Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
File: Afq489H7PSo1xPZ6SPb2CD6rpXU.mft (raw, json)
Hash identifier: nkkwG8kOSUpTnmixtCYPdU6oTCStprakgST3LljpUH8=
Subject key identifier: FA:02:B2:E4:D4:DF:D0:59:AF:D6:20:C1:4A:52:8C:51:F3:18:53:29
Authority key identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
Certificate issuer: /CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Certificate serial: 019651FFE69DD9FA217B59886EB459308EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
Manifest number: 04DD
Signing time: Sun 20 Apr 2025 07:00:47 +0000
Manifest this update: Sun 20 Apr 2025 07:00:47 +0000
Manifest next update: Mon 21 Apr 2025 07:00:47 +0000
Files and hashes: 1: Afq489H7PSo1xPZ6SPb2CD6rpXU.crl (hash: nX5NEPL8DNEMC/7oHcxKiZqFgpegIVMteCdU3MTfsac=)
2: RCG29GRzXNkfnM3mAc2fQgzDKKo.roa (hash: VMJ45tdoRBW32E+FWz6jKq995VHfDQKLmdI/8SmUIrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:e6:9d:d9:fa:21:7b:59:88:6e:b4:59:30:8e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Validity
Not Before: Apr 20 07:00:47 2025 GMT
Not After : Apr 21 07:00:47 2025 GMT
Subject: CN=fa02b2e4d4dfd059afd620c14a528c51f3185329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:b2:05:74:d5:3e:e6:1f:74:7e:63:63:2e:
a9:a2:ab:6a:56:71:77:bc:85:c3:44:bf:96:c0:7b:
4e:1f:84:1f:fe:f1:91:ba:c5:76:7f:98:b7:c0:b4:
37:1b:76:fb:68:7a:e5:cd:30:41:ce:f9:dd:74:2f:
a5:21:03:60:13:b9:09:14:8e:ae:7b:d7:1e:4e:43:
4f:d9:b2:d3:75:39:cb:71:c7:ab:d6:90:21:cd:d5:
9b:fd:c9:45:e2:62:56:bc:d0:16:ea:93:83:48:5f:
70:c7:16:25:ae:06:8d:15:2b:96:c9:2a:1e:36:49:
8f:58:24:d7:2a:cf:0e:b5:ab:e9:00:17:ef:a9:b0:
17:42:d2:a8:07:22:08:b3:9d:5b:17:15:ae:5f:78:
7f:c7:3d:7d:5a:88:d7:e1:88:2d:c0:23:b7:7b:f9:
97:11:23:3e:96:a8:a8:98:f3:db:f9:28:82:04:1a:
5c:ba:d5:1c:ac:de:56:62:0f:45:f9:8a:c5:15:08:
9d:68:6b:29:f2:b1:e3:fa:60:b7:5a:75:d7:e1:29:
b2:68:6b:68:05:61:31:42:7d:6b:b6:f7:ed:af:34:
26:e3:d1:a7:28:37:f6:8c:2c:ca:15:60:4f:45:49:
c4:7d:d9:49:d5:0d:9a:bb:52:b0:79:4b:91:47:d6:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:02:B2:E4:D4:DF:D0:59:AF:D6:20:C1:4A:52:8C:51:F3:18:53:29
X509v3 Authority Key Identifier:
keyid:01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5b:0e:64:f1:cf:c1:21:14:b7:47:a2:54:c6:5d:e9:99:9d:
f9:79:d3:3b:6e:9a:3a:bd:a1:e4:9c:c0:65:dd:81:91:ef:d3:
b3:18:9f:f6:37:0d:b0:f8:49:25:86:b2:72:de:b6:ae:0b:71:
69:00:bb:06:22:ea:1c:23:c1:29:8d:36:81:a5:15:0d:09:ab:
16:da:cf:ea:ea:3d:60:f0:a8:37:1e:08:d8:8e:dd:78:69:01:
38:e6:f3:78:ff:75:a6:ba:4e:52:03:45:e4:67:01:74:85:69:
7a:9b:8f:4a:0d:92:64:b0:47:c2:b4:e8:ee:20:7e:5d:ae:52:
e5:39:11:bc:6c:53:a5:a2:f3:18:5c:c9:ec:4b:1e:3b:ce:bb:
36:12:30:1a:1c:36:c5:bc:32:a5:0e:a0:48:56:62:65:98:69:
23:28:e0:d7:f6:23:00:7f:fc:95:d5:ca:17:7f:ed:b9:4f:ab:
b5:d5:c0:e6:4b:3f:3d:cf:5f:25:be:b0:cb:81:78:b8:e1:8d:
75:01:2d:0c:63:7b:01:8a:27:ed:37:b4:e0:d1:ce:f3:bb:57:
02:9e:e7:b3:76:85:68:a5:01:1b:2f:ca:ad:8b:69:27:d9:9f:
b7:37:7d:7f:dd:86:1e:ec:33:e7:cb:23:eb:e3:84:0f:ea:4f:
0d:75:84:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:23 2025 by rpki-client