Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File: AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier: 6/8h3Mit9e3wsCs+4Wa/kNYXkIdIA7ou06KILODi9Yg=
Subject key identifier: E3:55:47:79:97:60:45:83:4C:FC:00:C2:41:BE:33:6C:A3:E0:3F:86
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial: 0196881257F3E5C30DBB61E3325A830A33AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number: 03A3
Signing time: Wed 30 Apr 2025 19:00:25 +0000
Manifest this update: Wed 30 Apr 2025 19:00:25 +0000
Manifest next update: Thu 01 May 2025 19:00:25 +0000
Files and hashes: 1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: zSxLtdJxlO76qfYEN3CX3jv0dHxcwLwSRTQh4tSRTO4=)
2: BX2JPGJy6RMaPcWuXvWlFqwNrIA.roa (hash: u+UX2pAd1eP7HJXW9NY0JTLVGtLaRb7rjxt8LHxvOj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:12:57:f3:e5:c3:0d:bb:61:e3:32:5a:83:0a:33:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Validity
Not Before: Apr 30 19:00:25 2025 GMT
Not After : May 1 19:00:25 2025 GMT
Subject: CN=e3554779976045834cfc00c241be336ca3e03f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:73:59:63:71:ef:71:45:3a:99:f1:76:21:
c2:d5:cc:bd:83:21:4e:67:39:dd:bf:bc:9c:02:0f:
b6:b9:fe:82:d5:34:04:c1:25:36:0c:29:5e:3c:75:
25:97:cd:c3:cc:b8:38:fd:5f:45:55:d9:7a:be:7b:
19:e0:1d:ed:8b:e0:7a:88:08:bd:89:ab:e4:77:de:
2c:f9:11:f0:00:72:46:dd:c9:56:02:11:b4:35:c6:
f9:16:0f:96:2a:10:db:f9:6f:01:7b:13:01:e1:fa:
ea:5b:fd:94:00:10:fc:18:89:c5:0d:6f:4c:61:a3:
ed:fe:59:5f:bb:92:b3:19:6d:7d:34:14:6a:b9:18:
0b:4a:2b:6e:e8:f0:cf:b2:35:81:cc:ad:a6:6a:17:
45:8e:7e:91:00:80:ee:62:18:f0:4e:90:94:51:33:
f3:d8:4c:99:be:7f:22:65:db:fb:46:4f:3c:93:f7:
1c:e3:22:85:62:df:59:ec:5c:e9:9e:b7:a0:01:17:
59:f2:84:20:90:b2:7f:2e:23:58:3e:2b:90:a2:f0:
ac:87:95:cd:e4:b7:37:18:d9:aa:ca:f0:bf:0e:17:
12:80:2b:25:1d:e4:4d:0b:92:ad:06:a1:c8:a6:b7:
91:e2:f4:d5:4f:77:3c:65:0d:92:ee:dd:f8:bf:e0:
f2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:55:47:79:97:60:45:83:4C:FC:00:C2:41:BE:33:6C:A3:E0:3F:86
X509v3 Authority Key Identifier:
keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9d:f1:5b:df:e1:0c:6e:e2:38:f9:c5:6c:db:4c:0c:ba:32:
56:74:9d:e4:7b:27:85:0d:85:c3:d3:a0:1a:86:10:72:63:c3:
28:42:c6:53:47:2f:b2:eb:17:9e:7d:c0:a0:f9:55:7e:0b:87:
b3:a6:e8:0c:e5:e9:a3:63:54:14:d5:a9:ca:9b:b5:61:a4:eb:
f4:ab:87:73:b2:2b:84:58:78:66:c6:16:1b:72:98:67:69:6e:
16:cc:4b:c0:a9:4c:54:82:1e:ec:01:b9:23:c6:8a:e4:08:c8:
5a:36:9e:30:a6:c0:b1:47:ed:48:9e:10:d1:6c:a4:af:5d:fe:
88:49:60:fd:37:86:39:1d:69:e9:e1:89:b1:37:6d:5a:6d:1b:
be:00:09:c1:65:b4:0f:39:27:6b:3c:62:7e:9b:f5:1e:73:58:
27:8f:2f:bf:53:70:09:0a:37:19:10:7b:36:eb:b6:c7:43:39:
43:da:f7:63:07:ab:e2:33:5b:56:4a:2d:44:32:81:24:24:d8:
76:8f:91:82:89:1b:44:a5:de:6a:ef:e2:b2:fc:d6:b6:89:30:
01:e3:ec:e5:c0:77:cc:b7:81:49:e0:cb:6b:97:16:05:24:34:
c9:e5:c1:92:37:be:96:50:65:54:9d:d5:d8:9a:a3:d6:b5:a9:
31:32:34:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:22:44 2025 by rpki-client