Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
File: AguJY5thIAOqgSvktlIbVnhFao4.mft (raw, json)
Hash identifier: MgFO/1Ok/l5lA8ZfRo2OV5dvYS3bp9B3DBjJjWz4rio=
Subject key identifier: A0:10:16:E1:63:EB:9C:B0:01:46:F9:E2:3C:74:0A:2F:E4:0C:92:CC
Authority key identifier: 02:0B:89:63:9B:61:20:03:AA:81:2B:E4:B6:52:1B:56:78:45:6A:8E
Certificate issuer: /CN=020b89639b612003aa812be4b6521b5678456a8e
Certificate serial: 0196A20961BD9103D811FF8DEA0F54703F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
Manifest number: 0287
Signing time: Mon 05 May 2025 20:00:45 +0000
Manifest this update: Mon 05 May 2025 20:00:45 +0000
Manifest next update: Tue 06 May 2025 20:00:45 +0000
Files and hashes: 1: AguJY5thIAOqgSvktlIbVnhFao4.crl (hash: 1dh6b+wBD1ucY+axvE+yo/g0b62jA/WLAw7o5iSX59Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:09:61:bd:91:03:d8:11:ff:8d:ea:0f:54:70:3f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=020b89639b612003aa812be4b6521b5678456a8e
Validity
Not Before: May 5 20:00:45 2025 GMT
Not After : May 6 20:00:45 2025 GMT
Subject: CN=a01016e163eb9cb00146f9e23c740a2fe40c92cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:3a:e2:fa:88:a9:97:df:40:68:f7:19:41:
ca:c3:6c:49:57:ae:df:28:eb:f9:8a:b6:9c:90:6b:
7b:93:24:4f:e8:cf:94:d0:d4:a4:5a:f5:8c:11:b6:
e1:15:f5:5a:d6:42:9e:a7:33:c8:56:f4:02:64:f6:
86:96:ed:d7:4b:cd:70:a5:e2:a8:eb:73:87:6b:22:
61:aa:37:27:23:71:24:ba:ee:8e:5a:ee:12:a1:f0:
1a:41:e0:54:f6:56:ba:10:9d:75:35:8f:fe:69:f5:
14:f3:9b:dd:08:8f:a4:b4:2c:d1:47:67:90:eb:1c:
41:ec:96:d2:9f:02:4a:d5:09:bb:4d:20:aa:f7:8d:
da:10:22:fc:86:25:d9:3b:2f:17:95:07:1e:2d:c8:
f5:4a:c4:1a:e4:f3:e2:5b:e2:ce:f0:af:5e:18:5e:
64:e6:63:e0:2b:6c:90:d1:b9:a7:80:08:21:d8:81:
66:be:7f:20:2b:bf:1b:5b:bb:67:fb:ea:29:e1:b9:
b4:c8:bc:0e:ed:b7:73:dc:e2:17:1c:7a:c4:c0:c0:
a0:79:6f:6c:43:c9:df:a9:a9:c6:a7:92:dc:ad:48:
ba:47:38:18:1e:70:53:7d:72:f9:d0:c8:1c:22:6e:
3c:7e:93:d4:be:1d:d8:90:e4:c0:43:82:19:9c:08:
7f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:10:16:E1:63:EB:9C:B0:01:46:F9:E2:3C:74:0A:2F:E4:0C:92:CC
X509v3 Authority Key Identifier:
keyid:02:0B:89:63:9B:61:20:03:AA:81:2B:E4:B6:52:1B:56:78:45:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9d:fb:d6:87:1d:1e:89:2a:de:2e:eb:b1:39:3a:cd:8a:4c:
45:98:41:51:a2:9e:ba:a0:e3:02:83:62:9c:a0:97:35:e0:35:
e3:c3:b4:e9:cc:aa:6d:c8:89:eb:0c:17:30:84:45:37:69:d9:
e6:8a:fd:a3:21:9b:94:e6:19:bb:c6:5e:e3:dd:74:2d:b8:90:
37:b8:88:5e:af:5d:a7:98:de:9e:fb:01:8a:04:d9:ca:7a:29:
7b:88:89:a9:33:17:dc:23:23:af:2f:28:dd:b5:57:4b:c2:a3:
f7:93:17:69:ef:19:44:38:6b:86:fd:bf:eb:97:19:ef:5b:89:
1d:e1:d0:18:93:75:35:dc:b1:20:56:7f:f1:40:61:f7:12:00:
4e:18:bd:a7:c9:e6:21:92:d5:5b:2c:16:22:31:47:5b:1e:a0:
1b:10:96:82:df:b6:c0:cf:3b:37:eb:42:2f:f7:31:a8:a1:0e:
5b:c8:ba:68:a3:ca:c9:90:f7:4a:e3:f6:a7:e0:c5:a1:62:5d:
a2:c8:9f:dc:ec:15:a1:ae:b8:b3:ad:ae:cb:37:6f:4e:9b:e2:
0c:98:f4:6f:02:6c:12:22:e9:c0:db:cd:e8:74:7b:61:e2:2c:
d0:dd:b8:49:ba:10:12:71:71:f6:f6:c0:e6:e8:c3:89:cf:33:
63:ba:4d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:42:10 2025 by rpki-client