Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
File: aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft (raw, json)
Hash identifier: DLkRLNAXW8KdUz4v67Vs/1T+B9DtLJBIJQSY2qB0wcY=
Subject key identifier: 8A:AE:8E:13:18:F1:9B:53:22:24:58:66:37:3E:F7:B2:DE:12:04:B3
Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
Certificate issuer: /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Certificate serial: 01964D7E1821E67E1EA661C2D1DC0A382CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 10:00:31 +0000
Manifest this update: Sat 19 Apr 2025 10:00:31 +0000
Manifest next update: Sun 20 Apr 2025 10:00:31 +0000
Files and hashes: 1: 7aXu2rhZmv4-BuCU66jCzo0ecAY.roa (hash: tS1hLjKGnhqlQ+lG8lyvuM5sWOqjvWcE7iwF3zaabYE=)
2: aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl (hash: yQWX932tlX2Ep+NFYFAWoyn4N/zJ5Jjz0uwK8QMXH3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:18:21:e6:7e:1e:a6:61:c2:d1:dc:0a:38:2c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Validity
Not Before: Apr 19 10:00:31 2025 GMT
Not After : Apr 20 10:00:31 2025 GMT
Subject: CN=8aae8e1318f19b5322245866373ef7b2de1204b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:18:e7:8f:27:7e:ac:05:21:c6:15:e0:0a:
96:f9:a8:bc:cb:6a:be:d3:c4:01:0f:a3:77:f3:cf:
82:c8:7b:16:7f:12:80:97:93:25:9b:2b:42:11:23:
1b:dd:a2:56:32:ca:bc:96:d2:f7:98:6b:e5:ec:31:
d6:2a:b4:ba:54:6b:dd:eb:c2:41:b5:33:ed:fc:09:
2b:06:1c:6d:3f:a2:c0:68:a9:c9:e7:d1:9b:2c:9a:
b0:69:bb:da:97:45:63:a7:b2:79:8d:db:a1:1b:42:
a6:9d:27:c1:74:90:c8:06:53:c5:f6:23:7c:c6:85:
97:c2:3d:fa:d8:29:a2:2c:9a:2e:03:ec:f4:c6:9a:
5c:9f:e5:0c:73:93:1c:de:c7:40:a2:cc:d8:dd:3e:
f6:4c:a8:e0:15:c2:03:bf:15:c4:87:40:cf:65:73:
51:a6:a0:21:ff:97:36:30:e3:66:31:8a:41:d2:5e:
9a:95:fa:73:40:a0:1e:4d:62:39:96:d4:c7:01:3b:
47:16:42:48:d6:28:c0:e6:b0:9c:b4:05:0c:f4:a9:
86:77:ac:95:9a:fe:45:bf:92:ec:fa:c2:63:f9:ff:
f9:ae:88:ec:51:7c:e1:a3:a0:b1:7a:39:09:d1:d8:
12:4e:d1:13:d1:4a:b7:43:1b:7a:73:12:10:61:bd:
e6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AE:8E:13:18:F1:9B:53:22:24:58:66:37:3E:F7:B2:DE:12:04:B3
X509v3 Authority Key Identifier:
keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f5:92:f4:47:36:81:5b:aa:74:e3:f6:23:9e:63:d4:8a:9b:
17:6c:56:d5:73:5e:0d:be:85:b3:54:6f:8c:aa:82:21:86:85:
db:e4:2c:b9:c1:56:cf:94:85:91:f5:11:87:0b:16:58:f2:61:
9b:f4:cf:b5:6e:bf:07:8c:c7:f1:58:5e:21:6c:95:47:df:86:
35:28:7c:7c:32:c3:11:ce:f8:6c:d8:d6:64:66:07:65:7c:9c:
9f:df:92:12:9f:58:f6:80:ef:00:9c:98:bc:11:bf:1a:96:2d:
17:44:73:83:40:b9:a7:d4:f3:3f:3b:f0:fc:26:98:01:2d:32:
42:e5:33:0d:d3:fe:14:d3:dc:e0:76:34:c9:d7:71:ec:da:c3:
af:69:49:1d:ab:17:b5:83:8e:61:5c:9a:40:2e:f9:8b:7f:b3:
3a:16:ac:c8:cc:59:46:e6:62:fc:83:9b:e8:92:ce:6c:e5:03:
0e:00:c9:96:8d:ea:cd:1b:5a:ba:3a:e7:a8:71:95:1c:a4:a8:
56:30:8b:37:ff:2b:73:41:70:7c:78:97:fc:8f:d8:a3:d7:85:
71:39:17:d4:6c:50:7e:1b:fa:80:f3:06:d3:da:90:45:92:c6:
61:74:3d:96:8d:c0:4a:27:59:4e:24:4d:17:6b:f4:bd:81:ed:
f7:33:5c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:36:58 2025 by rpki-client