Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: aZgoo/ifuJpmURZlsQAnE3rB5ekqBlgWKleHSMlzM9A=
Subject key identifier: C5:4B:1D:E6:EC:72:D3:FA:14:FD:4A:35:3B:21:47:52:4C:C0:18:E1
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 01961B119F781F42451BE13B97AEFB0AC5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 0E9A
Signing time: Wed 09 Apr 2025 15:01:01 +0000
Manifest this update: Wed 09 Apr 2025 15:01:01 +0000
Manifest next update: Thu 10 Apr 2025 15:01:01 +0000
Files and hashes: 1: TvMim_aEtrCLLOp0ZZIFYAVC2o4.roa (hash: /xE4OxOvjCCoCUdeNOdzw/FvM+bpWmIZ3XvVFCX7TVc=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: YPXKHkpCC20xOHj3F0mTt5xEgHTq56TkqmDgON+vrDQ=)
3: qi04sQ8qQVwMXdQXve2GNvg8f-0.roa (hash: fLJ+x7i0b6ZT7hHF332I64JRm3fDb0LUQmOcJ/RhLx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:11:9f:78:1f:42:45:1b:e1:3b:97:ae:fb:0a:c5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Apr 9 15:01:01 2025 GMT
Not After : Apr 10 15:01:01 2025 GMT
Subject: CN=c54b1de6ec72d3fa14fd4a353b2147524cc018e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b6:2f:0e:eb:46:07:bc:7f:c9:36:d6:1a:4e:
a7:e1:b9:7f:38:76:e9:4d:b3:74:44:e1:14:58:39:
a1:58:a5:02:37:29:5d:6f:f1:d9:b0:92:3a:8f:62:
21:3f:a8:12:36:0f:0e:e2:51:a0:79:d5:ca:9e:18:
2d:2b:7f:de:e0:c2:62:0c:94:90:97:7c:15:5c:e0:
3b:8e:0d:91:62:5b:84:04:1e:50:15:2c:3f:e3:5d:
4d:21:55:ea:0f:50:12:22:68:8c:7b:d1:3a:0c:2a:
5f:e0:72:d1:99:16:b0:06:bf:8f:7f:19:83:b6:1e:
c2:7e:f4:60:75:68:ef:4e:05:e4:64:10:2c:28:02:
f2:18:53:36:35:31:22:6c:16:e1:e4:f7:b4:7d:8f:
41:3b:17:05:1f:2b:39:57:57:fd:49:27:68:50:2f:
1b:19:04:69:68:92:cc:5e:92:12:75:9d:48:69:a4:
8b:c7:42:1c:62:80:5e:ca:38:a1:f7:80:d0:70:ae:
38:f4:d8:0a:76:dc:6c:16:e3:cd:81:65:55:15:3a:
84:11:a2:13:f4:9e:92:c6:69:73:69:28:51:07:ac:
d7:54:29:c7:89:69:7d:be:d8:79:b5:08:fe:ac:90:
c4:38:2c:62:12:64:8d:b6:57:fe:4a:56:51:76:1e:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4B:1D:E6:EC:72:D3:FA:14:FD:4A:35:3B:21:47:52:4C:C0:18:E1
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2f:b9:2c:60:b6:2e:7a:5e:47:c3:95:dd:da:9c:5b:06:d0:
6b:a5:a2:9e:72:82:40:09:02:1e:eb:0f:0a:ad:68:85:93:b1:
37:e6:bb:fc:0d:75:7f:70:19:98:6c:79:26:c4:19:c4:82:50:
22:b3:0a:b3:eb:41:c8:f9:d6:24:04:1a:c3:ca:4b:5b:f2:62:
ee:1c:9e:31:8c:fd:2a:00:13:61:49:60:8f:9d:b4:11:9c:fa:
a1:68:e6:18:56:aa:81:43:d9:36:a0:02:a0:5a:bf:5e:8f:d2:
89:4a:80:af:44:92:fc:f6:8e:99:bb:5c:be:10:33:81:fe:d8:
3b:39:a9:9e:43:35:e4:ce:a5:90:5b:0f:fe:1b:2f:df:95:68:
9e:1d:5d:1c:43:21:2b:b6:aa:5b:e7:36:9c:76:56:9f:1e:67:
96:9e:c7:43:bc:44:6a:6e:68:a8:87:b8:5a:89:69:fa:93:b6:
81:89:ff:dc:03:03:4f:e5:5a:2a:1d:7c:54:c3:a0:83:a3:e8:
a9:b6:60:69:cd:5e:1e:fb:9f:d6:b5:23:bd:f0:8d:84:a3:bf:
6f:33:d7:51:ac:58:79:fa:c4:07:f2:36:58:82:93:5e:3d:d6:
c4:6c:60:26:10:01:af:bd:e8:31:01:f5:62:c3:1e:73:b7:eb:
45:eb:d5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:53:17 2025 by rpki-client