Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: z/RfFTY9b/fmQ3K/jfTfzJDjfHAzi7QI1BvvNE5o914=
Subject key identifier: 6E:52:7D:C6:8F:13:50:3D:F6:15:32:ED:C7:A7:B1:98:2A:51:3B:8C
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 0197409B7ED1B81ED06C47F184DFD7C43679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 0F32
Signing time: Thu 05 Jun 2025 15:00:21 +0000
Manifest this update: Thu 05 Jun 2025 15:00:21 +0000
Manifest next update: Fri 06 Jun 2025 15:00:21 +0000
Files and hashes: 1: TvMim_aEtrCLLOp0ZZIFYAVC2o4.roa (hash: /xE4OxOvjCCoCUdeNOdzw/FvM+bpWmIZ3XvVFCX7TVc=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: uKn9YIrlfo6W13QyBfTxbMfeg/lFZDmRSCy5bsAnIcA=)
3: qi04sQ8qQVwMXdQXve2GNvg8f-0.roa (hash: fLJ+x7i0b6ZT7hHF332I64JRm3fDb0LUQmOcJ/RhLx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:9b:7e:d1:b8:1e:d0:6c:47:f1:84:df:d7:c4:36:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Jun 5 15:00:21 2025 GMT
Not After : Jun 6 15:00:21 2025 GMT
Subject: CN=6e527dc68f13503df61532edc7a7b1982a513b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:98:75:2f:ca:03:64:92:12:f8:86:a5:27:
61:cb:16:19:41:c8:67:e2:c7:d8:3c:07:37:11:ca:
28:1c:85:69:b2:c8:1e:54:76:b2:e4:bf:1c:2a:04:
65:ff:bb:7f:8d:22:f2:ec:06:2e:2d:ae:58:2f:00:
d6:fb:04:ec:1b:02:3d:56:5e:da:4c:d4:9d:9e:3a:
48:1f:02:d4:7a:d4:bb:af:29:10:45:eb:46:75:16:
25:41:75:ab:b0:86:7d:af:1e:d6:16:6e:35:71:86:
91:7a:a4:36:43:9a:45:4b:0d:1e:7d:7f:2c:da:94:
ef:c8:0b:0d:56:c1:58:39:61:62:a5:f3:25:88:9e:
c4:8b:c8:26:6a:f9:f5:9e:ca:49:bc:9f:7b:f9:35:
74:58:86:4c:a0:01:71:d6:9e:8d:d4:c8:4a:e6:3b:
10:89:01:6c:9d:ce:e9:14:ae:6b:f9:c2:00:c1:5d:
94:25:43:09:c2:04:8f:b1:e6:ed:28:93:c0:36:25:
60:05:da:d4:c8:2d:21:3c:e5:57:8b:5c:ae:eb:60:
75:b0:be:aa:90:77:6f:c7:a8:0e:43:b3:b0:a8:f2:
3d:0d:8f:4b:1d:f8:f3:78:8d:3a:07:de:b4:31:41:
81:f0:f1:ea:c0:d8:1a:fc:cd:7e:eb:fe:a2:70:a6:
5a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:52:7D:C6:8F:13:50:3D:F6:15:32:ED:C7:A7:B1:98:2A:51:3B:8C
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:12:87:74:fb:ca:0a:37:49:ea:7c:56:52:fc:6c:a3:47:d4:
a9:13:0a:9f:f7:da:b8:1a:e8:ed:0e:f0:da:69:e0:bb:ed:22:
c8:60:51:1f:7c:d9:17:e3:1c:b4:8f:2b:55:b4:be:d4:12:70:
23:3a:8f:ab:41:ed:70:f3:cc:23:58:e1:1d:bc:ad:16:1c:d5:
56:82:0d:02:b5:a2:31:51:c9:54:3c:11:7c:90:d5:aa:9f:54:
46:01:7f:0d:ae:45:76:26:c2:98:8c:c3:ba:34:88:af:c0:71:
c7:da:20:2a:26:4b:bc:84:fb:65:db:62:8f:3b:e0:40:d1:f9:
55:47:c2:2c:89:40:7d:23:28:1c:8c:8c:26:30:3c:d7:7b:0e:
14:1f:ad:53:f9:ac:5b:33:d3:8e:e4:8c:90:35:07:7f:98:98:
06:44:e0:6e:d4:b4:fa:53:52:c5:a9:bb:cf:68:47:bd:55:cf:
ce:e2:c8:f6:51:c9:32:3b:98:ce:12:81:bc:b7:99:dd:38:fb:
ce:47:fb:f2:dd:62:15:9b:c4:c6:ec:fe:92:7b:83:b4:a5:13:
68:07:4b:14:e5:a6:bb:c7:f4:b6:0c:32:1b:96:52:48:1f:bf:
4c:1d:ea:bb:9e:0e:b0:8a:8e:cd:85:45:8b:69:68:47:dc:7d:
bf:88:e7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:45:37 2025 by rpki-client