Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: E4fs8r+Vym/pM7adE/VNPj9T9euHTpF2fw3usPl2aVk=
Subject key identifier: BB:EA:8E:13:C5:CE:B1:20:50:08:F1:95:49:AF:1E:5F:7C:D0:2B:56
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 01976A3CDB98BBCDDFD938ED61AEFB563E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 17:01:02 +0000
Manifest this update: Fri 13 Jun 2025 17:01:02 +0000
Manifest next update: Sat 14 Jun 2025 17:01:02 +0000
Files and hashes: 1: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: Kuci/A0pO//dKMjG82BBAJDHlz7HoJY68d4K2IfV7m8=)
2: TfDOBJVmJoj40V_l3LjkaTEjm8g.roa (hash: ReTHm2rRZcfjOGQDNdmXkBd+jk6YyXS+LSWab0KtASc=)
3: v50wWhyCI7hTEJpByG9mHooOhqA.roa (hash: E6PQDvh39GUQ1c6SbkD744Bu9C+vTY8Ul4lMsKxnnNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:db:98:bb:cd:df:d9:38:ed:61:ae:fb:56:3e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Jun 13 17:01:02 2025 GMT
Not After : Jun 14 17:01:02 2025 GMT
Subject: CN=bbea8e13c5ceb1205008f19549af1e5f7cd02b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:9e:83:34:ec:31:0b:67:4b:fb:15:ad:44:
b6:5d:a6:44:7c:64:38:41:13:03:60:c8:6a:f5:87:
1a:df:e4:72:62:08:d3:c1:f5:37:fc:5d:77:44:62:
b3:51:4f:d2:c9:a9:ac:f9:61:b0:01:a5:66:fb:85:
f8:4c:80:a1:48:ea:c2:73:c1:7b:cf:b9:72:1a:c3:
b6:9c:70:55:44:18:50:e7:97:60:0c:1d:7d:0c:bb:
f4:19:da:b8:af:b0:a4:34:06:11:66:5f:04:d5:cd:
0e:bb:e3:5d:ab:0c:05:bd:61:57:3e:39:4a:b5:c9:
52:a5:fb:a1:0b:14:ea:e9:c7:5b:96:9c:9a:d7:2a:
04:4c:76:79:15:eb:22:0b:7e:27:03:c2:d4:84:26:
2f:be:45:6b:94:5f:0e:27:b9:e8:0c:46:b5:7c:14:
24:4f:16:e4:5c:87:9a:9c:fa:eb:3e:6e:ac:fb:d2:
2c:35:d5:c5:52:4c:2c:19:10:fc:b9:ad:04:f9:4d:
9c:60:1b:1a:ff:25:b4:77:42:08:ce:ad:68:1f:ec:
b4:29:49:4f:4d:13:c3:83:86:66:90:db:d3:84:da:
1c:41:64:38:06:aa:70:3b:40:d8:9c:77:28:02:04:
99:8e:6e:3c:dd:ed:c5:36:3c:ae:df:67:b7:7c:06:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EA:8E:13:C5:CE:B1:20:50:08:F1:95:49:AF:1E:5F:7C:D0:2B:56
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fc:6e:e4:e1:c5:21:54:78:0e:1d:0e:75:98:a5:5e:d6:90:
6d:b0:ed:18:a3:29:10:51:e9:16:5d:50:c5:e1:78:de:e5:93:
be:6d:52:f3:26:a8:44:eb:3e:07:52:28:bc:4b:87:35:de:45:
08:51:96:9c:82:b0:9d:64:c8:96:9e:df:3f:88:35:9a:6a:80:
a4:c8:20:3f:d2:b8:d1:e5:de:90:7b:55:e9:8e:34:72:51:d0:
27:05:ed:7d:fd:04:6c:16:4e:fd:d3:ba:43:29:cf:49:69:8d:
5b:20:79:2a:d0:e1:11:c7:1f:e9:74:62:47:35:6f:78:6e:e9:
63:15:93:28:ba:a4:12:a9:57:e8:2f:e4:05:84:5c:5a:20:ba:
9f:7f:af:dc:8c:71:b2:d3:46:a4:73:36:5e:d5:30:d8:39:9b:
64:89:fb:44:7c:21:a9:11:33:4c:3a:f0:bd:dd:d0:ea:5a:96:
97:a0:63:f1:80:e4:ad:d0:11:18:27:74:29:17:3a:25:5f:25:
c6:10:89:42:a6:c9:b5:a3:76:82:36:02:39:bd:33:1a:91:ac:
27:a5:4d:0a:aa:29:ff:b5:0f:eb:5b:60:87:fb:fd:8c:30:90:
b8:9d:8f:6a:17:b4:cc:a0:9d:7f:91:a1:0a:74:8e:a3:7e:ce:
29:a0:f0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:08:54 2025 by rpki-client