Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
File: AFetCa6aGpgBInWFGqvmnk4VovQ.mft (raw, json)
Hash identifier: qK1KOl8tjZd039ZuNavvzfW5po4QxbxzxpK8lUeOJWk=
Subject key identifier: 1E:48:11:9F:CD:24:98:56:06:96:9F:7E:AD:5D:45:B6:F3:98:91:85
Authority key identifier: 00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
Certificate issuer: /CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Certificate serial: 0196760CF7BE610A4A5F97AC7C1053E48EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
Manifest number: 0DF7
Signing time: Sun 27 Apr 2025 07:01:23 +0000
Manifest this update: Sun 27 Apr 2025 07:01:23 +0000
Manifest next update: Mon 28 Apr 2025 07:01:23 +0000
Files and hashes: 1: AFetCa6aGpgBInWFGqvmnk4VovQ.crl (hash: ljKEY00enea0OTBH7WafAADpOd2LHr5DId7UFPOQJO4=)
2: uxPm2jgrGB9aUpoVSqtxOrk6oLc.roa (hash: jnz+6TEphg6WeFVMNjeLnKwOXT2+7WslFFXVeACqJbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:f7:be:61:0a:4a:5f:97:ac:7c:10:53:e4:8e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Validity
Not Before: Apr 27 07:01:23 2025 GMT
Not After : Apr 28 07:01:23 2025 GMT
Subject: CN=1e48119fcd24985606969f7ead5d45b6f3989185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:a9:95:ea:07:63:cf:04:c6:4b:b4:be:ae:
42:28:1a:e1:d9:59:fa:8a:31:8c:b6:56:92:c2:a1:
49:2d:82:3e:81:9f:74:1a:3a:c7:56:97:c0:04:87:
25:25:0a:65:71:80:c1:dd:37:cd:82:b7:46:6f:62:
42:73:ec:da:01:a9:06:09:02:08:64:99:6c:4d:a3:
70:0c:15:8c:ad:01:9a:cf:b4:01:92:0a:0b:87:76:
c6:96:c4:35:4d:cd:d6:df:2d:ed:82:02:92:8c:41:
75:ec:40:01:31:80:4d:17:c0:b5:52:0f:49:f4:94:
bb:2a:c1:c4:d5:56:99:65:08:7e:b9:7e:15:e3:ab:
8e:bc:6e:05:e3:5e:66:ad:58:05:5c:dd:95:e1:75:
ca:d7:26:64:d7:20:d1:34:0e:fb:7a:ad:8b:ea:d5:
61:d7:3c:0c:bf:3e:ad:cd:3a:27:d6:8c:fb:7e:5e:
71:51:98:15:75:8b:7a:10:8e:f0:94:12:72:c1:b2:
17:78:10:e7:62:97:8a:4b:e5:36:e6:ec:d6:2b:07:
7a:04:84:51:3c:b1:13:e3:70:9e:7f:ac:44:45:08:
42:37:17:df:f4:1b:04:2c:2e:53:39:fe:e7:cc:ca:
be:5f:37:c7:1a:5b:c6:d2:64:2f:bb:76:64:52:b6:
57:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:48:11:9F:CD:24:98:56:06:96:9F:7E:AD:5D:45:B6:F3:98:91:85
X509v3 Authority Key Identifier:
keyid:00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:90:d0:ab:f7:42:0c:2f:19:32:96:e1:26:4b:c6:a7:87:5d:
1f:23:74:34:d5:01:df:2c:22:30:41:e6:2e:70:de:82:21:88:
bc:3a:68:63:19:ab:d6:27:06:d4:16:76:f4:ba:ab:05:74:56:
2b:17:31:61:a9:8e:49:e6:b8:ee:d9:02:c4:60:6f:b1:7f:95:
95:83:0d:7d:0d:b7:20:1c:e4:a4:84:bf:f2:b6:33:50:53:73:
3c:21:b8:04:65:24:fe:9f:dd:62:9c:a6:08:49:cb:26:18:5f:
87:18:78:92:f5:d6:19:aa:38:11:e9:7f:1e:ac:a7:eb:85:90:
a8:3e:85:11:8a:5b:ef:2e:c1:4a:66:f0:94:da:c3:7b:c7:2d:
a1:d0:36:e7:31:32:23:fd:9f:cd:bf:26:5c:68:a9:82:dd:e0:
c2:f2:75:52:e3:f3:e8:66:3a:ed:e4:1c:fc:5d:f7:f6:db:48:
44:0c:8e:92:cd:8a:44:e8:02:f1:2c:20:55:70:3e:24:87:de:
1c:6b:2d:91:07:3a:a4:32:9c:7e:52:fe:a4:fa:b2:fb:b3:49:
fe:c1:bc:3e:65:1e:0a:64:09:c6:8c:79:90:34:e7:d1:fd:a7:
6f:48:15:a0:16:75:e2:ca:ea:d6:02:53:15:87:3d:fe:eb:98:
40:c9:43:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:43 2025 by rpki-client