Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
File: AVkheESIrdmgVmH_EXh-x1TmBeU.mft (raw, json)
Hash identifier: ox36qZhVClr1Qce/zB61CzuBcJaTrRCZ471RwO4hMVU=
Subject key identifier: 32:E0:8E:BD:DA:73:C2:94:89:C3:E1:1E:74:58:E6:1F:65:3A:F7:C7
Authority key identifier: 01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
Certificate issuer: /CN=015921784488add9a05661ff11787ec754e605e5
Certificate serial: 019776E57E246418D8EAB147CCFAC5F98B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
Manifest number: 1591
Signing time: Mon 16 Jun 2025 04:00:40 +0000
Manifest this update: Mon 16 Jun 2025 04:00:40 +0000
Manifest next update: Tue 17 Jun 2025 04:00:40 +0000
Files and hashes: 1: AVkheESIrdmgVmH_EXh-x1TmBeU.crl (hash: 5j8VioIW90PsUrzppap+rvZK/yraJfoVabtaYMQPd/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:7e:24:64:18:d8:ea:b1:47:cc:fa:c5:f9:8b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015921784488add9a05661ff11787ec754e605e5
Validity
Not Before: Jun 16 04:00:40 2025 GMT
Not After : Jun 17 04:00:40 2025 GMT
Subject: CN=32e08ebdda73c29489c3e11e7458e61f653af7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:b7:58:1f:84:c1:3e:21:74:3a:4b:85:8c:
02:51:40:6b:75:a8:59:1e:24:fe:08:00:e3:36:0a:
3a:bf:14:59:b2:63:3e:ad:b9:0f:61:ff:36:67:17:
c3:5d:dc:d6:8d:15:82:40:b2:89:57:3c:ae:c4:4b:
7e:07:de:f1:35:98:43:ce:18:c6:6e:c1:bb:67:42:
c8:32:87:21:72:96:9b:ef:de:68:cb:91:4c:51:f4:
48:4c:0f:9b:bd:17:f6:30:81:12:ef:cf:05:95:28:
ef:45:a2:e2:11:03:d9:70:cc:0c:b5:d7:fa:ea:b3:
b7:8a:12:62:8f:ad:1b:b7:04:af:f9:99:27:0a:45:
42:6f:15:2e:9d:91:da:46:d7:40:71:c3:ba:6b:d1:
d2:c5:f3:9b:d3:7d:5e:2f:9c:f8:e5:a3:74:59:93:
ab:b9:bb:5c:4d:94:49:56:5b:64:87:3c:c0:6a:08:
69:4c:28:5b:d1:51:0a:4c:50:81:34:29:72:62:2d:
87:bd:b3:fa:6b:5a:87:b4:23:af:d9:96:ba:43:ee:
02:33:61:2b:a8:9c:69:49:3b:ed:c7:ba:6c:9f:cf:
01:c0:87:b1:3a:c7:f8:a4:36:d9:27:9c:f4:53:bb:
4f:c6:b5:63:cd:f1:c0:33:d8:39:7b:bf:e8:cd:cc:
10:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E0:8E:BD:DA:73:C2:94:89:C3:E1:1E:74:58:E6:1F:65:3A:F7:C7
X509v3 Authority Key Identifier:
keyid:01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:13:eb:72:d3:78:b5:9e:c6:73:97:ba:0f:ba:1b:b6:42:f1:
e5:b2:cc:81:23:54:ed:9e:49:42:4e:33:e1:b7:0c:c4:1e:3e:
2d:3d:7c:9c:d3:ac:c8:29:a2:61:a0:56:ff:aa:2b:da:2d:90:
c7:41:1e:56:4b:e3:e7:ea:af:00:55:11:e1:2b:ae:fb:e0:d3:
f6:35:ab:1d:78:a4:97:23:98:e8:da:bb:be:da:6b:38:7d:ba:
01:ae:a8:f7:02:83:1f:60:d5:a5:59:f3:7d:99:03:85:66:64:
86:0f:e1:6e:08:8d:a9:3d:2d:0f:4a:31:f2:d1:94:44:29:17:
9d:d2:1a:3e:2f:98:ea:6f:49:b1:a4:99:c5:dc:7b:84:f6:99:
83:09:f4:57:2d:0d:08:83:e9:bf:e1:47:29:e8:3e:df:da:27:
e4:33:e9:fe:38:dd:d7:83:8f:f4:ca:5a:87:eb:a3:ab:f7:60:
5b:40:45:42:d0:bd:95:b4:a1:e5:71:7b:2b:76:e7:6b:02:c5:
5e:fe:b2:85:73:68:2f:d3:4d:58:f9:f6:49:a4:96:33:51:4d:
99:f9:bc:84:dc:02:dc:ee:a2:b9:88:ee:fe:e6:6d:77:fd:a5:
98:ea:ef:87:ac:31:5b:6b:3f:54:5d:dc:09:1e:97:d5:4e:b0:
42:50:ee:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:21:35 2025 by rpki-client