Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: DS4VydsGXPAli3WKK0EZ6BV9fj9bHxr9h8pX12c0WcQ=
Subject key identifier: B7:13:E7:4F:E6:D9:48:0F:4E:80:C3:AF:38:10:E2:06:1E:BF:A7:CA
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 01967F45EE3E225482270567D62A08CFCF33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 06DE
Signing time: Tue 29 Apr 2025 02:00:11 +0000
Manifest this update: Tue 29 Apr 2025 02:00:11 +0000
Manifest next update: Wed 30 Apr 2025 02:00:11 +0000
Files and hashes: 1: 5MKVHwP5QACbDwSUJKA2GW7sHnQ.roa (hash: iXzFw4W5Foz0uwg9MMW+CW99Q/qBQogltnHgfr+P8PQ=)
2: MTrzAX_D8XgoMN3mTBa0ASkLO-s.roa (hash: 5xLIJUhiZ8b7rVLgmWHwi35aSAKsu4l83lIArXRkd8w=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: c4waxIlc7a7mTTBdDDp9a457W8FAz81L2tfOpLdnjio=)
4: zBSuOK6TSZdyfy80PgMlJMzpxoY.roa (hash: fCR2rdLvuL4emdZ++ZNvy3Kaqpga8geFfxEmhxpqkvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:45:ee:3e:22:54:82:27:05:67:d6:2a:08:cf:cf:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Apr 29 02:00:11 2025 GMT
Not After : Apr 30 02:00:11 2025 GMT
Subject: CN=b713e74fe6d9480f4e80c3af3810e2061ebfa7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:e2:a6:fa:52:ad:6f:19:99:48:50:e4:79:
fa:55:93:1c:83:fb:ae:3c:96:e2:96:0b:62:02:d4:
97:ec:af:bc:dc:49:4d:60:85:70:07:fd:38:d7:06:
11:c9:0b:b4:a3:35:ca:c0:bf:56:c1:b5:d6:05:c5:
71:55:fd:bc:e8:33:29:2c:61:2d:da:f0:1e:06:f1:
bf:95:74:57:c6:4b:4d:de:72:86:ed:00:76:5a:31:
9c:c4:c4:9a:a1:88:32:67:58:28:8e:b2:5c:1f:b5:
8b:d6:91:d4:df:80:23:5f:2e:e9:a3:23:79:a6:b8:
9c:ab:a5:d2:86:a0:90:9a:ae:3e:c4:0b:17:de:3f:
fe:bd:a9:ad:4d:6e:12:cd:76:89:b0:54:0e:85:e1:
d5:6a:20:cc:2e:98:9b:ab:b2:f1:b1:38:cf:a2:9b:
c5:cd:51:df:fa:6a:70:64:2b:10:51:5c:ee:6f:d7:
b7:82:c9:af:0e:aa:ce:94:83:4c:d1:b3:28:df:1c:
b6:2e:98:3f:8b:27:c0:0f:7e:85:26:c6:64:0f:a1:
db:21:61:61:4e:2f:8e:da:e1:8e:db:98:0f:78:9d:
98:b3:92:04:73:dc:9e:26:66:d8:a1:c3:bb:79:12:
4d:87:60:d7:b8:06:d5:ad:ef:bc:e5:90:1e:82:3b:
9d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:13:E7:4F:E6:D9:48:0F:4E:80:C3:AF:38:10:E2:06:1E:BF:A7:CA
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:32:ba:0f:de:57:de:69:f9:95:78:3a:bd:33:6b:a4:6e:5b:
52:d2:da:1e:4e:53:43:5c:37:86:0f:0a:38:48:05:fd:50:62:
93:2f:fb:7c:a7:7e:1b:16:97:fc:f9:99:35:87:47:8d:62:e0:
0e:be:e2:d6:7d:f4:70:21:43:a2:62:9f:56:a0:41:04:b8:22:
b0:95:33:ca:60:26:e5:02:fd:df:29:d0:e6:ba:41:da:16:6f:
ed:4e:0c:45:dc:d4:ad:2a:70:59:3f:14:f0:ae:fa:4e:e1:5a:
1b:1e:07:e6:c1:8f:22:6a:6a:20:f9:19:2a:c5:a3:b3:8c:b8:
8b:04:8a:16:99:f4:d7:5a:bd:da:0d:65:04:9c:2d:04:53:63:
f8:41:24:ab:ec:f1:d3:ff:56:3e:e6:a0:5b:6f:a4:0a:81:91:
d8:d9:ea:0d:0c:09:90:3b:3c:7b:1c:04:7b:4a:92:ec:5b:f4:
31:4f:9e:d9:14:de:fe:a8:f0:74:d2:69:c8:3c:ca:bf:5c:42:
f1:fe:7b:b3:5e:be:a9:dc:94:bf:6c:f7:bb:3a:dd:e4:95:2d:
a7:91:3d:ea:f3:34:35:77:7f:c2:17:69:8f:9b:cd:0b:8b:9b:
67:a0:69:25:63:ab:df:ed:a8:86:f0:88:75:fb:7c:89:f7:ae:
9b:93:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:46:23 2025 by rpki-client