Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
File: af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft (raw, json)
Hash identifier: IWtMwspYnBQYs+ZdXagfvjxADcRQ/6W98wZxlhgEnxA=
Subject key identifier: 1C:05:0A:4F:36:97:53:6D:B8:4B:CA:0E:A9:A0:9F:62:F8:C6:96:E7
Authority key identifier: 69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC
Certificate issuer: /CN=69fdfe8249f943aabad1881fca5836613a6a67bc
Certificate serial: 019685B606706EA5526F6BEC275A336FE014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 08:00:20 +0000
Manifest this update: Wed 30 Apr 2025 08:00:20 +0000
Manifest next update: Thu 01 May 2025 08:00:20 +0000
Files and hashes: 1: Ceo-HVPoWV3_2SxJvVUz90MzCXU.roa (hash: hrbJxLsRN5MK/3GlRfITM4zehXoSXHDnVzwmbM92S3A=)
2: af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl (hash: lPlTojphRIieork89o0euRTzRtW6iVDLfPYQiswKkoI=)
3: u-uD5eJkyZwHdvCGzRD30UcsPdQ.roa (hash: 972IpaBLO7W9fM3TeJorAGTATEI6lVsjC4rz1G6aPgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b6:06:70:6e:a5:52:6f:6b:ec:27:5a:33:6f:e0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fdfe8249f943aabad1881fca5836613a6a67bc
Validity
Not Before: Apr 30 08:00:20 2025 GMT
Not After : May 1 08:00:20 2025 GMT
Subject: CN=1c050a4f3697536db84bca0ea9a09f62f8c696e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:c9:c1:3f:79:f4:0f:9c:09:80:d9:d0:ca:
28:4c:8e:a5:a9:7a:39:39:68:58:9a:64:e1:63:32:
2e:9c:39:64:62:6c:e1:4f:85:cd:fd:50:ec:52:85:
3d:f0:50:05:8c:9b:8f:0d:74:ed:36:40:96:30:b2:
7d:cf:1d:b5:9a:5c:33:5e:7d:4d:74:b8:7a:9f:b1:
8a:41:41:bd:48:35:01:7d:f9:93:d5:c3:37:07:c2:
62:ff:95:04:c6:82:96:f2:74:34:21:35:a0:53:0f:
4f:c0:57:7f:4d:4e:c4:a8:af:7d:ad:83:ec:0d:ca:
a0:0e:3a:f8:c0:f5:f1:7c:0a:18:c5:4f:1c:3f:2d:
e7:ce:d6:bb:80:4e:88:7a:40:bc:30:eb:4b:a5:a4:
b6:07:0e:37:90:9f:bb:eb:cd:01:d0:f9:5f:7f:d8:
e1:e2:f0:f7:59:3f:cf:50:6f:84:01:be:c4:14:22:
09:b9:1d:30:46:a9:89:43:11:60:62:98:fa:a4:c7:
2c:71:43:a7:88:1a:09:af:15:a7:bc:46:a0:d0:70:
0d:3a:81:29:86:32:62:71:a3:a0:73:be:f7:a5:c9:
9e:13:a5:1f:4f:02:11:da:af:63:7a:4e:c7:de:8e:
37:44:03:db:b0:17:b7:68:38:2b:07:b8:fb:c2:29:
cb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:05:0A:4F:36:97:53:6D:B8:4B:CA:0E:A9:A0:9F:62:F8:C6:96:E7
X509v3 Authority Key Identifier:
keyid:69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:73:1c:4b:79:63:f2:b3:3c:3b:a2:fe:00:30:7a:a6:eb:5d:
0e:59:fe:78:dc:b1:ae:3c:dc:3c:fd:84:53:9c:60:a8:91:17:
8a:c2:42:9c:59:eb:16:ab:32:bb:e1:15:00:c2:78:9a:56:15:
82:cf:07:7f:f9:e3:18:aa:2c:4b:6e:48:b6:94:c8:07:ca:b2:
40:6c:09:f6:04:66:da:65:d5:0a:7c:db:77:0a:28:43:b2:07:
31:f4:a9:7b:89:73:3f:c2:29:96:1b:51:4b:8f:71:02:43:f1:
9d:58:97:41:88:2c:40:2e:2c:fe:d7:5d:55:ba:31:04:ae:7d:
62:01:cb:5b:21:55:29:c7:44:9a:c6:a6:4f:f5:14:4b:8a:b0:
78:b0:2c:7d:db:b0:a6:b9:a7:93:ac:3a:d2:10:7a:07:e6:c4:
5a:e3:e4:8e:08:5c:0a:7f:6a:ad:5a:e0:fc:2c:04:64:05:bc:
12:2d:5b:93:e0:91:15:52:32:45:e9:a8:95:d0:3c:82:21:9e:
ba:a9:e3:81:43:79:40:12:94:d1:ff:0d:bc:2a:d7:fa:2a:dd:
2e:33:d9:94:01:78:d4:be:2d:14:b7:49:a9:11:3c:26:b5:da:
87:3d:6a:68:7a:0c:7f:5a:cc:6b:7d:59:6e:41:9d:70:bc:99:
71:6e:c8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:23:59 2025 by rpki-client