Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
File: afGmtIBLtqOFSkThBp8lcmdBeAU.mft (raw, json)
Hash identifier: lhlmdfPUY8UImGebfmJgAIx7yGX9e8e19qB0ttX+12M=
Subject key identifier: 51:A7:89:4C:E5:28:05:23:6E:25:74:F5:0B:C6:54:41:33:41:A1:A9
Authority key identifier: 69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
Certificate issuer: /CN=69f1a6b4804bb6a3854a44e1069f257267417805
Certificate serial: 0196439F5B1F3BB6E84CC8F10308452375DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
Manifest number: 02CB
Signing time: Thu 17 Apr 2025 12:00:39 +0000
Manifest this update: Thu 17 Apr 2025 12:00:39 +0000
Manifest next update: Fri 18 Apr 2025 12:00:39 +0000
Files and hashes: 1: Skkt9qCmFcjyoJKLbWcw_zW-zv4.roa (hash: oMEM2PX5h0QQNYCkDuZtaf8uG3ceVoU4JnbpV2MwKWM=)
2: afGmtIBLtqOFSkThBp8lcmdBeAU.crl (hash: ooZ7T8SXow20ckP8KhdpRgDW4YElpTCk5b0CO2x7Bdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:9f:5b:1f:3b:b6:e8:4c:c8:f1:03:08:45:23:75:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f1a6b4804bb6a3854a44e1069f257267417805
Validity
Not Before: Apr 17 12:00:39 2025 GMT
Not After : Apr 18 12:00:39 2025 GMT
Subject: CN=51a7894ce52805236e2574f50bc654413341a1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b0:c2:df:cc:21:87:92:ae:d1:e4:57:93:86:
34:cf:9c:9c:33:44:08:58:74:6d:e8:94:92:76:97:
87:36:53:86:d4:51:89:6a:d0:07:e0:9a:66:cc:25:
e3:75:e2:1b:9e:fe:f0:a0:09:06:39:0d:33:89:f9:
cc:56:a8:ae:17:17:ae:6b:34:b1:8f:6e:9a:e9:4b:
1b:73:c5:cc:b6:27:09:89:70:b4:10:da:a8:24:cd:
37:31:a5:48:7b:75:41:84:66:89:37:3f:1a:93:31:
be:96:52:a4:8b:2a:32:40:0b:d6:7b:4d:f9:79:b1:
39:f2:2e:a8:04:fa:9a:1f:0e:87:2f:7a:7b:9a:19:
20:5c:3b:83:76:5e:cd:d0:bf:81:9c:76:e9:d9:57:
88:6d:d8:a0:9b:37:fb:16:9e:4b:eb:78:36:ed:91:
34:53:2f:f2:5f:fc:a7:4c:36:30:f3:7a:d8:d7:0a:
2a:aa:b0:11:90:a4:6c:52:b0:1a:71:d3:5f:3e:c7:
93:9a:6e:79:58:d0:c9:fa:69:69:32:4c:a8:a1:a6:
d9:eb:69:6b:22:32:3d:33:aa:b5:6a:91:82:23:a7:
b7:92:b3:c8:47:e5:a4:75:62:c7:26:56:8f:90:1c:
5c:a8:7a:91:23:f7:6d:09:73:ac:70:6c:3d:79:75:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A7:89:4C:E5:28:05:23:6E:25:74:F5:0B:C6:54:41:33:41:A1:A9
X509v3 Authority Key Identifier:
keyid:69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c1:1c:2f:33:b8:38:b8:46:02:b1:ad:de:fb:ab:33:33:0f:
a1:6b:30:81:6d:52:1b:78:a4:9c:55:e5:61:92:db:61:2e:5d:
c4:9e:94:06:de:a6:58:0d:d5:a3:95:ec:98:c6:f3:4d:eb:0d:
3b:39:bc:87:51:04:9c:1f:6e:eb:ea:56:2f:13:d4:92:e6:ca:
5f:93:c4:ab:69:c4:7c:0c:32:fa:9c:6e:ca:ec:0c:0b:f4:66:
a7:23:ab:35:2f:d0:bc:78:e8:6f:ba:ba:84:8c:a4:05:fe:b9:
d3:b0:1d:15:c7:19:cc:7a:e2:b7:bb:02:34:27:04:2b:e2:ea:
bc:06:b2:34:c2:ed:5c:21:b8:16:9f:bc:cd:e5:2e:af:be:a0:
fb:f1:03:f7:a4:91:85:5f:9c:80:f4:1f:42:9c:57:cf:f0:0b:
a2:21:6d:d3:8f:d0:53:66:fe:0e:65:83:21:9a:73:a1:e3:61:
18:1f:3c:1c:b7:e5:de:e2:3c:14:36:af:53:f7:42:a0:46:1b:
f5:aa:f4:bd:a6:84:ef:65:f9:ac:32:a2:ac:ba:84:fe:a5:60:
27:09:41:ac:53:b0:13:3d:4c:d1:c6:7a:7e:a2:9b:3d:81:e1:
db:1c:cf:e6:30:7e:97:8b:d7:8b:67:85:c7:0a:2c:eb:c3:21:
c2:ea:eb:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZDn1sfO7boTMjxAwhFI3XfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZjFhNmI0ODA0YmI2YTM4NTRhNDRlMTA2OWYyNTcyNjc0
MTc4MDUwHhcNMjUwNDE3MTIwMDM5WhcNMjUwNDE4MTIwMDM5WjAzMTEwLwYDVQQD
Eyg1MWE3ODk0Y2U1MjgwNTIzNmUyNTc0ZjUwYmM2NTQ0MTMzNDFhMWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37DC38whh5Ku0eRXk4Y0z5ycM0QI
WHRt6JSSdpeHNlOG1FGJatAH4JpmzCXjdeIbnv7woAkGOQ0zifnMVqiuFxeuazSx
j26a6Usbc8XMticJiXC0ENqoJM03MaVIe3VBhGaJNz8akzG+llKkiyoyQAvWe035
ebE58i6oBPqaHw6HL3p7mhkgXDuDdl7N0L+BnHbp2VeIbdigmzf7Fp5L63g27ZE0
Uy/yX/ynTDYw83rY1woqqrARkKRsUrAacdNfPseTmm55WNDJ+mlpMkyooabZ62lr
IjI9M6q1apGCI6e3krPIR+WkdWLHJlaPkBxcqHqRI/dtCXOscGw9eXV+KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGniUzlKAUjbiV09QvGVEEzQaGpMB8GA1UdIwQY
MBaAFGnxprSAS7ajhUpE4QafJXJnQXgFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zZjFmMmUtNWM1Mi00ZmIwLWI1Mzgt
MTczNjZmZjk2Mzc5LzEvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zZjFmMmUtNWM1Mi00ZmIwLWI1MzgtMTczNjZmZjk2Mzc5
LzEvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsEcLzO4
OLhGArGt3vurMzMPoWswgW1SG3iknFXlYZLbYS5dxJ6UBt6mWA3Vo5XsmMbzTesN
Ozm8h1EEnB9u6+pWLxPUkubKX5PEq2nEfAwy+pxuyuwMC/RmpyOrNS/QvHjob7q6
hIykBf6507AdFccZzHrit7sCNCcEK+LqvAayNMLtXCG4Fp+8zeUur76g+/ED96SR
hV+cgPQfQpxXz/ALoiFt04/QU2b+DmWDIZpzoeNhGB88HLfl3uI8FDavU/dCoEYb
9ar0vaaE72X5rDKirLqE/qVgJwlBrFOwEz1M0cZ6fqKbPYHh2xzP5jB+l4vXi2eF
xwos68MhwurrEA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:38:34 2025 by rpki-client