Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier: P3drC7crcB5P3RSNXH6YLl+sfBszi02bRuw6I/YboQM=
Subject key identifier: C4:97:A5:29:D8:80:6A:1C:30:75:CC:C1:C3:E0:FB:0B:7B:A1:71:79
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 0196507F62DAB351078037296AF5D9BFF690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number: 07F0
Signing time: Sun 20 Apr 2025 00:00:47 +0000
Manifest this update: Sun 20 Apr 2025 00:00:47 +0000
Manifest next update: Mon 21 Apr 2025 00:00:47 +0000
Files and hashes: 1: GRjGVnhDoWbQf18vA-j6jPrf8bk.roa (hash: zfy3Xeb5F33VM6wGODUsXEb4Wf9If41Lyk9PhoslocI=)
2: Ydee_9sKBOYSNgV3DpsBR-w7_U8.roa (hash: tgY6PnqoOsKcCw452vOSzlvkg7P0cNWRWTWaQclJxEc=)
3: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: X6IikY+umIzbfzFEahG3UhJ4f/MCdFNiw1uDdNQ3Wpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:62:da:b3:51:07:80:37:29:6a:f5:d9:bf:f6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Apr 20 00:00:47 2025 GMT
Not After : Apr 21 00:00:47 2025 GMT
Subject: CN=c497a529d8806a1c3075ccc1c3e0fb0b7ba17179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:7a:77:95:f4:f3:58:4f:7e:45:b4:d3:96:
7a:fb:56:14:62:f7:b3:60:93:44:2b:18:d6:89:6c:
45:fa:95:94:14:ff:50:f9:48:00:5b:c4:90:25:45:
be:f5:c4:71:ed:d6:f6:f8:d3:ae:5e:9d:f6:45:df:
b6:b1:57:02:23:9b:9f:f3:5b:b1:a3:e3:7e:cb:16:
1c:61:51:2d:45:69:9e:cb:22:08:c5:ac:60:1a:aa:
0d:e8:0a:de:8b:a4:cc:d7:7f:d1:ed:a8:52:a2:01:
04:25:5e:17:ad:29:b9:d1:7c:4f:5b:08:83:b4:a6:
5d:f6:3d:8a:44:a3:3d:85:32:cf:6f:c6:ac:bc:f2:
f3:ff:b4:54:00:9e:ec:e9:87:56:20:a5:f6:dc:14:
d3:3e:05:fd:ad:f7:cc:b1:7b:c1:76:09:b0:0d:67:
04:35:af:03:9e:07:74:a5:7a:ba:7d:c9:6b:17:ac:
1a:7e:8d:69:24:bb:dc:a1:3a:7a:d7:3d:fa:23:44:
85:3a:65:39:fd:fc:86:1f:01:19:89:b3:3c:c4:ad:
79:07:fd:d7:4b:0f:da:e3:61:df:8a:01:39:6b:0b:
e2:2b:50:a1:d0:ae:a3:62:03:47:87:07:df:5f:19:
8e:2e:0d:a9:c1:24:71:fe:1b:c3:ee:03:39:d5:6b:
b7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:97:A5:29:D8:80:6A:1C:30:75:CC:C1:C3:E0:FB:0B:7B:A1:71:79
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:91:92:b8:99:7c:1a:11:41:6d:d4:ef:4b:f0:af:ad:b4:f0:
60:01:c5:e6:1d:c7:95:59:07:76:a3:ab:e8:f9:be:6f:1f:1e:
f0:fd:a3:1d:d0:36:2b:31:00:04:7b:06:b1:b2:92:1b:07:5f:
91:17:0d:13:f3:4a:51:79:15:91:72:54:5c:2e:53:2a:08:55:
e5:d2:d3:9c:f3:6e:ca:6e:0c:54:90:41:f6:e2:e5:0a:4f:ff:
d5:56:0d:ba:d4:9f:28:df:5f:da:27:5a:3b:b4:24:1b:86:96:
3a:0a:8c:9d:99:fb:41:87:8f:43:95:05:03:8c:d2:40:a0:4d:
c4:38:b9:7c:4e:6c:c1:be:d0:33:1e:9d:7f:eb:54:91:3e:55:
f6:93:1d:09:85:39:41:eb:ec:49:e4:a0:97:84:d7:4b:d8:ee:
04:31:3f:a8:fa:a1:3a:29:f2:5a:fb:4c:7a:e0:1a:35:19:5d:
0c:a5:75:17:8d:75:23:cc:7e:67:5b:52:53:25:7d:48:b8:25:
57:a9:0a:53:ae:6e:9e:8a:c4:a1:42:70:80:bd:23:f4:71:10:
f2:07:9f:b7:99:91:74:0a:61:b9:4a:9c:f4:1b:4b:81:f5:ad:
12:24:85:25:25:93:c7:d5:bf:5d:84:b4:b2:91:26:22:21:3f:
78:de:a0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:00:51 2025 by rpki-client