Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: Li3x5EvcmgLpZp7ordjuvITjl7Uj0WNzLg3udJkq5RI=
Subject key identifier: 8B:60:F1:BA:1C:92:20:AA:DD:BC:BB:DC:E0:C8:62:DA:7B:9B:83:AD
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 01967D8EA7DA221DD08B4F2B3D25E47F625A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 0ECD
Signing time: Mon 28 Apr 2025 18:00:23 +0000
Manifest this update: Mon 28 Apr 2025 18:00:23 +0000
Manifest next update: Tue 29 Apr 2025 18:00:23 +0000
Files and hashes: 1: TvMim_aEtrCLLOp0ZZIFYAVC2o4.roa (hash: /xE4OxOvjCCoCUdeNOdzw/FvM+bpWmIZ3XvVFCX7TVc=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: iAvEebkRCMJSrkf86B1DhipP4YOjeh/6q3L3qaXp2SI=)
3: qi04sQ8qQVwMXdQXve2GNvg8f-0.roa (hash: fLJ+x7i0b6ZT7hHF332I64JRm3fDb0LUQmOcJ/RhLx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:a7:da:22:1d:d0:8b:4f:2b:3d:25:e4:7f:62:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Apr 28 18:00:23 2025 GMT
Not After : Apr 29 18:00:23 2025 GMT
Subject: CN=8b60f1ba1c9220aaddbcbbdce0c862da7b9b83ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:69:7c:93:e3:98:11:9e:1c:d4:cc:f3:fd:
e5:bd:70:3c:95:cc:e2:ce:8f:42:58:5b:9c:5e:f6:
77:65:11:03:66:9b:f1:c8:ea:f2:05:87:48:9d:bb:
3b:e6:d1:d7:45:1e:56:b2:8c:88:eb:82:1b:b6:3f:
98:1b:b4:b8:3d:e8:f9:55:49:e7:c8:1d:e0:e1:e4:
92:73:6f:6e:2e:f4:4a:72:6b:06:84:7e:fa:c2:7b:
68:1f:ac:52:8c:c1:f3:a0:8a:7d:ac:46:6d:a0:f6:
09:bf:99:e8:d2:5d:76:1c:e6:b9:47:8d:0e:60:35:
20:58:f5:56:b8:50:a1:3a:6f:0e:28:96:b3:80:cc:
e3:1a:7c:a3:78:9f:31:3d:5e:41:01:e4:9c:aa:b4:
a8:02:4c:57:7c:23:42:0f:df:a4:cc:c2:65:40:58:
58:cc:d1:6d:e0:4c:13:89:77:fb:d4:9e:c9:ed:ae:
76:76:d3:18:76:d5:1f:b5:72:f8:96:66:53:2a:4f:
34:42:c3:ce:d6:fa:3d:f1:43:44:57:45:5d:ab:2a:
57:d0:48:8a:47:f5:86:60:b8:7e:23:89:b0:06:89:
70:7b:ef:68:4a:d1:1a:15:e2:87:15:6a:6a:b4:ba:
13:b8:fb:c7:45:9c:30:68:98:1e:31:a1:6b:0a:76:
0b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:60:F1:BA:1C:92:20:AA:DD:BC:BB:DC:E0:C8:62:DA:7B:9B:83:AD
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f7:f2:c2:b2:17:8a:e7:ba:e7:9c:6f:6b:20:2c:3a:25:6e:
5f:09:e9:e3:6c:a1:d9:0c:72:fa:f6:58:0a:ae:30:76:d5:53:
46:b9:aa:52:4b:8f:52:c0:15:f7:a6:02:82:dd:9a:e1:0b:47:
1e:f8:2d:37:2c:74:8f:29:a8:51:bc:bf:60:ed:45:c7:f4:b5:
bf:b0:fd:32:11:f0:b7:e6:80:1a:ba:34:5c:7f:be:fc:6c:70:
4e:e5:0f:bf:b7:3e:30:4b:09:dd:44:f8:8d:7c:a2:f5:48:94:
f1:bc:bb:f2:2b:79:a1:ad:28:4d:ba:84:d1:63:18:1a:84:e5:
3c:ae:af:34:c4:f7:89:58:be:de:16:59:3d:6f:b4:1d:01:1e:
03:92:e1:5c:64:2c:cc:fb:11:d7:6d:11:be:69:c9:9a:42:17:
22:6f:38:18:d2:e0:88:17:b6:5e:ba:d0:40:0f:a0:56:89:25:
34:04:0b:42:17:c4:3d:0f:bc:61:0b:1e:74:64:f0:35:38:3f:
94:be:7b:c3:8f:f6:0c:70:65:cb:7e:06:c3:10:6d:73:d1:90:
cd:a9:0a:3f:71:35:d1:f7:ca:bd:b3:f5:be:e1:e3:56:aa:46:
cf:c1:cc:36:66:80:8f:56:7f:c7:33:ce:cb:71:e6:80:53:1e:
5d:b0:9d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:57:35 2025 by rpki-client