Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
File: am_dL9Qvq_hycglSRo0pY0xoydw.mft (raw, json)
Hash identifier: +sh6X8VmKdGBqBAtBwXBVjabgx0qj8l8xodRaPA56Yw=
Subject key identifier: FA:0C:9B:9F:CE:5A:C8:F8:16:01:AE:E5:2A:11:D3:2C:45:9C:B6:72
Authority key identifier: 6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
Certificate issuer: /CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Certificate serial: 01965349A515EBFA48AB5DDB89E66D2AAF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
Manifest number: 0860
Signing time: Sun 20 Apr 2025 13:00:57 +0000
Manifest this update: Sun 20 Apr 2025 13:00:57 +0000
Manifest next update: Mon 21 Apr 2025 13:00:57 +0000
Files and hashes: 1: QZxCWcbwldfBbje2z7CU-dKZ2OQ.roa (hash: z3N51ZQ5F8Gr4zs53/jXBVGssP0tmVUaOonBzkRtl38=)
2: _od80ObLqomwGF2QQRW4qwheTZ4.roa (hash: CaYsbUoRWbmVInyGmVu/D6GkTzKF8+37wy3InRczmKA=)
3: am_dL9Qvq_hycglSRo0pY0xoydw.crl (hash: 0pRsH3lVvMQWPGd5LAeJWWwHV1V0LYfn4nGAB5GTmbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:a5:15:eb:fa:48:ab:5d:db:89:e6:6d:2a:af:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Validity
Not Before: Apr 20 13:00:57 2025 GMT
Not After : Apr 21 13:00:57 2025 GMT
Subject: CN=fa0c9b9fce5ac8f81601aee52a11d32c459cb672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:3b:48:7e:e5:c5:84:46:b8:67:c0:c6:ec:
cc:fc:93:bf:f2:1f:f4:38:0f:0d:24:01:01:a5:cb:
e5:24:f8:11:d9:22:26:76:b4:a5:46:86:41:c9:f2:
48:0f:7a:c1:7d:6e:50:d2:b4:78:06:aa:28:44:f3:
d9:1d:15:0b:bc:e4:51:70:95:0a:93:37:27:63:86:
c6:39:68:db:c0:23:38:a7:44:80:84:ae:8b:37:5b:
d8:1a:c3:f1:1a:3b:72:28:81:a9:83:b2:99:66:db:
4a:ad:82:1a:7a:63:df:72:f5:87:70:49:1e:a7:9f:
4f:6a:d5:51:b0:a2:dd:c2:b5:2f:89:10:14:77:bf:
e5:ca:f9:fd:c2:51:d7:02:c8:a4:f8:59:e2:d8:30:
d7:30:a5:cb:2e:fd:97:cc:3b:22:7a:2f:b6:c4:e7:
8f:25:a7:13:07:80:37:41:d2:62:cf:a7:8b:b8:06:
4b:79:63:c0:6f:e9:f9:70:80:36:b8:76:21:98:99:
29:59:aa:b6:84:cb:ba:54:c9:57:29:a4:3d:76:68:
ad:a6:ef:6a:16:3f:9e:8b:41:bf:97:df:55:f9:36:
97:65:27:d3:d2:f5:ef:af:2e:48:e2:2c:1c:ec:b8:
49:a1:39:48:ba:c7:ee:39:fd:fb:2d:b3:0d:b0:66:
7c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0C:9B:9F:CE:5A:C8:F8:16:01:AE:E5:2A:11:D3:2C:45:9C:B6:72
X509v3 Authority Key Identifier:
keyid:6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e7:d0:eb:fe:f3:80:d1:e6:0c:57:97:a9:79:8e:30:b5:d5:
6a:02:36:71:7c:12:72:07:c0:44:aa:1a:0e:49:e7:5d:cd:01:
e6:e2:da:c7:93:cd:de:9a:41:83:3a:31:39:13:b4:8c:83:f3:
bf:2a:0e:3e:73:c8:a0:09:59:62:c6:7b:a7:e7:6b:fe:e8:6b:
3e:9b:ba:c1:38:49:08:13:60:c8:79:4f:78:81:34:7a:6b:41:
ea:f0:53:b2:1f:3a:00:c4:e7:16:47:ed:72:2a:3e:aa:08:01:
88:58:8d:e8:6b:14:78:5b:50:36:5c:98:e9:cd:25:29:b0:89:
f1:03:06:75:88:06:5f:6e:11:a9:84:ef:dc:50:d9:90:f9:d5:
e2:81:a5:63:7c:3a:dd:a2:70:71:df:77:8b:21:40:2e:fc:d8:
c9:eb:86:23:fb:51:c1:9f:3f:15:b7:de:c3:73:e4:c1:a5:9b:
9d:b8:9a:de:97:68:23:ec:83:77:d2:e8:86:bb:6c:3d:b5:92:
b9:2f:95:cf:57:f7:32:74:7e:c9:ce:9e:95:0c:69:4e:60:fd:
06:22:1d:45:0d:04:53:fc:c5:17:b0:15:91:bf:0c:38:92:ef:
08:a5:78:7b:6e:2d:b8:a9:18:20:25:4a:49:e4:78:c2:21:51:
25:71:55:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:55:30 2025 by rpki-client