Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
File: afGmtIBLtqOFSkThBp8lcmdBeAU.mft (raw, json)
Hash identifier: gkXb99xteO/1KfZFmmOLoH1jouAVVZ59CMveRiUFwN0=
Subject key identifier: AE:80:32:05:33:C3:14:8F:24:AF:A1:9E:BA:3E:B5:CE:EB:D4:A5:32
Authority key identifier: 69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
Certificate issuer: /CN=69f1a6b4804bb6a3854a44e1069f257267417805
Certificate serial: 01958C2982F76ED06AFB90572E91134E8D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
Manifest number: 026C
Signing time: Wed 12 Mar 2025 21:01:25 +0000
Manifest this update: Wed 12 Mar 2025 21:01:25 +0000
Manifest next update: Thu 13 Mar 2025 21:01:25 +0000
Files and hashes: 1: Skkt9qCmFcjyoJKLbWcw_zW-zv4.roa (hash: oMEM2PX5h0QQNYCkDuZtaf8uG3ceVoU4JnbpV2MwKWM=)
2: afGmtIBLtqOFSkThBp8lcmdBeAU.crl (hash: LcH+TOERpveLPxEpjRjE6AH6ZyqjtiAcNjgA9Girso4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:82:f7:6e:d0:6a:fb:90:57:2e:91:13:4e:8d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f1a6b4804bb6a3854a44e1069f257267417805
Validity
Not Before: Mar 12 21:01:25 2025 GMT
Not After : Mar 13 21:01:25 2025 GMT
Subject: CN=ae80320533c3148f24afa19eba3eb5ceebd4a532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:0c:4c:1f:9e:82:d2:a7:71:b2:75:23:16:
55:c0:8b:c9:55:8c:6a:55:ad:4f:a8:7a:a8:06:68:
3d:63:5b:35:77:43:10:49:cc:a1:59:25:f9:c2:14:
7c:c5:58:dd:f8:1a:b5:2e:49:38:88:37:6b:42:38:
59:68:7f:cc:5e:c3:8b:0d:e5:56:5b:46:bf:43:b5:
f6:58:af:fe:e2:d8:39:c0:3b:4d:87:41:a0:f0:c6:
f4:ef:47:40:a7:7f:7c:f4:b0:6b:7e:ae:16:90:81:
1f:70:3a:78:d6:e5:3a:7f:62:d1:4f:9a:4e:db:b0:
7c:08:bf:ec:21:32:45:7b:b7:0c:50:2b:1b:bd:58:
f1:27:59:87:b6:f3:47:a7:39:91:f6:ba:31:df:3c:
d5:1e:0e:a6:ed:63:c1:05:1f:5f:69:fb:18:e4:57:
5c:67:e5:ad:e0:17:f3:77:cf:6f:4d:2c:f1:9d:fd:
33:b0:d6:4c:61:35:f9:bc:4e:cb:68:87:72:64:e8:
b3:fe:92:8a:9e:d4:c5:7f:74:ff:1f:42:8b:41:3c:
d6:39:68:53:8b:bf:bc:9d:d0:8c:e0:f8:a9:3d:c4:
4c:81:b5:f2:13:13:ea:77:76:90:d5:40:b9:16:11:
62:61:25:3b:00:40:89:e9:b9:ef:01:e3:cd:1f:d7:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:80:32:05:33:C3:14:8F:24:AF:A1:9E:BA:3E:B5:CE:EB:D4:A5:32
X509v3 Authority Key Identifier:
keyid:69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6b:d3:15:02:64:48:60:2c:0b:54:92:19:cd:81:67:83:8a:
c1:86:cd:4b:ea:b5:69:14:79:6a:20:50:f5:c3:77:23:1f:ee:
44:30:aa:2d:d0:23:76:4d:c5:11:d6:21:a9:36:70:68:91:ab:
dc:56:f1:31:da:11:52:21:7e:61:be:6b:3f:fb:d0:f8:ed:b2:
52:80:7c:15:8f:15:b1:23:76:8c:e3:43:51:f5:81:de:86:97:
8f:44:b4:c7:84:bf:d9:df:07:8a:56:5e:b2:9d:24:3d:8a:c4:
b4:d6:fd:02:53:39:03:94:59:1d:22:54:d5:8f:85:a8:f5:11:
9e:8e:69:30:80:68:ab:9a:77:a9:28:09:ee:b3:61:99:c1:ef:
56:b8:20:60:30:b5:e2:9a:18:04:40:5b:1c:d4:a0:7b:ec:a2:
9e:6d:ca:8c:0d:a7:59:34:7f:84:54:9b:79:22:52:96:95:79:
b0:ad:13:ca:1e:b5:ab:18:61:bd:91:63:13:4a:19:11:26:02:
e1:f9:70:db:b9:b3:70:b0:4d:a6:6f:8f:b5:ba:4e:41:61:c2:
6c:02:d6:5b:95:bd:3d:d4:81:70:e7:d5:72:df:24:df:92:ff:
d1:6f:15:57:2f:50:0c:aa:6d:47:5e:5d:5d:58:40:7b:90:85:
be:23:ce:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:37 2025 by rpki-client