Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier: yDd1/ww14wTalyIBQ2uUEhKwbW3fuc9xksqthFjSu0k=
Subject key identifier: 1C:CC:27:03:02:98:7A:8D:C5:6A:59:BA:70:34:71:71:E4:57:9B:0B
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 01967153C0B4D79F6F59AD12A681FC3E8719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number: 0801
Signing time: Sat 26 Apr 2025 09:00:36 +0000
Manifest this update: Sat 26 Apr 2025 09:00:36 +0000
Manifest next update: Sun 27 Apr 2025 09:00:36 +0000
Files and hashes: 1: GRjGVnhDoWbQf18vA-j6jPrf8bk.roa (hash: zfy3Xeb5F33VM6wGODUsXEb4Wf9If41Lyk9PhoslocI=)
2: Ydee_9sKBOYSNgV3DpsBR-w7_U8.roa (hash: tgY6PnqoOsKcCw452vOSzlvkg7P0cNWRWTWaQclJxEc=)
3: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: xwuoOjBdxUzoNGDSe0nRY54j9DStUvxPA802QKG/G3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:53:c0:b4:d7:9f:6f:59:ad:12:a6:81:fc:3e:87:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Apr 26 09:00:36 2025 GMT
Not After : Apr 27 09:00:36 2025 GMT
Subject: CN=1ccc270302987a8dc56a59ba70347171e4579b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:3b:80:41:2c:e5:31:3e:72:fa:54:ae:99:
ab:b3:56:dc:4c:7d:03:e6:d9:e5:07:25:e5:81:68:
d5:14:26:eb:e5:2b:60:3b:dc:9c:de:dd:fc:52:6c:
74:c8:9d:7f:d6:f8:b7:e3:83:da:a0:43:6f:df:03:
29:e3:c6:78:19:21:00:c3:04:91:00:54:e9:97:42:
1e:3c:55:07:d9:74:05:1b:f9:9d:e5:20:1e:b3:1b:
65:04:d5:ad:49:da:60:03:34:4e:d4:3c:4b:16:ec:
c5:9f:46:72:6f:b3:74:38:a0:5d:0d:2a:ae:0e:e0:
63:ca:8e:63:a0:60:a6:79:36:f4:59:04:c5:1f:bd:
b1:cc:1d:a4:5f:f9:e1:e5:1d:b7:fa:5c:a4:1d:ba:
94:80:a4:fd:13:4f:2c:06:38:cc:fd:a0:fc:2a:38:
ea:86:2e:52:60:67:39:a6:f4:4b:4b:2b:8e:50:51:
5a:11:6b:44:e7:ef:10:1f:7a:77:9f:00:1f:15:6f:
17:31:8a:a6:15:16:f4:c6:4a:62:53:57:ad:19:ff:
c9:e0:f6:35:cd:e7:31:87:75:73:35:e7:d9:d1:5f:
9e:a0:d0:57:54:37:9f:14:44:06:6c:ca:20:45:40:
76:88:87:d4:55:bd:31:7d:cd:74:b4:18:d9:0f:9e:
2a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CC:27:03:02:98:7A:8D:C5:6A:59:BA:70:34:71:71:E4:57:9B:0B
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b6:26:b2:c9:de:14:51:91:5c:0a:7d:cd:e7:2f:48:a7:29:
3a:fb:2c:cf:41:49:9d:d6:92:f2:ee:59:70:41:fb:09:48:a8:
e5:76:c5:48:c2:62:61:2c:f4:67:f7:34:e2:b9:d2:05:86:9e:
d4:68:e5:fb:85:da:4a:a7:57:9e:a9:4b:3a:75:72:4b:d1:03:
62:f9:a4:b9:99:70:a5:b5:ba:50:1f:a1:6e:b7:64:d4:0e:49:
cf:e3:8e:31:2d:1a:b0:d8:65:ae:64:3c:e7:c0:0a:b6:cd:15:
a4:e4:e2:c0:c0:48:6c:0f:3b:5e:92:42:9a:f7:43:bc:5f:59:
8e:9b:c1:3a:dd:9b:80:bc:41:d9:7a:85:c8:d5:60:73:1e:e7:
d4:53:44:5b:df:a6:05:8a:13:59:ad:8d:01:49:89:e3:12:e9:
61:54:4e:0c:0b:a3:20:a9:4b:55:2c:d4:d7:44:c9:48:90:5a:
9f:56:ae:66:97:14:31:45:57:b7:a3:76:72:55:9f:82:56:75:
21:c8:9f:69:f6:0e:c1:95:cf:a6:bd:2f:30:ef:8a:3d:b7:3b:
bc:ff:b9:d9:c2:b3:ae:ac:34:99:cf:48:af:69:bf:91:1c:a3:
cd:d4:4e:93:35:47:97:a2:b3:b5:4d:5f:df:32:56:5d:50:5c:
2b:48:03:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:02:41 2025 by rpki-client