Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: k0A9bUgx6osIP03USMlJ4Af96eUp0CwdAuUeJk4ixQ0=
Subject key identifier: E4:7C:9E:B2:9F:40:2F:3D:E0:4E:81:3F:02:85:89:1E:1D:76:5E:35
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 01967EA178A5B3ED6E7C3F875CE1A1B520F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 23:00:33 +0000
Manifest this update: Mon 28 Apr 2025 23:00:33 +0000
Manifest next update: Tue 29 Apr 2025 23:00:33 +0000
Files and hashes: 1: 1y00I_lr4dZnPswtulIObxWKqNI.roa (hash: B9wbQnXjTiDMVW+/AnVX4UUAGDb3Y2f5WOlbfFrBXa8=)
2: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: MF+t1E3s7gJf8TC6K0gynfmrfAONm8tyORzNqJqmCCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:78:a5:b3:ed:6e:7c:3f:87:5c:e1:a1:b5:20:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Apr 28 23:00:33 2025 GMT
Not After : Apr 29 23:00:33 2025 GMT
Subject: CN=e47c9eb29f402f3de04e813f0285891e1d765e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5b:69:51:84:47:88:c8:9f:3d:04:57:64:f2:
9e:f7:df:dd:5d:5f:49:28:89:2c:c5:d5:e9:14:07:
b0:3c:52:af:8f:41:62:ab:da:8c:a7:57:a2:01:d6:
32:32:da:59:ef:ce:0f:24:07:f7:6f:47:f1:a8:ac:
d1:b4:bd:5f:e7:a8:6d:c9:ee:69:ab:b4:02:fd:a3:
5d:92:c5:e3:df:a3:81:16:3b:98:92:d4:6a:17:27:
b2:da:d3:81:13:34:6d:c1:93:94:f0:d2:3b:34:41:
ff:8a:6f:7d:86:b3:87:5f:95:7d:82:e7:ee:52:db:
3a:4b:cc:46:8c:8a:44:e6:97:99:77:86:28:0e:c5:
2d:e4:28:ef:84:8f:ad:0b:23:94:6a:08:55:fd:6c:
8f:dc:74:b8:62:5c:21:44:17:21:5f:33:19:2b:49:
e3:87:bc:63:02:9b:1a:eb:7e:77:fd:cb:54:75:35:
14:a0:aa:6f:fa:e2:4d:27:ba:06:47:b3:7e:1f:83:
cc:ba:53:ad:dd:27:13:75:e6:44:33:bb:00:d1:77:
a8:26:a1:23:51:ad:2d:a0:97:20:92:5e:38:37:7b:
3e:51:2c:33:1f:6d:f2:97:c6:27:3d:4d:9f:2b:7e:
6f:22:d4:fc:14:82:7c:d3:78:20:0c:bc:ba:cd:35:
5c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7C:9E:B2:9F:40:2F:3D:E0:4E:81:3F:02:85:89:1E:1D:76:5E:35
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3b:dd:5b:6f:4d:47:89:4d:ba:69:9a:da:78:ee:2a:d6:92:
5b:94:72:49:17:f1:d0:93:31:7b:e4:9b:7a:cc:99:eb:9f:31:
e9:b7:10:9b:b1:2c:5a:08:73:35:42:8e:3d:c7:d8:1b:f6:c6:
3d:ea:e0:7c:e8:e0:0c:4c:a4:ce:8a:14:2b:b1:4c:a1:df:be:
05:94:a8:1e:73:81:19:87:ae:c6:e6:db:d2:d2:c8:b8:b0:e5:
d9:fe:91:d1:93:d4:73:0c:ce:af:61:00:c0:8e:1b:9e:96:ce:
cc:04:35:b7:c3:b2:e6:85:3b:97:73:df:5d:85:02:8e:68:6a:
26:dd:3c:fe:67:4d:67:dc:1a:06:28:1d:81:78:1e:dc:99:bd:
e6:74:52:fa:c3:8c:2a:b3:65:8d:b8:83:e5:af:b2:a0:3d:c9:
27:de:27:c7:6d:e0:df:5c:0f:fc:09:91:09:b4:9f:7a:8b:3e:
cd:db:cc:1a:ef:24:5e:e4:aa:6a:19:64:21:79:8a:f4:fd:09:
6f:d7:4b:b2:cf:f8:61:94:e7:52:56:18:dd:16:16:5d:ec:fc:
80:98:c6:f8:e1:d8:24:98:9a:88:5c:c9:be:23:00:81:b9:67:
bf:cb:ed:37:d8:61:c6:6d:35:9a:76:76:03:4f:ea:d0:02:cb:
f2:8c:32:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:33:09 2025 by rpki-client