Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
File: AFetCa6aGpgBInWFGqvmnk4VovQ.mft (raw, json)
Hash identifier: azfnImvsgQNIDSZtWZwAKmk8s/kj7KtGdi9LbMArHOU=
Subject key identifier: 2E:B3:40:F0:3E:3D:C0:A1:31:89:31:94:DC:A3:E2:1C:63:55:C3:31
Authority key identifier: 00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
Certificate issuer: /CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Certificate serial: 01976D3E71FFBF1A6B6E3649A8680DB92957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
Manifest number: 0E77
Signing time: Sat 14 Jun 2025 07:01:38 +0000
Manifest this update: Sat 14 Jun 2025 07:01:38 +0000
Manifest next update: Sun 15 Jun 2025 07:01:38 +0000
Files and hashes: 1: AFetCa6aGpgBInWFGqvmnk4VovQ.crl (hash: FHdgdreQ4/Dv8Au0URE/iElz/SdJg5sb1jVIbqd9IwQ=)
2: uxPm2jgrGB9aUpoVSqtxOrk6oLc.roa (hash: jnz+6TEphg6WeFVMNjeLnKwOXT2+7WslFFXVeACqJbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:71:ff:bf:1a:6b:6e:36:49:a8:68:0d:b9:29:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Validity
Not Before: Jun 14 07:01:38 2025 GMT
Not After : Jun 15 07:01:38 2025 GMT
Subject: CN=2eb340f03e3dc0a131893194dca3e21c6355c331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:03:7d:a3:40:9d:ae:f5:b5:59:23:b4:f2:71:
10:73:66:9d:8d:56:27:cc:3f:f2:cd:04:3a:b5:96:
d5:fe:69:2f:e7:b9:cd:1f:60:55:bd:ad:61:10:75:
7a:37:13:41:08:bd:3a:ef:a1:c4:40:75:92:66:a5:
85:5e:76:c9:60:c3:81:a6:a0:16:b8:a8:0d:a3:06:
0a:7b:b2:b6:e2:31:e8:e8:c1:43:a5:7e:2e:2f:c3:
4d:31:17:da:0e:65:5b:37:be:a8:f9:e4:00:67:ee:
d4:5f:56:b4:82:a0:b9:af:f4:36:9e:d5:b7:49:16:
df:1c:90:65:9d:77:34:1b:5a:f2:eb:63:cf:ed:39:
0a:38:04:63:8d:d8:30:b4:63:8f:29:5c:2f:31:d7:
82:12:97:17:4d:7a:78:e8:ae:6e:bb:d2:83:73:07:
7c:37:8d:e6:ca:09:6c:f1:b9:d4:2c:9d:e6:6d:a3:
ff:9c:7b:60:f6:4e:e9:6d:b3:24:8d:3e:32:ec:bb:
27:92:65:00:7d:49:6d:92:fe:fa:86:28:93:2c:50:
4e:4e:cb:20:32:e9:60:6f:e4:87:ac:17:a7:07:4d:
d1:89:d8:af:ed:1a:e3:83:42:3e:40:1b:5d:a4:a3:
88:6b:56:b0:b1:98:a8:f2:05:c2:d8:c2:60:bb:b9:
00:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B3:40:F0:3E:3D:C0:A1:31:89:31:94:DC:A3:E2:1C:63:55:C3:31
X509v3 Authority Key Identifier:
keyid:00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e7:28:e4:b5:5e:0b:6b:07:6d:a5:66:1c:90:4a:d7:bd:18:
c2:06:d6:26:85:8e:15:a6:1d:fe:9a:9c:05:cc:d9:8e:32:73:
30:c3:37:11:c6:57:10:ca:19:cd:2b:28:b8:82:a2:17:4a:e7:
a5:76:8e:41:71:d9:64:80:66:d3:2a:62:08:e4:65:90:cb:75:
fa:44:1c:ea:a5:6f:ec:99:95:33:8a:94:17:2e:78:9a:e3:55:
94:39:32:e2:e2:68:69:ba:dd:21:ee:0c:76:e9:87:db:87:79:
cd:e5:d8:28:ef:f8:af:57:a0:2f:f0:a4:bf:92:b7:52:95:98:
52:94:6e:36:36:d3:78:58:e0:cb:ab:38:75:92:9d:b7:08:a5:
d6:b5:cd:cc:3c:c1:6a:57:b0:76:47:f0:b2:51:3a:b6:d1:29:
3e:80:5a:c7:32:3f:7e:82:f1:e9:63:34:9f:4e:31:19:5a:6b:
f5:2f:2f:e0:fc:83:8a:81:70:fb:69:0c:3c:68:95:5e:b2:5b:
65:53:f5:4b:b3:ac:84:27:d4:ce:d7:64:67:db:be:97:b5:e1:
0c:92:54:6f:d0:c7:35:fc:05:e1:8d:d9:e3:b8:61:64:b9:a5:
b5:79:bd:93:f9:6e:45:c8:a3:3d:5c:c1:c3:a6:81:cf:00:00:
3f:43:3f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:14:38 2025 by rpki-client