Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
File: ag1malTV4bw1XA1yUDpFj8Do4Gw.mft (raw, json)
Hash identifier: wzxWCzUknOf8bftHgtV+fqUgl5dtBj/qzjeVkaR98Tk=
Subject key identifier: B8:F4:D9:C6:32:D5:FD:42:16:91:B6:28:7E:44:24:2F:D8:5E:74:B3
Authority key identifier: 6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
Certificate issuer: /CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Certificate serial: 0194C4D157BA87C1B6157B906DA586CB8666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
Manifest number: 142E
Signing time: Sun 02 Feb 2025 04:00:41 +0000
Manifest this update: Sun 02 Feb 2025 04:00:41 +0000
Manifest next update: Mon 03 Feb 2025 04:00:41 +0000
Files and hashes: 1: Zbu9lV-TXRr1mjPabkdbQi-tc2k.roa (hash: L0pLG2iq3DWnmdVA1LNHGmiPWiH4T8eZ9Q5L7k/ukzQ=)
2: ag1malTV4bw1XA1yUDpFj8Do4Gw.crl (hash: FXueDweBN9C6GrzOM0XwejaaN43q3dduI8m8yUgz43I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:57:ba:87:c1:b6:15:7b:90:6d:a5:86:cb:86:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Validity
Not Before: Feb 2 04:00:41 2025 GMT
Not After : Feb 3 04:00:41 2025 GMT
Subject: CN=b8f4d9c632d5fd421691b6287e44242fd85e74b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:5e:63:c1:74:01:98:f7:a4:a6:04:35:f5:
e3:98:7f:f0:40:09:8d:b4:60:39:6d:b5:8e:7d:e4:
7d:a2:f6:62:19:df:89:7f:4e:3d:4e:5a:29:db:c0:
d9:5e:8f:c1:21:63:b4:48:5a:70:ef:b9:5c:03:8a:
74:16:c1:b6:ef:82:33:de:16:8c:2d:39:3b:b4:e5:
66:e8:2a:69:17:bc:27:21:01:f1:52:9d:ea:93:38:
f6:26:91:bf:bc:e1:98:17:89:36:2f:40:8b:5b:05:
4b:20:3d:96:65:8d:c5:66:45:4c:36:cc:6c:ed:f2:
97:55:bd:3c:42:13:86:16:28:68:44:f3:15:ae:b5:
65:58:ad:bd:55:aa:71:a6:51:0b:73:d1:df:3b:66:
5f:c6:8a:33:aa:af:ce:4f:d1:aa:cd:50:11:ad:4f:
02:86:5c:f6:77:df:18:8f:24:5e:a1:13:93:e4:f3:
36:15:15:03:a1:cd:ef:09:18:05:e7:c5:d3:46:fa:
f1:d4:d1:6c:b2:86:a8:f2:7b:e6:f7:49:0c:33:ec:
8a:c9:0c:6e:76:48:29:3b:14:ad:a9:11:05:30:04:
4f:29:99:7d:34:51:20:bb:ef:f7:6c:76:ed:07:66:
42:17:91:04:1c:96:56:0d:b1:9d:57:08:ba:30:9e:
7c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F4:D9:C6:32:D5:FD:42:16:91:B6:28:7E:44:24:2F:D8:5E:74:B3
X509v3 Authority Key Identifier:
keyid:6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3c:d1:ce:1a:2e:b7:e7:13:6f:20:87:20:2f:12:1c:43:07:
62:a3:03:85:8d:33:fe:8f:63:4e:d6:17:a2:82:28:f3:04:96:
d6:22:30:cf:5f:06:1e:9d:65:45:4c:22:94:be:94:ab:ea:6d:
76:81:c1:e3:56:d4:e2:ea:ee:7b:e7:8a:51:9a:ea:c7:4e:0f:
f9:f5:de:a7:16:f4:2f:3b:2e:37:e2:61:97:7c:69:32:95:65:
4b:79:fc:c6:34:5e:05:92:27:a7:72:d7:6a:66:e3:aa:96:f4:
e8:90:57:42:d1:7e:c9:98:9e:a2:3a:0a:72:67:82:82:e9:a1:
5a:90:9b:f3:c4:dd:7b:e4:dd:9b:16:cb:da:bc:f0:5a:9d:4b:
84:cc:ad:7d:5f:83:1d:53:9d:9a:c2:cb:0a:33:18:7e:88:f2:
9e:99:c7:3c:54:f1:44:2d:0d:da:63:be:e0:33:ea:35:e8:1f:
0f:50:6b:ab:73:ae:7d:32:51:18:5d:72:01:82:36:62:8a:22:
fa:17:8b:aa:6c:05:df:d4:44:f6:3c:c9:18:f5:56:89:f1:91:
d3:34:c1:4e:1b:24:22:6c:fd:99:e5:38:75:41:ce:b8:86:6d:
c4:60:55:48:14:a5:79:f2:92:de:2d:e8:2a:49:64:0f:3e:7d:
88:b4:9f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:36 2025 by rpki-client