Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
File: AVkheESIrdmgVmH_EXh-x1TmBeU.mft (raw, json)
Hash identifier: na71Jyp0kID756OR43IDKqPc8h/zDaBwE8F4tUZ7xBY=
Subject key identifier: 18:A6:39:8F:1D:1F:1C:3B:DF:62:30:0E:14:33:18:D7:5E:8C:36:DB
Authority key identifier: 01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
Certificate issuer: /CN=015921784488add9a05661ff11787ec754e605e5
Certificate serial: 01967DC68E48F11C97E2E46F5841E7E18048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 19:01:26 +0000
Manifest this update: Mon 28 Apr 2025 19:01:26 +0000
Manifest next update: Tue 29 Apr 2025 19:01:26 +0000
Files and hashes: 1: AVkheESIrdmgVmH_EXh-x1TmBeU.crl (hash: 59zYQ1spqFQq9cgdP3Xks0Q8ALQiTUFDoABS33c48vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:8e:48:f1:1c:97:e2:e4:6f:58:41:e7:e1:80:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015921784488add9a05661ff11787ec754e605e5
Validity
Not Before: Apr 28 19:01:26 2025 GMT
Not After : Apr 29 19:01:26 2025 GMT
Subject: CN=18a6398f1d1f1c3bdf62300e143318d75e8c36db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ab:61:9a:cd:6a:7f:2c:61:09:22:ea:a3:f5:
76:d9:e1:f3:be:12:ef:9e:b0:f4:bf:77:25:cf:0a:
a6:46:8b:27:c9:1e:b0:51:b3:9f:4e:0f:ac:54:bb:
9a:f9:4b:4d:a3:2c:46:4f:30:21:cd:96:7c:e8:8a:
90:08:40:08:4f:ba:ff:07:b7:f2:78:95:26:04:25:
5d:3f:3f:72:f6:5b:40:f7:3c:bd:76:59:da:ce:fa:
c0:f4:87:f3:06:7e:62:29:9c:3c:a2:8d:90:7a:2a:
73:af:77:20:6d:0c:7a:c1:45:3a:a6:9f:dd:58:b9:
b8:c9:78:70:e6:ca:53:5b:85:36:56:36:6c:8d:0d:
ee:41:cc:a2:33:f5:58:c1:14:6e:c0:05:4f:4e:f4:
11:da:2d:23:2a:0f:c8:ce:f7:f5:56:6a:a7:c2:05:
cb:71:fe:0e:44:c1:5c:bb:b4:12:4a:6e:c3:c5:6f:
41:39:95:75:9c:59:8b:b5:55:95:d3:00:03:19:3d:
48:1c:87:4d:08:72:6a:cb:69:3f:b1:56:60:e1:6d:
18:b9:91:b5:f3:54:4c:3c:33:40:af:8e:05:91:5c:
40:74:81:de:4b:6b:87:ed:ce:cc:e4:94:bb:d6:49:
74:7e:f5:44:b6:b1:c0:fc:60:a9:cc:da:fb:95:b0:
59:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A6:39:8F:1D:1F:1C:3B:DF:62:30:0E:14:33:18:D7:5E:8C:36:DB
X509v3 Authority Key Identifier:
keyid:01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e8:37:86:ae:2a:6a:6a:98:b9:16:f9:c7:bb:ea:e6:73:21:
d7:1e:01:44:7d:5d:aa:26:d0:bc:30:55:d1:31:80:5b:55:3c:
10:22:f2:d9:59:ca:e8:91:a5:a6:a6:3a:0a:e7:de:41:22:6e:
99:f5:93:5a:de:24:04:49:f4:2d:a6:93:71:47:92:8b:aa:9d:
83:ad:98:50:17:44:f2:69:85:a7:cb:0d:b4:09:23:74:29:12:
3d:31:5d:a6:60:fd:63:e1:ce:74:ee:5d:5d:dc:78:3f:a2:0e:
ff:bd:50:40:89:f7:78:69:39:02:b2:ec:df:29:80:cb:c5:4d:
b1:f7:88:56:4c:5e:00:6b:0c:3f:33:56:0d:13:d6:26:3f:92:
55:4a:2c:4d:c5:90:c2:c9:aa:0f:69:6f:48:8b:fb:f0:02:ca:
0b:a1:63:72:67:44:34:bc:90:4b:b6:e6:72:0a:3a:39:d4:96:
83:08:7f:b0:8e:c4:da:72:92:54:43:c7:2a:9b:53:bf:7b:ee:
9e:01:fc:98:11:ff:17:0c:ac:40:09:cf:cc:f5:ef:de:a2:0b:
75:2b:5b:cf:18:60:7b:b7:be:3c:2e:d9:a5:cd:b9:dc:34:25:
ba:f7:40:d9:d8:55:b3:50:41:6c:f9:60:4d:ff:e8:80:a4:85:
21:79:5d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:35:00 2025 by rpki-client