Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
File: AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft (raw, json)
Hash identifier: 6Us5xo/dXJmOhQz1RQHa/stWytYCe7WetFrAmVhlGMM=
Subject key identifier: AF:CE:68:86:2B:5F:D2:C2:F9:67:0E:DE:B6:6C:71:4D:74:D6:44:73
Authority key identifier: 03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
Certificate issuer: /CN=0321bfea0305c48e949e6c249f4810b46905c886
Certificate serial: 01964E599026BCD84ECE69597392075007F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
Manifest number: 14FF
Signing time: Sat 19 Apr 2025 14:00:14 +0000
Manifest this update: Sat 19 Apr 2025 14:00:14 +0000
Manifest next update: Sun 20 Apr 2025 14:00:14 +0000
Files and hashes: 1: AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl (hash: XLd3Wr6Mb7Hx4hDFCg0TmWd5Q2U2aI7Y65+phBt9a3o=)
2: HrI_ZNL0dOaa5SSqv99U6ELy6t4.roa (hash: n13hSIM8J7SvepGBD+Vp8UM2xhOsDHmf6h7aK70kh0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:59:90:26:bc:d8:4e:ce:69:59:73:92:07:50:07:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bfea0305c48e949e6c249f4810b46905c886
Validity
Not Before: Apr 19 14:00:14 2025 GMT
Not After : Apr 20 14:00:14 2025 GMT
Subject: CN=afce68862b5fd2c2f9670edeb66c714d74d64473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:94:7f:7c:fa:cc:9e:61:be:a6:ec:ff:eb:90:
59:3e:46:0e:a9:f4:74:37:4e:f5:53:e5:33:f1:d1:
38:c0:60:70:58:bd:7e:70:04:3e:dc:7c:26:09:6d:
5d:d5:2e:b9:74:2d:80:0f:a2:d2:eb:91:15:2e:a5:
4b:ea:48:c6:99:61:34:39:2f:d0:cf:e0:42:db:40:
5e:44:2e:75:9d:8e:a5:67:ae:8f:1f:33:fe:34:9e:
83:7c:30:ad:3d:5e:e7:57:e8:91:20:6d:18:eb:ad:
f7:18:73:f5:8a:47:f8:30:9e:cc:d8:86:9c:72:90:
be:45:89:e7:c6:b4:bb:70:9e:cd:27:f7:1c:76:47:
52:79:f5:6d:d7:1d:68:e4:af:68:8a:77:79:ae:a5:
30:53:28:d1:62:b0:7d:11:ff:02:37:11:cb:11:2c:
4d:15:47:1c:61:06:10:c8:db:a4:19:6b:88:d6:4b:
d1:d2:99:ac:26:73:a6:c0:ed:19:ff:e6:6d:71:5e:
74:3c:79:6c:76:3d:5c:ee:db:e0:7e:9a:3c:07:59:
7c:6f:6e:1a:30:7e:93:63:cb:97:76:b7:db:18:56:
a3:53:81:e6:29:fd:dd:b7:5e:84:13:75:d9:48:86:
e8:cc:92:c5:a1:3d:47:93:6f:f7:49:8e:7c:0a:de:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CE:68:86:2B:5F:D2:C2:F9:67:0E:DE:B6:6C:71:4D:74:D6:44:73
X509v3 Authority Key Identifier:
keyid:03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:da:24:99:08:e8:c8:46:35:aa:73:a8:1d:e2:54:f9:5d:55:
ae:bb:97:a6:aa:54:de:b4:92:7d:af:a9:29:f0:98:cd:ff:e4:
6e:53:c2:f1:af:9d:24:d0:83:fb:26:47:fe:7e:a0:bb:e1:3a:
a1:62:8e:70:42:0f:62:4b:c8:3e:1f:dc:40:a3:52:3f:b1:ae:
2a:5b:1d:17:26:eb:87:4b:3e:7c:ea:f2:fc:d8:12:94:b7:df:
85:10:da:9b:80:e2:44:44:f8:43:63:48:a4:5e:60:bf:f3:02:
b7:4d:66:a7:f0:16:2a:bf:d0:c4:aa:83:72:53:c2:76:a6:eb:
2d:d8:b4:0c:a7:7b:bd:70:c2:ff:71:8b:32:29:6d:c9:b8:7b:
0f:e5:d7:94:5f:cb:8f:c2:92:ef:42:c3:e1:79:76:8d:a3:19:
57:27:44:d5:bc:4d:e2:b9:06:b3:ce:74:f3:d7:73:02:8f:d3:
09:71:54:38:d3:73:04:a2:8b:a3:49:db:b5:c6:9f:7e:ad:20:
08:82:b2:c7:52:78:d3:3a:c4:87:61:fc:1d:6c:5e:80:b9:fd:
56:01:fc:9d:f4:25:8b:30:74:62:af:87:ec:97:f3:c6:47:e2:
cf:e9:14:fb:28:9c:30:65:36:f8:f3:e5:21:a9:5e:e2:a8:0f:
2b:e6:b1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:44:52 2025 by rpki-client