Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
File: AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json)
Hash identifier: AHP6eOaIkD7nyc75wJZI6yAgSeebcxqj3A+X5csV8go=
Subject key identifier: B7:73:2B:8D:D4:89:3B:6A:5D:28:B1:55:6A:00:A8:19:91:7D:44:18
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 0196764355735985326D8212ABDC9510FB92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
Manifest number: 0672
Signing time: Sun 27 Apr 2025 08:00:46 +0000
Manifest this update: Sun 27 Apr 2025 08:00:46 +0000
Manifest next update: Mon 28 Apr 2025 08:00:46 +0000
Files and hashes: 1: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: 3W0M2T7WvgVjEt4FWTkGJQbmNL0IdZUvI1nos9/wNZo=)
2: F0fLEPNHCyvyIlmIFcsqkPyplGA.roa (hash: km4WfLRxUHxr5HonrrBoTZPZXAmt4eVnZ393OPRJNmw=)
3: I52JmxS8ms2LXewaNvexpBIItdM.roa (hash: wE72dqwKEdun5Ic36ck9eG0u4nkqju4VoFB4cJuV7v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:55:73:59:85:32:6d:82:12:ab:dc:95:10:fb:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: Apr 27 08:00:46 2025 GMT
Not After : Apr 28 08:00:46 2025 GMT
Subject: CN=b7732b8dd4893b6a5d28b1556a00a819917d4418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:db:2a:84:62:ca:04:75:9d:dd:69:4c:27:
ed:38:13:2b:4b:39:56:75:6b:e7:15:5f:bc:02:c2:
0d:a7:e2:c8:36:59:3e:3e:2e:f3:cf:8b:c6:a1:30:
82:85:20:18:eb:1e:33:2c:94:35:0b:36:c5:d4:54:
46:1a:c0:c5:67:0e:92:32:ec:17:92:bd:36:79:3e:
4e:88:cc:a5:2f:37:b1:2f:57:c2:4b:0d:69:0d:ba:
63:64:7f:12:29:3f:83:cd:2d:51:63:f9:84:ca:3d:
b0:b3:aa:1d:90:ef:87:c9:6a:9d:e1:f0:48:87:e6:
30:a1:cd:b1:48:87:66:26:e0:44:15:88:db:05:29:
32:f3:9c:48:f7:cf:f5:d4:f3:d3:6b:67:d7:43:74:
cd:4f:d8:37:fd:f1:4f:9c:2b:3e:93:39:29:27:28:
e4:83:58:69:f9:ba:fc:06:06:b3:20:55:5c:36:5d:
d4:bf:e6:e7:4d:6d:41:db:3f:cb:4c:24:8f:f5:46:
72:b9:b9:4b:82:d8:5a:9b:ab:a0:ee:97:fc:ca:ae:
29:73:9e:c7:ef:cb:3a:e3:05:12:3d:d7:39:e2:7b:
5a:f3:86:2e:01:74:b5:b8:8a:2f:8f:d2:0e:04:85:
67:72:00:20:c6:ff:9c:f8:69:66:97:d3:1d:21:2a:
20:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:73:2B:8D:D4:89:3B:6A:5D:28:B1:55:6A:00:A8:19:91:7D:44:18
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d6:8c:59:e1:7c:dc:c1:8c:f3:84:c9:a2:c0:b1:a0:9c:8a:
04:24:93:f3:a4:7e:a3:a2:5b:3b:cc:05:40:54:43:7b:12:3a:
70:02:c3:e2:88:15:b7:b6:40:1a:44:88:f1:7e:f8:1b:b0:c6:
ca:4e:26:b3:36:e1:18:46:d7:03:51:63:6d:c3:53:41:bc:e6:
12:c3:fd:72:bc:b9:a6:0b:17:88:e0:52:9a:f9:89:c0:90:e9:
23:46:ed:eb:78:20:7e:91:05:20:f3:6b:a4:40:ed:12:b7:42:
91:d1:eb:48:c6:2b:d3:2b:c3:a3:c2:d8:bc:e3:63:9a:e6:48:
ac:2c:a3:05:a5:41:89:ac:cf:69:40:0b:69:f8:4b:71:58:6d:
ad:ce:2d:49:00:cf:e3:2e:1f:bf:94:f6:5e:47:3a:b3:b2:c5:
01:4e:54:c9:19:0d:3d:24:98:63:4a:bd:e8:7c:8e:2e:73:40:
19:fb:dc:1d:3f:41:26:b8:11:37:dd:8d:8e:1f:e6:f8:cd:b9:
cf:a6:fc:27:c8:0a:98:16:42:8c:f2:bb:43:e0:fc:9d:2d:06:
9d:e0:bb:e8:e0:e7:5e:47:d1:16:d3:9e:8a:b2:b1:20:11:80:
0c:b2:8b:5a:bb:78:e8:74:34:b4:a3:3a:72:96:ed:ad:33:22:
b2:f6:83:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:20:21 2025 by rpki-client