Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
File: AFetCa6aGpgBInWFGqvmnk4VovQ.mft (raw, json)
Hash identifier: xwAq3/6yRJDIJWRcQ2ehbkX4A3PWyC51KwjiOBpu+AA=
Subject key identifier: 38:2C:7E:9E:09:8B:AD:07:B5:FA:A8:21:57:F2:10:74:21:5A:A6:36
Authority key identifier: 00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
Certificate issuer: /CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Certificate serial: 019655386E9E3C5273262D1AF9F2954F6AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
Manifest number: 0DE6
Signing time: Sun 20 Apr 2025 22:01:23 +0000
Manifest this update: Sun 20 Apr 2025 22:01:23 +0000
Manifest next update: Mon 21 Apr 2025 22:01:23 +0000
Files and hashes: 1: AFetCa6aGpgBInWFGqvmnk4VovQ.crl (hash: VXMbT1aQterFJNyHtQqdBbNv2yKqkrJWI2zeJZhoe/w=)
2: uxPm2jgrGB9aUpoVSqtxOrk6oLc.roa (hash: jnz+6TEphg6WeFVMNjeLnKwOXT2+7WslFFXVeACqJbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:6e:9e:3c:52:73:26:2d:1a:f9:f2:95:4f:6a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Validity
Not Before: Apr 20 22:01:23 2025 GMT
Not After : Apr 21 22:01:23 2025 GMT
Subject: CN=382c7e9e098bad07b5faa82157f21074215aa636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6b:8f:dd:66:32:39:76:1e:57:80:6c:7f:31:
6e:e7:de:90:b7:37:d9:71:db:fb:e6:88:28:d5:97:
dc:75:5d:f4:d9:74:0e:6e:60:18:9f:93:8f:eb:ea:
0f:ab:bf:07:64:b6:42:38:ac:3b:d3:c4:40:92:e9:
20:f4:3a:df:0e:dc:a0:eb:25:50:86:02:ef:97:cc:
59:f0:ba:3a:56:fe:30:19:3f:10:09:ed:a5:43:fc:
bd:8a:b7:4e:6b:3d:9a:28:aa:76:75:2f:23:44:3d:
dc:bb:98:20:75:cd:44:4c:4c:5b:15:97:3a:de:97:
73:ae:4b:b6:70:f8:c1:95:36:ea:fe:11:79:1f:32:
e6:19:90:2b:25:8c:42:8c:71:73:0a:80:cf:49:b3:
93:a7:b6:68:4e:c6:4b:e4:f9:09:4c:70:9e:ee:ec:
ef:85:3f:ae:a0:4e:86:44:3b:26:60:82:f4:fd:30:
f5:53:50:b3:b8:b1:f1:01:40:8d:0a:3d:48:ec:de:
f5:80:19:12:e3:b3:1d:93:e2:bc:ce:2d:bc:5d:9d:
75:94:1c:a7:f3:a9:cc:82:23:a0:4e:59:79:ce:ab:
6a:82:95:58:4f:74:9b:b5:25:86:2b:5e:cb:59:68:
43:94:39:c6:6a:f5:04:43:a2:44:79:b0:0e:00:39:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2C:7E:9E:09:8B:AD:07:B5:FA:A8:21:57:F2:10:74:21:5A:A6:36
X509v3 Authority Key Identifier:
keyid:00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:72:4d:c4:29:40:65:eb:cb:fa:e5:6c:bc:a8:13:f7:35:4f:
5c:64:12:6e:44:1d:4c:b4:a8:ac:eb:b9:b6:b7:ad:3c:ed:99:
34:fb:ae:39:1d:6c:49:c8:b8:56:fa:8d:d2:1e:4d:6e:44:83:
a9:88:11:04:a5:37:cd:8a:df:5d:9f:94:71:28:6a:ab:de:0d:
33:21:f4:8e:c8:20:f1:01:36:30:c4:64:e1:6a:b3:56:6d:08:
e5:c1:08:ff:0f:77:3c:fb:09:94:7c:16:01:4c:ec:0d:12:af:
ae:45:37:90:06:45:56:07:36:60:df:0d:d9:c3:97:75:fb:a6:
fe:04:4a:16:07:6d:89:d9:7f:d3:ca:06:06:29:8a:76:d6:ec:
90:c8:3d:1c:e7:c9:75:aa:59:96:d9:d1:2f:33:26:69:9a:85:
63:a0:4f:04:f2:5b:df:2b:75:27:42:ef:08:18:0c:a1:ca:67:
b0:1c:02:61:78:07:cb:ac:4f:95:26:c4:77:9e:d4:d7:c7:5a:
ba:95:d8:59:55:82:8b:53:de:b0:92:ca:f2:60:fb:aa:8b:d5:
96:30:fb:d8:5e:35:40:b7:89:5a:b7:a6:1f:bf:4b:e4:8e:d6:
91:4b:93:ef:66:3b:54:7a:b4:aa:4f:9c:35:c6:41:0c:f1:c2:
29:b1:9c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:53 2025 by rpki-client