Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json)
Hash identifier: FP1Kj7Dx0fm/2BDoacS/jwXoiN9HnTeFGYM/I0KePds=
Subject key identifier: E6:8F:A6:3F:DC:50:21:FF:7A:D3:7F:B1:86:61:73:5B:31:D1:C6:4B
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial: 019685802025B6D541FAC2512306523A8A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 07:01:28 +0000
Manifest this update: Wed 30 Apr 2025 07:01:28 +0000
Manifest next update: Thu 01 May 2025 07:01:28 +0000
Files and hashes: 1: 0ya4sfz42L60TJ0bcAyUqtENC28.roa (hash: 8fugK/0QqnnO0V3k6nBzfLlx/GUIRpJ1ovogrf7zS2I=)
2: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: u6T9cQpwU3IgHXn8K9cSYg7Imp63kXtzPXlEKxf3X2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:80:20:25:b6:d5:41:fa:c2:51:23:06:52:3a:8a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
Validity
Not Before: Apr 30 07:01:28 2025 GMT
Not After : May 1 07:01:28 2025 GMT
Subject: CN=e68fa63fdc5021ff7ad37fb18661735b31d1c64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:54:9c:22:21:26:c8:bc:69:d8:58:e5:8a:3b:
cb:78:89:8a:d6:33:c2:c3:da:20:f5:5e:8d:e8:ac:
e1:20:76:47:8a:eb:99:7b:db:10:b4:ba:5a:0d:46:
e3:b0:5a:04:a6:ed:da:80:e9:96:b1:94:cb:1f:55:
cc:6d:d5:14:13:ec:84:a3:44:63:e0:8b:bb:2e:8a:
3d:1d:1d:ac:22:1a:a6:6e:6a:f9:ef:4c:33:0a:52:
be:1b:bd:32:64:88:9b:a7:a0:b6:6c:6c:79:f9:b3:
b4:63:12:c6:77:e3:ce:42:81:a1:48:48:ce:cd:d3:
d5:da:d8:76:9c:9b:da:62:f9:54:d2:b1:1d:28:a6:
5f:69:ee:93:d7:52:84:c2:89:bf:10:26:b1:79:2c:
68:d4:ab:4f:f4:a4:84:18:c4:f3:ec:e4:b2:34:43:
e9:f6:2a:a0:da:bd:30:98:e7:ec:e7:cb:0e:f1:64:
1c:0c:9f:e3:68:b5:83:53:71:fe:0e:16:92:e4:c2:
09:58:0f:0c:8c:3a:07:3b:d3:65:d2:fd:53:a4:34:
d5:a4:57:4c:e9:6c:92:99:e6:ea:43:04:7b:dd:1f:
cf:9e:d5:5a:49:67:50:15:14:fd:24:3b:db:3a:6e:
5e:dd:7f:f3:f5:31:c5:58:dc:dd:f0:d2:e4:25:2e:
be:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8F:A6:3F:DC:50:21:FF:7A:D3:7F:B1:86:61:73:5B:31:D1:C6:4B
X509v3 Authority Key Identifier:
keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:84:56:cb:64:6e:2d:95:e9:87:58:53:92:2a:f9:aa:9d:0e:
d6:7a:ef:12:44:cc:60:2a:63:08:37:40:9e:73:fd:1d:e8:59:
f9:45:25:14:41:c9:aa:0d:63:fd:fb:fd:c4:0f:31:2f:70:f9:
e0:92:4b:64:42:0b:af:16:3d:6a:72:85:21:99:57:e7:44:08:
ff:a7:ee:77:e5:a0:93:3c:4f:71:b4:b7:dd:bf:51:20:af:6b:
9b:0b:b9:92:c0:bd:f4:e8:98:96:77:d3:f0:7b:30:44:1a:ea:
35:af:2a:e3:32:2f:b2:57:da:9b:8c:e3:e9:50:ec:b1:85:4d:
3f:6a:2e:2c:a4:5f:40:ba:e2:87:a1:ee:f5:14:ad:01:be:40:
fa:71:b1:74:14:4c:c9:9e:d7:44:6c:81:60:83:1c:a8:57:69:
a9:ee:11:9e:77:95:69:c7:73:d7:3a:09:8b:e3:48:a0:f4:a7:
c9:f9:49:8c:98:da:f6:87:cb:2d:e4:87:13:f7:80:40:1f:a7:
fc:57:96:58:fb:d0:67:96:26:ba:e3:51:fe:35:f0:05:19:1e:
7f:a8:53:43:ef:92:3e:78:1f:91:74:1b:75:78:2c:82:86:62:
7e:9e:25:e2:73:e3:3d:b2:b1:66:d0:28:da:c0:04:fb:b1:d7:
a0:c6:09:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:39:52 2025 by rpki-client