Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
File: aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft (raw, json)
Hash identifier: YvCAHYjQuUng8ro9nBhki9VNFGzHc5kACoAQVu7DBZo=
Subject key identifier: C7:4A:27:DC:7D:10:92:69:A9:13:EA:24:35:63:88:88:8B:1C:89:BF
Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
Certificate issuer: /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Certificate serial: 019677FB7DE1DF3F4296B9A3129C5A1627A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 16:01:32 +0000
Manifest this update: Sun 27 Apr 2025 16:01:32 +0000
Manifest next update: Mon 28 Apr 2025 16:01:32 +0000
Files and hashes: 1: 7aXu2rhZmv4-BuCU66jCzo0ecAY.roa (hash: tS1hLjKGnhqlQ+lG8lyvuM5sWOqjvWcE7iwF3zaabYE=)
2: aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl (hash: qIb0Z+ucY70IBl+qSIwJ/iTGA3MjC/IVKNYgHu4jxAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:7d:e1:df:3f:42:96:b9:a3:12:9c:5a:16:27:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Validity
Not Before: Apr 27 16:01:32 2025 GMT
Not After : Apr 28 16:01:32 2025 GMT
Subject: CN=c74a27dc7d109269a913ea24356388888b1c89bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:91:a6:8c:60:ba:40:52:58:d2:7e:99:90:
74:e0:93:10:2a:be:92:01:7c:4c:cf:d6:a0:ef:b9:
67:de:41:50:d4:85:76:cf:4d:5f:97:41:36:0c:22:
02:76:1d:ed:43:04:f7:d2:37:75:a6:3d:40:15:ac:
ec:6e:23:1f:e1:7c:14:98:4a:d4:a9:17:50:d5:ab:
f7:31:7e:e4:43:e4:20:fc:17:f7:9e:6f:de:d2:ef:
05:77:56:0f:4b:40:ad:07:89:54:cd:81:a9:b3:bd:
02:47:94:e1:a9:7b:82:ad:83:69:4d:5a:86:c0:9c:
3f:f3:0a:d9:51:0a:7a:d8:c7:3a:59:cc:d9:8f:ad:
53:bf:a3:f6:2e:e2:77:93:16:fe:60:70:6c:94:6e:
d3:1b:f1:9c:23:78:c7:2c:4e:40:d4:5c:1b:0b:c6:
97:b8:50:fd:b0:1c:6f:b9:ae:e0:90:3e:9f:a6:78:
71:64:54:67:9f:10:8c:c4:af:f5:58:c1:b3:59:3d:
bd:99:a3:45:a7:5b:d7:ca:67:78:50:54:02:32:d7:
fc:f1:dd:80:00:0d:ea:c0:5b:5e:68:3b:38:e9:12:
69:4c:6c:0b:14:ef:86:bb:2f:c7:41:82:68:d3:89:
c5:bf:d4:e0:dc:6e:c3:08:75:18:92:9b:1f:82:dc:
61:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4A:27:DC:7D:10:92:69:A9:13:EA:24:35:63:88:88:8B:1C:89:BF
X509v3 Authority Key Identifier:
keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cc:e9:85:f6:76:1e:d5:c4:b3:8c:0c:8c:d4:9a:ad:ef:b9:
66:1b:5a:71:5d:d2:aa:3a:95:5b:1b:48:64:67:f7:39:c3:b5:
47:52:3a:77:e9:ab:04:e6:9a:97:25:42:3e:9f:2d:79:a3:66:
75:cd:5b:bd:de:f0:6d:58:9f:41:fb:8d:2b:78:cb:5f:61:71:
f7:1d:73:96:ec:1b:27:78:1d:b6:c6:a0:ce:b9:c8:57:a7:b5:
dc:cc:09:c4:35:95:d3:fa:da:48:cb:04:3b:6f:03:2f:15:34:
5b:1c:49:72:21:e9:b6:a2:5f:4e:58:4e:bb:cb:df:63:d0:ea:
52:52:00:9a:40:f1:89:2c:a1:7f:53:db:0d:f1:c1:91:ca:e0:
5d:91:fe:fa:87:3f:60:e6:d9:3b:00:e6:50:b7:a2:71:04:2b:
4c:b3:9f:7e:33:12:94:b1:e1:26:2c:7d:2b:a0:3e:d7:c4:07:
ad:8a:22:e3:f6:fc:aa:37:2b:42:6c:23:c9:69:ad:b2:fa:fe:
57:53:fe:64:84:12:20:45:90:a4:8f:5b:04:25:5e:be:2a:c3:
dd:c0:66:bb:e0:ee:7c:43:74:6a:da:21:12:46:5d:4c:d2:9e:
74:d3:bf:3a:cd:37:a1:ff:0d:0a:9e:40:d0:b5:25:2e:95:4a:
77:a8:1e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:05:31 2025 by rpki-client