Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
File: afGmtIBLtqOFSkThBp8lcmdBeAU.mft (raw, json)
Hash identifier: oHiXDRYR9UuV0HRnKVPG1q/ETQfsJmWhgZNvZ0U0OFA=
Subject key identifier: D6:5D:41:32:B0:6B:87:87:76:67:EC:B9:A7:C2:DD:AE:5C:FB:36:EC
Authority key identifier: 69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
Certificate issuer: /CN=69f1a6b4804bb6a3854a44e1069f257267417805
Certificate serial: 0195108FF53229F2FCD92566EACF8CD5899C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
Manifest number: 022C
Signing time: Sun 16 Feb 2025 21:00:24 +0000
Manifest this update: Sun 16 Feb 2025 21:00:24 +0000
Manifest next update: Mon 17 Feb 2025 21:00:24 +0000
Files and hashes: 1: Skkt9qCmFcjyoJKLbWcw_zW-zv4.roa (hash: oMEM2PX5h0QQNYCkDuZtaf8uG3ceVoU4JnbpV2MwKWM=)
2: afGmtIBLtqOFSkThBp8lcmdBeAU.crl (hash: 3IPMQ+rM31mBg78qeS9+DuZ6M2MTG8FmCiLNjjLRSfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:f5:32:29:f2:fc:d9:25:66:ea:cf:8c:d5:89:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f1a6b4804bb6a3854a44e1069f257267417805
Validity
Not Before: Feb 16 21:00:24 2025 GMT
Not After : Feb 17 21:00:24 2025 GMT
Subject: CN=d65d4132b06b87877667ecb9a7c2ddae5cfb36ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ea:a1:8d:4b:3c:b4:fd:22:34:9b:89:32:34:
a3:d0:e6:78:17:cf:25:e0:ab:c2:cf:63:67:f1:9b:
2d:a1:f1:a8:29:42:11:b4:a6:84:49:5d:65:8d:2b:
66:49:b4:fd:c6:6e:d8:15:a4:95:42:67:e0:68:eb:
13:dd:d6:b6:e3:68:69:ba:00:0c:bd:d8:b9:7f:e6:
ba:8e:24:2e:d9:67:23:08:dc:62:41:20:17:51:e4:
ef:dd:5c:4a:ec:7a:f5:bf:4b:1b:18:04:3b:d8:24:
95:2e:c2:02:a4:9c:f6:5c:ca:10:57:42:c6:4c:d0:
39:e6:e5:e5:0a:17:36:35:d8:bf:a8:7f:e1:e9:2d:
5f:72:ea:6d:c7:47:79:a0:3c:26:25:e4:15:e5:09:
ee:81:ad:1f:d9:16:fe:9a:85:de:91:7d:bf:f9:9d:
47:5a:ef:82:17:c0:31:07:fc:8f:cf:83:f1:c6:f6:
54:f0:d9:19:a8:7b:67:4e:1f:14:68:c1:34:04:fc:
9c:55:c0:44:da:ed:8b:4a:28:a1:a0:e9:b8:a6:fb:
b6:dc:d2:3e:48:f9:d8:d0:c3:1f:e5:8f:b3:e3:6d:
f2:53:06:e9:ee:2c:ca:96:fe:85:f8:bf:80:9e:b3:
0e:69:01:f2:6a:91:4c:a0:ff:b6:29:0f:d8:46:71:
71:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5D:41:32:B0:6B:87:87:76:67:EC:B9:A7:C2:DD:AE:5C:FB:36:EC
X509v3 Authority Key Identifier:
keyid:69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:d7:ae:f1:a2:f4:b9:88:64:f2:ef:cc:21:bd:64:e6:0c:b1:
ca:62:00:93:6f:84:cf:ff:00:02:e3:18:f6:d2:b5:09:7d:39:
64:6a:11:74:9b:3b:df:de:cd:df:03:9f:35:b2:43:e1:83:a8:
a1:cb:7b:07:53:63:8f:ce:8f:52:4c:e6:42:8e:fc:c9:12:60:
e2:0f:45:12:7e:68:56:54:21:fa:3d:ba:09:7b:5f:23:12:f0:
52:50:08:17:a3:5a:60:3a:31:59:a5:1e:49:93:f5:4e:c3:33:
f7:2b:0a:60:94:33:05:7a:51:72:6a:63:a2:b8:4d:19:13:54:
7b:ef:a3:8f:a4:08:c6:7b:2b:c2:b5:39:24:e7:d9:f5:93:af:
46:2f:ab:46:49:23:25:f2:51:a2:61:9d:09:f5:09:f7:ee:99:
5c:fa:57:26:d5:32:cf:9b:7b:ae:08:6a:ac:6b:2e:50:ce:5f:
a4:a4:80:47:dd:d7:e2:f6:b4:50:b1:e1:1c:b0:5b:3f:ad:26:
03:92:13:0f:88:c9:df:b7:a7:41:81:40:eb:17:49:d7:bb:19:
f8:85:3b:2d:7d:2e:4c:33:3a:a0:94:8a:de:dd:3c:74:6c:4e:
54:63:52:40:38:f9:43:e8:15:bc:d5:5a:95:bc:e5:85:3a:81:
cc:41:c7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:43 2025 by rpki-client