Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
File: IMfqxFyNu15e_dZcGIFEmGA_Agk.mft (raw, json)
Hash identifier: oSIoVdZPb2e/2jfVOlBv3kCoEjzVChDk9wUk8y7Tsjw=
Subject key identifier: AF:18:69:01:BB:EA:46:6B:B1:14:23:9B:DD:49:19:E6:90:73:1B:5F
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial: 01967D214EFCE5A7602F41A6095DC1020B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
Manifest number: 09E3
Signing time: Mon 28 Apr 2025 16:00:56 +0000
Manifest this update: Mon 28 Apr 2025 16:00:56 +0000
Manifest next update: Tue 29 Apr 2025 16:00:56 +0000
Files and hashes: 1: IMfqxFyNu15e_dZcGIFEmGA_Agk.crl (hash: nVKVFXeExfVf8KwiJvSIILw1btFXIX7ELO5Aw36vWxc=)
2: fJsTGq6uakoiJ0dwxu_7stP0qrM.roa (hash: MoPxKioiLed+eXmn0AgedAbSRVyzh3BZ35NDQ3cs6II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:21:4e:fc:e5:a7:60:2f:41:a6:09:5d:c1:02:0b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Validity
Not Before: Apr 28 16:00:56 2025 GMT
Not After : Apr 29 16:00:56 2025 GMT
Subject: CN=af186901bbea466bb114239bdd4919e690731b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f8:2e:28:03:d9:90:12:9a:31:bd:a1:ff:e5:
c0:69:46:64:6c:c2:0c:c8:ef:bc:18:57:8c:ce:84:
64:85:39:70:ef:75:b9:81:35:20:8e:b2:1e:cf:fe:
40:c3:0e:21:b6:10:cc:86:52:e8:34:d7:f3:2b:d3:
c7:b3:4b:18:7e:86:ea:17:7c:cd:03:35:5a:7f:55:
47:16:45:b1:32:94:26:22:c8:9f:c6:36:3d:49:1b:
a1:82:54:12:0b:6d:fc:f6:fa:a9:13:5b:38:a2:8c:
ca:eb:e8:60:1e:45:b3:26:1d:1e:a9:1e:c5:34:51:
fb:62:52:2c:50:44:a7:a4:04:9d:a4:a2:5f:b0:c8:
31:63:8d:a8:85:bd:7f:72:d3:51:c1:81:47:04:af:
5a:b5:b8:51:d2:ab:f6:e7:8a:e2:dd:d9:12:22:2c:
ff:95:a2:3a:6e:fe:84:74:a6:73:3a:08:79:f7:48:
4b:19:c0:d9:3d:c0:15:88:75:06:21:bc:2f:29:13:
84:a6:42:06:c9:75:b3:70:ba:e5:f4:b2:84:d0:65:
7f:df:5d:20:91:44:64:74:b4:18:b2:1e:44:4a:0e:
44:1f:9c:c2:34:d5:29:72:62:ca:b0:90:b5:12:7b:
72:ff:cc:68:1e:50:9e:80:9f:20:bc:f5:4b:b9:89:
9a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:18:69:01:BB:EA:46:6B:B1:14:23:9B:DD:49:19:E6:90:73:1B:5F
X509v3 Authority Key Identifier:
keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:6f:90:5d:82:fd:d9:c9:2f:30:63:87:91:df:92:26:1b:c4:
36:21:01:c0:85:18:8e:88:84:76:99:31:b7:e3:41:b7:66:a2:
04:5a:2b:17:62:c0:c0:8d:04:46:c1:09:fc:8e:a0:74:0b:4b:
51:e2:55:3a:93:0c:a6:1f:8d:2d:2e:72:b2:b4:b1:22:d8:5f:
0c:76:ee:6b:d9:1a:cc:6f:da:f2:d4:da:d4:47:af:66:f1:6f:
02:6e:9b:77:0e:95:12:e0:61:61:bd:91:6f:60:e0:aa:35:9c:
bb:a2:82:af:f9:1d:cd:a1:c0:95:cf:bd:ae:fe:6a:ac:7e:60:
6e:ff:73:87:5f:d7:5c:5e:7a:bc:ae:5e:c4:fa:f7:73:01:34:
83:dd:60:8d:71:4b:63:94:cd:7b:73:62:ac:5b:1e:c5:9c:bd:
f3:58:0d:6f:46:7b:6c:54:bd:71:50:cc:35:7f:e7:79:0e:ef:
28:63:d4:6b:62:d5:fe:d2:71:1a:9e:72:4c:e7:55:42:10:e0:
66:30:2d:e4:a4:c2:96:01:c8:f6:f5:98:f7:ee:63:22:20:31:
e3:72:fc:c1:b3:67:f9:51:58:45:65:e9:fa:f2:2f:ba:a9:9b:
ee:0c:e2:b0:b2:0f:64:cc:6b:b6:f6:8c:b1:3a:fc:de:c9:38:
d8:e7:00:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:59:42 2025 by rpki-client