Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
File: ag1malTV4bw1XA1yUDpFj8Do4Gw.mft (raw, json)
Hash identifier: R9M0R1RmxP7gPzYmrS4FzsoZSXALHYc2feo8XwcyCEM=
Subject key identifier: 8D:4D:85:31:9E:A7:58:7E:AB:88:A1:79:9C:83:BD:52:89:CE:45:3A
Authority key identifier: 6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
Certificate issuer: /CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Certificate serial: 0196549343BEB8DA9EE16535C63643B366BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 19:00:59 +0000
Manifest this update: Sun 20 Apr 2025 19:00:59 +0000
Manifest next update: Mon 21 Apr 2025 19:00:59 +0000
Files and hashes: 1: Zbu9lV-TXRr1mjPabkdbQi-tc2k.roa (hash: L0pLG2iq3DWnmdVA1LNHGmiPWiH4T8eZ9Q5L7k/ukzQ=)
2: ag1malTV4bw1XA1yUDpFj8Do4Gw.crl (hash: +KL7e6sCu8cJhbfGrRdc9RRD6cKSWKDqmCR8M7eiexQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:43:be:b8:da:9e:e1:65:35:c6:36:43:b3:66:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Validity
Not Before: Apr 20 19:00:59 2025 GMT
Not After : Apr 21 19:00:59 2025 GMT
Subject: CN=8d4d85319ea7587eab88a1799c83bd5289ce453a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:d3:c2:b3:29:99:04:f0:70:a4:d6:b5:d7:
3a:03:0d:f2:18:3d:27:be:cb:2f:c5:c2:5c:6a:a8:
30:25:6c:44:6b:4c:ba:ab:d7:8d:11:bf:6d:5f:18:
0d:2e:2d:ea:f4:74:85:4f:71:3f:4c:8a:d2:65:97:
46:e6:c6:21:8d:eb:8a:e5:1e:36:d2:8e:e5:17:3a:
9f:33:74:35:1f:c2:81:ae:e6:46:39:db:31:13:ef:
20:c8:16:2f:af:56:b1:80:bf:1e:9d:b1:90:ac:00:
48:66:7b:c2:8d:01:6a:43:55:1b:38:65:16:85:ec:
e6:93:c0:26:5b:bf:3b:f2:29:b8:b7:54:71:47:35:
ab:7f:87:0c:68:4b:d8:74:4d:06:b5:7e:e8:a3:9c:
10:d0:ec:13:b3:07:89:97:49:27:d3:f9:f0:b8:8d:
66:2f:32:1c:a0:9f:27:5e:29:bf:48:c4:4b:06:11:
20:3b:3a:4c:ab:96:b5:51:23:39:44:b3:09:ef:5c:
93:e5:a4:b7:80:82:d5:db:a1:94:2e:21:c5:fa:7a:
93:39:25:1c:c0:c2:e3:5a:a0:35:48:fd:c7:0a:83:
8e:18:fb:eb:37:2e:41:a6:d4:a7:ae:9f:ef:82:12:
65:b9:fd:b2:9d:e2:e5:5b:9f:98:a9:95:0a:a5:1e:
9e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4D:85:31:9E:A7:58:7E:AB:88:A1:79:9C:83:BD:52:89:CE:45:3A
X509v3 Authority Key Identifier:
keyid:6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ac:fb:c7:11:f5:5b:40:be:22:5f:06:4a:6e:26:c6:66:bd:
57:53:d4:d9:5d:45:73:9c:f4:94:9e:34:7d:4c:27:18:2d:23:
53:e0:b7:a1:08:ec:03:cb:13:c4:03:06:8b:91:25:12:5c:0d:
0f:e0:e4:92:6e:a3:65:3e:0c:46:b5:9c:bf:48:c0:73:9b:73:
43:8b:0a:6a:86:7e:73:80:f8:48:14:da:65:a3:0d:d0:34:3b:
2c:36:1f:48:e9:10:28:11:e3:59:99:1f:9f:c4:ff:e0:ec:23:
d1:85:49:cc:5e:12:4d:12:ef:82:46:c1:18:6c:6e:03:84:06:
7d:79:9f:70:fb:45:98:35:58:8b:e3:20:77:cc:6e:ca:50:23:
ee:69:7d:58:b6:ab:85:f9:a1:45:96:84:28:54:a6:b4:74:51:
fe:4f:64:a4:23:50:1c:04:ed:99:a6:98:00:31:3e:96:dc:84:
f0:ce:e6:62:4e:c1:25:b8:df:2c:24:be:79:1f:f3:55:63:7c:
46:34:dd:0e:09:dc:6d:91:fa:f4:ae:57:1a:7a:98:72:44:2b:
0a:31:36:c7:4c:d0:9c:76:c0:73:ac:60:03:85:2c:87:d8:f6:
44:7c:2c:6d:85:80:ff:8b:9f:20:a4:83:dd:94:0d:08:4f:6a:
52:a7:af:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:53:44 2025 by rpki-client