Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
File: aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json)
Hash identifier: JEYyK8U/TW98NeRmESIqhUPvWiuTgSZsvgjjm1qah8U=
Subject key identifier: FA:05:4A:E6:E5:1F:83:74:DD:53:AB:2C:95:AD:A6:34:2C:65:35:F9
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 019675674F9140C3B1AA04DA92577C844E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
Manifest number: 097B
Signing time: Sun 27 Apr 2025 04:00:26 +0000
Manifest this update: Sun 27 Apr 2025 04:00:26 +0000
Manifest next update: Mon 28 Apr 2025 04:00:26 +0000
Files and hashes: 1: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: 9v6ihiuMCkDzrI3CjdHYrs71UVYKm7oc6OyuPGqxVBM=)
2: sO327XoAur1DplfvgQUPrjYRerA.roa (hash: Y49ly/oM+VJ0V39d5VwjbL8ksFq63YJHHzGwktv4Jrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:4f:91:40:c3:b1:aa:04:da:92:57:7c:84:4e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Apr 27 04:00:26 2025 GMT
Not After : Apr 28 04:00:26 2025 GMT
Subject: CN=fa054ae6e51f8374dd53ab2c95ada6342c6535f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4a:3d:60:47:35:fe:68:c7:a6:9c:87:f2:3e:
0b:0e:f2:d3:3d:34:55:c3:e0:21:eb:f2:2b:64:69:
2a:12:e9:f0:4c:34:42:a6:d1:91:0b:84:75:1d:eb:
19:b4:45:32:37:64:16:b0:c6:ee:e9:76:c6:6b:0b:
77:c7:b5:a2:80:d9:96:04:08:08:ed:73:94:dc:30:
43:c0:0e:4c:09:2a:5d:b3:2b:c6:6c:ce:35:cb:07:
22:50:fb:6c:5d:fe:13:ed:31:64:1e:fc:5e:43:e7:
eb:d1:4f:43:ad:80:12:c7:5d:7f:6b:b9:f0:27:d4:
29:8a:6e:61:1f:e3:8e:1a:9d:8f:50:4c:6b:76:bd:
d9:42:71:21:c1:5b:d0:25:70:3e:76:2a:5e:0e:a6:
19:33:43:b6:3b:7b:7d:74:1a:44:f6:57:f8:7e:15:
0e:ff:7f:47:1d:6a:07:69:7a:37:d0:16:cf:96:95:
27:98:d3:52:76:f1:58:c3:00:df:53:0b:ca:f6:b9:
39:bd:9a:3f:64:84:dd:03:fe:ab:ee:c9:0d:7d:28:
cd:1f:b4:3f:a6:75:60:c8:62:7e:38:4b:ae:5e:70:
ad:2f:a1:84:fa:14:ff:84:60:4c:5f:80:6f:d5:b1:
58:35:f8:4b:e4:a6:e5:c2:42:b7:13:fd:06:bb:14:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:05:4A:E6:E5:1F:83:74:DD:53:AB:2C:95:AD:A6:34:2C:65:35:F9
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:46:55:99:ce:b7:91:21:e5:0e:e0:16:da:23:80:da:12:ee:
a8:45:ba:78:13:8c:9e:62:40:3f:5d:b7:f5:1f:a6:5a:a8:d2:
0a:29:64:1d:31:cf:0c:96:13:06:32:51:32:d4:d1:79:04:83:
f9:cf:db:a7:28:23:d9:03:76:07:3d:dd:6c:34:d0:9c:61:ff:
a3:40:57:d5:9a:45:f2:83:a9:a0:bd:84:e6:a0:99:f0:c4:64:
f6:ce:c9:17:9d:39:b0:82:d4:24:e3:e7:5e:b1:a9:13:57:ca:
28:38:42:b7:7e:b5:09:d6:d6:32:79:4e:55:e5:5f:51:99:2b:
f5:59:82:1b:4e:f9:8e:8c:64:02:bd:07:3d:2d:e9:e4:4e:d8:
9f:ad:e2:35:ed:b9:31:2a:70:74:4c:78:40:5d:c8:29:70:f1:
33:12:c2:41:36:08:b3:c5:f0:40:aa:30:4c:cb:2a:96:00:0c:
f3:b8:9d:5b:17:c3:26:c7:53:65:8c:3f:dd:e7:50:e9:4f:b5:
33:c0:e5:56:90:41:55:b1:1d:7e:49:db:c2:fb:9d:09:cb:cb:
1c:77:75:94:52:51:db:7e:ee:12:35:04:c6:db:b7:6b:a9:d0:
6e:73:fc:ff:99:89:82:19:57:fe:af:46:36:79:6b:d5:9b:41:
fd:7c:63:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:42:32 2025 by rpki-client