Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
File: aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json)
Hash identifier: fgCNiy/yQCO3j/4Mxwpzxumnu1B0OTsBtNdbXM8zGIs=
Subject key identifier: 39:12:30:EA:55:12:D3:5D:D7:6C:3C:07:90:A6:72:6C:4D:C4:D0:2E
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 01958BBB3C46C0D771EF987B8E4CD383ECF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
Manifest number: 0902
Signing time: Wed 12 Mar 2025 19:00:58 +0000
Manifest this update: Wed 12 Mar 2025 19:00:58 +0000
Manifest next update: Thu 13 Mar 2025 19:00:58 +0000
Files and hashes: 1: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: RTv/j5VdXw6eJcby1lKaK1lSwYEgLWfKmOuxBSxSQ90=)
2: sO327XoAur1DplfvgQUPrjYRerA.roa (hash: Y49ly/oM+VJ0V39d5VwjbL8ksFq63YJHHzGwktv4Jrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:3c:46:c0:d7:71:ef:98:7b:8e:4c:d3:83:ec:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Mar 12 19:00:58 2025 GMT
Not After : Mar 13 19:00:58 2025 GMT
Subject: CN=391230ea5512d35dd76c3c0790a6726c4dc4d02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:ae:2e:4e:45:72:10:30:05:29:2c:e3:62:
e6:54:22:cd:f6:af:74:87:87:4b:ea:07:df:08:6d:
f0:36:93:c8:38:0b:f9:2f:51:01:5a:72:da:08:00:
e4:98:95:3f:b3:2f:c1:40:75:27:5c:2d:0d:85:2d:
c2:c1:5f:cf:de:16:dd:fe:2e:e3:5e:9f:2c:b1:71:
c1:be:90:32:dc:4b:46:7d:f6:ad:23:41:f0:a0:c1:
34:29:1e:fe:8a:89:45:06:8a:0f:9d:b4:6c:42:c3:
1d:1c:b0:c2:be:65:99:b9:a0:a2:30:59:e8:22:5a:
8c:df:e9:46:71:d1:4e:cc:e8:ea:4a:76:fc:a6:84:
93:97:ac:89:c3:08:d2:84:65:fb:3c:ee:b4:4c:d3:
41:91:6f:42:d6:b1:f6:3b:67:8e:45:2b:c7:72:25:
fa:a3:7d:86:a5:eb:3d:5b:61:14:c2:0c:42:08:ba:
01:14:cc:df:9b:e9:e2:dd:fc:16:61:5c:e9:22:d8:
31:af:a0:e8:cd:b0:e8:6c:4a:5a:bb:2e:f3:ed:3f:
47:52:64:9f:27:fa:5f:01:2a:e6:7b:53:c5:d0:48:
c6:73:b2:d4:1e:d1:fa:ac:61:cb:7c:80:58:be:4a:
1e:13:0b:f1:cf:e6:3a:a7:4e:1b:56:ae:2b:a3:1e:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:12:30:EA:55:12:D3:5D:D7:6C:3C:07:90:A6:72:6C:4D:C4:D0:2E
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0f:b4:58:fb:35:80:2e:30:33:3a:f1:1f:b6:42:ca:78:0f:
18:84:df:cc:8d:db:6e:cb:5a:5d:19:0d:c6:f2:52:c9:5e:a5:
f6:b9:e3:ff:98:28:a2:a6:4d:67:e5:d9:b5:41:9d:a0:b0:31:
c4:2c:5f:ad:45:d9:f1:e4:c7:3c:5c:fe:c8:9e:3e:e7:12:c9:
c0:f6:87:ad:7a:cc:85:7a:b8:6e:11:e5:bf:14:f3:44:68:be:
77:60:0b:2e:e6:e9:63:15:04:40:51:d3:47:75:b9:bc:10:4f:
5c:6f:19:dc:20:3b:8f:90:76:91:71:21:b6:83:9b:01:a3:e0:
f1:a7:c4:16:28:53:56:56:fb:9c:3b:88:7a:68:89:ca:07:62:
2f:1e:41:cb:d9:48:72:5f:0b:a2:43:12:6d:a4:d0:d4:5e:5d:
f9:df:ad:33:f0:17:e5:91:74:be:c0:a6:bb:6b:e9:d6:7b:d1:
e5:82:38:d5:4e:60:13:b7:84:27:99:3d:29:bf:35:07:db:e6:
2b:c9:7e:99:9b:c0:c2:19:01:81:fc:d5:95:50:45:6f:f0:53:
41:69:8c:81:a0:03:24:e6:c7:74:6c:6c:f0:cb:10:49:8a:78:
12:3e:b3:9d:40:ac:f9:41:b0:d4:3b:e8:b9:86:ea:f2:52:00:
76:0c:bc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:06 2025 by rpki-client