Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: rf2Nkk6bGw/Smw2YQk/NbDszP+64TYWEKTigq2d6tVM=
Subject key identifier: BC:F9:39:98:D4:8A:70:C0:C6:A6:00:08:61:27:E2:AA:B0:1E:FA:03
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 01965B39A8A296BFF2A51DD5E60637CDFDC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 0E82
Signing time: Tue 22 Apr 2025 02:00:27 +0000
Manifest this update: Tue 22 Apr 2025 02:00:27 +0000
Manifest next update: Wed 23 Apr 2025 02:00:27 +0000
Files and hashes: 1: 4_oN5t2VSIOq_-X5g3Ce-QiBlKY.roa (hash: xjVxZUWWNj0H8HPJGRtdhqp5nG1AYywGPAoN+0SYdO8=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: 38dqyNmVrRawOD8/umniNnKfx/TNy3FirU4m74hjuEI=)
3: v3SUAtR9QWFlr-gp81uV9PqvwlY.roa (hash: mn3Ww15BCRBB13Jmxz3hObcdL3yCXwDoxW+3UuBjkwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:39:a8:a2:96:bf:f2:a5:1d:d5:e6:06:37:cd:fd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Apr 22 02:00:27 2025 GMT
Not After : Apr 23 02:00:27 2025 GMT
Subject: CN=bcf93998d48a70c0c6a600086127e2aab01efa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a1:9b:82:89:c5:48:33:55:b4:18:b0:94:de:
c6:56:f6:8d:e4:b6:df:ea:55:f6:c7:2f:88:1d:5b:
37:4b:fa:88:b3:aa:4d:51:5f:cb:d9:87:07:8b:10:
b2:76:a0:a9:28:9a:91:ae:ff:bb:cb:61:39:bf:90:
80:82:8b:55:6b:b4:ba:fd:c8:26:70:47:28:8a:c4:
1d:c9:32:95:8c:8b:90:64:b7:a1:1e:3f:ef:e7:39:
67:32:92:fe:e2:8c:42:22:c3:eb:eb:9d:1d:d2:ab:
43:96:30:4f:19:71:bb:49:f1:47:ed:ce:7b:b3:3f:
bb:b1:a6:53:46:e6:02:bb:11:c7:e0:78:1d:d7:32:
77:c7:bb:9f:2f:59:e3:e2:26:4e:50:32:43:65:ab:
fe:54:c9:f1:17:c7:76:af:b0:50:f2:09:50:eb:c3:
02:3e:c9:1d:9b:18:55:c4:2a:d8:67:c4:58:b3:da:
43:e1:d9:75:17:91:c2:a9:37:06:70:c9:4e:db:0c:
fb:20:a8:a1:0d:d8:be:93:83:86:49:42:b1:1c:0d:
13:0f:f6:84:39:69:9b:9f:82:dd:f9:03:ab:89:0d:
51:98:bc:5e:41:c8:75:03:97:b9:73:9f:22:be:31:
e8:51:99:8b:ba:e3:94:9a:55:6f:4a:6a:ec:4a:56:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F9:39:98:D4:8A:70:C0:C6:A6:00:08:61:27:E2:AA:B0:1E:FA:03
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:02:3b:b1:eb:77:33:36:54:0e:a4:b5:d4:ab:b2:34:c1:41:
4e:af:ab:d6:86:46:b3:d3:60:97:78:41:4b:19:ef:5c:32:b3:
84:c3:6f:a4:03:13:2b:7e:44:5f:21:10:b0:3d:4c:7d:23:95:
ff:d0:17:01:1f:31:b4:54:5f:e1:d5:89:9b:3a:5f:4d:14:cf:
32:b1:50:a1:38:f8:bf:dc:7b:fe:aa:5e:80:97:77:5a:db:7b:
75:1f:87:e8:38:e3:21:6d:51:04:5a:ef:0d:16:cb:9f:67:d8:
0d:7a:05:02:5f:09:8a:55:8a:c7:ad:dc:bd:89:bd:fb:b6:f3:
b7:3e:02:15:fb:5c:c9:92:00:63:32:4c:0f:03:98:bb:bc:27:
8e:f8:26:98:31:7b:bb:0b:6f:81:84:6e:d4:82:78:51:02:aa:
e2:12:e8:33:4b:17:49:cd:11:3f:3a:20:7d:65:5a:6c:58:0d:
4c:73:f6:ba:3a:b9:3f:78:71:0a:bc:a6:f1:6b:08:28:46:be:
94:d6:83:2e:85:62:24:83:61:a8:8a:38:df:18:82:66:70:64:
ca:2a:9e:d9:7d:89:d6:4d:27:f3:29:f9:bf:1c:92:1d:d8:f0:
72:c5:59:3e:72:e6:c7:a0:cc:fb:3d:d6:7c:6f:eb:66:a8:07:
c2:9b:5e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:16:14 2025 by rpki-client