Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
File: AmEbTqouCzf3LMCKySlhmB6rsh8.mft (raw, json)
Hash identifier: FTpIiddxvrV7QTsVPpOGiHg1ORzyYpclmEfj2+EAgLU=
Subject key identifier: 88:4C:10:11:0D:7D:6C:D1:78:0D:A2:6E:92:DF:20:A1:29:C8:15:55
Authority key identifier: 02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
Certificate issuer: /CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Certificate serial: 019679B20E97C4E7A82E22A7EC12B0FD0430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
Manifest number: 14A2
Signing time: Mon 28 Apr 2025 00:00:34 +0000
Manifest this update: Mon 28 Apr 2025 00:00:34 +0000
Manifest next update: Tue 29 Apr 2025 00:00:34 +0000
Files and hashes: 1: AmEbTqouCzf3LMCKySlhmB6rsh8.crl (hash: VANKpcxcLFYqQMwmBq7XB1qwCSmHTmynSmFa/Q8op5Y=)
2: ZYWLpZ35KZiRaWxSeFuEnh6lxl0.roa (hash: A+6pCmvRh21bff+k990m7MW26aQWM6C7J37zdRTRafw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:0e:97:c4:e7:a8:2e:22:a7:ec:12:b0:fd:04:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Validity
Not Before: Apr 28 00:00:34 2025 GMT
Not After : Apr 29 00:00:34 2025 GMT
Subject: CN=884c10110d7d6cd1780da26e92df20a129c81555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:7e:7b:5c:e6:ef:ed:91:51:98:a2:3b:49:
cc:22:22:8b:10:7d:be:13:c1:cc:3d:d2:92:4b:c3:
10:37:e3:b5:09:69:ad:b8:34:14:6e:78:5a:d4:49:
74:a2:08:0f:47:ec:16:ac:d6:c5:92:99:08:d5:22:
ba:2c:90:92:e3:e2:08:97:b8:5d:4f:65:ab:f9:43:
ac:c1:3f:3c:8a:10:06:11:2b:37:41:97:e2:92:ad:
b6:bb:19:1b:4b:15:a5:51:9a:5d:ab:99:42:fd:b9:
b6:7d:82:4f:a5:07:32:86:de:49:34:d1:ab:2b:22:
62:4a:62:8e:48:ff:4d:9b:4e:5e:d3:a4:04:4e:89:
82:76:cd:21:26:e1:49:c8:2a:f8:e1:63:96:f1:de:
b5:cf:9f:37:97:f5:47:66:21:d6:b3:21:1c:bf:6b:
f6:d0:92:21:67:be:19:fa:b5:b5:8f:06:83:bf:09:
cf:1b:36:6d:ff:37:d8:ec:43:f0:8c:98:5b:c6:6b:
b2:b4:30:fe:52:b2:e9:17:c7:70:0a:17:20:88:28:
25:81:b9:4e:32:fe:46:60:c2:79:b2:aa:b9:a2:33:
00:2a:16:be:62:64:92:3b:46:73:df:32:78:13:22:
fd:66:1d:b4:e9:58:21:be:ca:bc:8a:cd:a5:0e:b8:
3d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4C:10:11:0D:7D:6C:D1:78:0D:A2:6E:92:DF:20:A1:29:C8:15:55
X509v3 Authority Key Identifier:
keyid:02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:32:76:a9:cb:8c:b0:1c:1a:bc:f0:6b:20:8c:1d:8f:c9:ce:
b3:df:e4:2f:2b:87:79:4b:75:3a:0e:22:64:27:61:71:3f:46:
36:2e:02:66:44:f2:e9:e8:0a:43:4f:5f:10:20:2e:28:c2:e9:
50:64:82:12:03:4c:d5:ef:03:86:aa:83:8f:02:19:80:61:dc:
f0:3b:fc:7e:b9:22:09:5e:b5:53:c1:ac:db:86:12:5b:c2:02:
88:98:58:23:7a:80:e9:e1:5e:84:29:40:ed:27:35:b4:19:7d:
73:06:31:61:81:15:2b:48:aa:7c:cc:ad:1d:d1:94:72:92:43:
c8:31:3b:ca:12:58:a6:81:69:c6:b8:80:76:8b:8e:41:4b:33:
7b:74:05:41:1f:13:52:93:0b:d7:04:c0:db:fe:bd:40:63:7d:
5e:7a:0b:77:e3:90:4b:a6:0f:d5:61:30:d7:cd:43:3d:23:bb:
41:76:14:e2:bb:52:00:19:85:54:63:f8:36:b7:bf:4d:56:6b:
8b:0c:92:7b:10:8e:61:90:3a:1f:07:28:12:b6:9e:e9:d0:f4:
04:63:5a:d0:7c:9c:5e:01:9f:25:80:59:08:77:4a:d4:3b:7d:
96:b1:bf:7b:23:e6:ca:0c:3c:93:2a:43:4b:1d:28:53:2e:8c:
4e:4e:48:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:17:25 2025 by rpki-client