Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
File: afAHCvh31rmGswe5vATvGcRAQz0.mft (raw, json)
Hash identifier: sRRGshVZYVslEr+tJNhcYic2WDtNAy9ctdYo0r3unjo=
Subject key identifier: E4:D0:8C:EE:98:24:F9:11:36:AA:5E:83:F2:72:B2:7E:C1:87:16:EB
Authority key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
Certificate issuer: /CN=69f0070af877d6b986b307b9bc04ef19c440433d
Certificate serial: 0196760C07CAF276BDF0664910C0E9A4C97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
Manifest number: 0743
Signing time: Sun 27 Apr 2025 07:00:21 +0000
Manifest this update: Sun 27 Apr 2025 07:00:21 +0000
Manifest next update: Mon 28 Apr 2025 07:00:21 +0000
Files and hashes: 1: 5m0E4hrlymj_oPq4RutDZTBvpFc.roa (hash: D3u2GpmWvvHTn4HOSLwFPi92ntWCyeD4rYP1qp5He0g=)
2: afAHCvh31rmGswe5vATvGcRAQz0.crl (hash: Fg3/i5OD/wT4/ODuw/WQFmsiKX82TR2C1jQL6+HDLao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:07:ca:f2:76:bd:f0:66:49:10:c0:e9:a4:c9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f0070af877d6b986b307b9bc04ef19c440433d
Validity
Not Before: Apr 27 07:00:21 2025 GMT
Not After : Apr 28 07:00:21 2025 GMT
Subject: CN=e4d08cee9824f91136aa5e83f272b27ec18716eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:8a:fc:b0:51:ed:82:a2:fa:1e:c3:b6:41:
78:65:ad:d5:b3:71:e8:c8:0e:42:a8:5c:a9:b1:74:
e1:11:d4:75:1f:67:78:48:85:e9:56:ba:27:62:12:
c9:8a:47:1a:31:2c:43:0e:5c:1e:55:6e:be:7c:a1:
db:97:7b:80:c8:fa:d4:dc:dc:68:1b:3c:55:5f:4b:
cc:0d:86:a8:36:f4:2d:bd:59:49:75:29:4d:85:b7:
c6:83:8e:ba:89:be:2c:0d:0c:a6:e9:bd:93:0d:76:
8e:f2:29:9f:55:38:6d:f2:ef:ab:da:84:cc:9e:95:
a7:57:ad:2d:ce:01:d6:3a:b3:77:89:09:09:fe:f1:
99:84:24:09:73:f9:65:78:aa:03:9d:1e:84:3d:9b:
bc:97:a5:62:25:90:cf:dc:0f:b4:f2:e2:c0:f4:bb:
8d:8d:95:3a:02:8c:2b:ca:4f:ce:72:11:3c:04:9b:
fb:a5:26:91:7e:01:60:6a:b1:24:4e:40:4b:45:78:
04:7a:82:a0:d0:43:e6:c1:5e:b1:9f:41:ee:e9:e5:
9d:47:fe:3b:9e:fb:9a:e8:d9:49:2e:8b:4c:23:3b:
7a:a4:db:c7:29:d7:cd:f7:87:66:de:30:1c:0f:d7:
f3:af:4c:27:56:ed:5c:eb:83:34:03:11:df:27:fb:
b5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D0:8C:EE:98:24:F9:11:36:AA:5E:83:F2:72:B2:7E:C1:87:16:EB
X509v3 Authority Key Identifier:
keyid:69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ac:3b:cc:b0:c9:71:20:c8:d7:be:b9:71:36:16:ec:90:dd:
33:84:b9:f9:ad:6e:1b:2c:11:2c:de:98:15:9e:e1:65:1a:d6:
03:5b:b7:d2:f6:14:41:6c:4a:67:ae:ca:5f:2d:25:cc:90:df:
f2:cc:57:5d:3d:b2:87:f0:8f:1f:6b:a5:e2:10:96:10:69:e8:
72:8c:45:30:53:4c:a2:a4:41:48:54:1b:3a:5f:73:03:49:34:
c6:66:20:ae:c0:44:8a:66:6d:a4:14:64:98:87:99:ab:97:db:
b3:e8:25:35:c7:39:78:93:fb:ef:3d:84:83:dd:c4:e6:aa:24:
84:0b:6f:4c:8a:d3:74:aa:37:70:bd:80:86:2c:77:c5:d2:d0:
9f:48:b1:82:9a:2e:57:db:03:f5:b1:1c:23:42:79:48:59:08:
37:a7:d3:b4:e6:bf:25:bc:b0:9b:c6:e1:a5:47:7f:79:33:18:
9f:28:57:a9:3b:e0:10:e0:69:9b:29:7e:18:68:9d:d0:fc:7d:
b9:cd:30:53:63:09:6a:56:d6:8c:fc:fc:8d:7c:9c:fb:82:60:
81:30:60:cd:96:64:55:e7:c3:9e:64:30:a8:bc:d4:59:6b:47:
11:2b:88:56:96:89:0e:a6:e5:c0:4f:93:31:57:0b:d0:49:58:
7b:0c:03:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:14:34 2025 by rpki-client