66:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a4d5bffa73634843e903e37b18fdee0dac585b
Validity
Not Before: Apr 27 16:01:18 2025 GMT
Not After : Apr 28 16:01:18 2025 GMT
Subject: CN=e76ad6f9b190bbde1168f998e66b4d644f6b3a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:79:8e:de:67:b2:85:b5:35:46:ec:0f:90:
bd:53:6f:12:a2:6b:ba:cb:21:90:80:86:e7:ce:15:
f5:84:f5:b9:5d:82:42:c1:96:6a:22:6a:c5:48:86:
59:95:85:01:b5:8c:3b:1a:53:ec:91:f5:b0:47:af:
82:0b:9c:3c:39:49:b4:1f:7a:b4:d7:8c:06:cd:95:
4c:a8:21:bf:3b:80:8f:f2:3c:33:86:da:a5:ef:64:
6b:9f:f6:9d:38:61:a8:98:cb:53:98:cf:99:27:48:
8b:3c:53:2a:ca:39:8f:c6:66:03:be:20:7d:45:5f:
e8:08:03:35:8f:9e:06:4c:dc:15:26:64:0e:78:bf:
9a:ad:dd:35:b9:c1:6c:29:b7:62:2b:31:27:70:25:
2b:a2:e3:2e:92:9d:19:c9:60:75:a2:7d:73:16:48:
51:27:92:b1:98:91:da:c6:bb:e0:06:6f:3b:c6:23:
e5:f6:12:9d:56:65:37:3a:f7:dd:90:59:7a:f4:a6:
fa:dd:07:c6:03:80:2a:d9:68:6d:0c:01:73:9e:f2:
73:59:43:89:64:79:78:7e:2e:7d:04:2b:e6:e2:4b:
14:a4:fb:bd:6e:42:0d:bf:cf:27:fe:ef:60:77:be:
56:6d:6f:fa:1d:42:11:4b:46:23:0f:9e:be:de:28:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6A:D6:F9:B1:90:BB:DE:11:68:F9:98:E6:6B:4D:64:4F:6B:3A:1C
X509v3 Authority Key Identifier:
keyid:00:A4:D5:BF:FA:73:63:48:43:E9:03:E3:7B:18:FD:EE:0D:AC:58:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e1:5a:e1:c1:4a:5a:bd:53:ee:cb:a5:bf:ee:dc:cf:22:bf:
92:2e:84:f8:81:bd:d9:15:f7:b5:ca:4e:8b:e3:c3:ee:c1:7e:
77:b8:21:6f:6f:aa:b8:ce:a2:e1:a0:ff:19:6c:3c:22:e5:a5:
1f:b8:b2:c4:aa:ae:04:11:43:2d:23:dc:7b:a4:8f:78:f0:dd:
c8:09:6d:48:5e:2a:ae:f2:36:57:8f:40:bb:a3:97:08:0e:0a:
ea:86:1a:01:89:ec:fb:ac:2d:52:12:67:3b:6f:4f:5c:91:dd:
0a:6a:81:ef:3e:35:6c:cc:af:74:60:e9:77:6a:ff:e7:fd:d5:
e4:0c:8c:38:b2:bc:45:38:6e:4e:1e:6d:1e:66:ed:6d:36:d3:
24:fe:86:21:eb:f8:07:bb:4b:08:63:d7:f3:e7:05:90:b5:34:
e8:55:ad:a0:ca:a6:67:82:6e:eb:12:1c:1c:5e:b0:d5:d1:2b:
53:ee:03:d3:a3:44:6a:c5:d2:c9:8f:c5:7c:ce:be:7a:5c:b9:
c1:49:e4:99:a9:d8:5c:c8:3e:7d:b0:bc:9b:91:b8:57:40:84:
04:21:70:d3:21:9a:c8:22:a5:cb:30:78:98:49:a3:0b:a4:88:
4f:d7:6f:80:23:29:0b:62:de:d3:63:89:b4:70:59:16:bd:2b:
7e:42:c0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:54:53 2025 by rpki-client