Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
File: aGOaIXWXlv46HZGfm1c362jXCOQ.mft (raw, json)
Hash identifier: +OgmCgN7VOqFbvYNNB7rgl1fRilEoEDPzmY3mSxAQxQ=
Subject key identifier: 4F:CF:22:C2:C8:AD:DB:38:DC:6D:A5:30:2C:A6:3C:84:F8:5D:5E:A4
Authority key identifier: 68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
Certificate issuer: /CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Certificate serial: 0196846C8DA2D57CCB8C2A81526B76555E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
Manifest number: 1260
Signing time: Wed 30 Apr 2025 02:00:28 +0000
Manifest this update: Wed 30 Apr 2025 02:00:28 +0000
Manifest next update: Thu 01 May 2025 02:00:28 +0000
Files and hashes: 1: HaUn7tg_GQoLwUeKln7B89E1Zus.roa (hash: UBP04zlDEuw8zGqO58s8vILU4LoszVd4p1cFKyVRANw=)
2: Vaj_SKghwhMr5GkrNo3CpxB4bEs.roa (hash: 2ufypWC+H0u1FT85vML3Y3XXLbc7QafpFQUC4EhAO8E=)
3: aGOaIXWXlv46HZGfm1c362jXCOQ.crl (hash: Sf7OCYoKYZ70qzi7/17fj9KMokkfSMTFZvPE8Vhb0ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:8d:a2:d5:7c:cb:8c:2a:81:52:6b:76:55:5e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Validity
Not Before: Apr 30 02:00:28 2025 GMT
Not After : May 1 02:00:28 2025 GMT
Subject: CN=4fcf22c2c8addb38dc6da5302ca63c84f85d5ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d5:5a:8f:07:17:97:94:0d:dc:f8:4a:4b:af:
4b:19:7c:74:ef:e7:14:32:f2:12:84:69:08:63:a3:
07:fd:cd:93:e0:fc:d0:10:ad:55:0b:d5:0e:78:ac:
84:56:f9:45:9d:fa:ba:de:7e:04:c8:fb:b2:86:8a:
bb:70:a3:72:67:82:86:39:a1:8a:a9:32:b2:c8:9e:
9e:82:03:d8:3b:30:d9:43:3d:1d:6a:a1:a4:80:ac:
5c:f9:b0:c5:da:7a:42:b3:a1:52:42:8a:05:b9:d5:
2c:f1:ca:26:88:47:15:b1:65:08:6a:67:ef:d6:ce:
bd:32:71:6b:4e:f6:bb:c4:70:43:69:b3:17:63:af:
de:ed:4f:78:da:33:e4:9e:61:9f:31:37:36:bb:ad:
11:58:cd:bd:f1:45:1c:22:3b:72:e6:c8:0b:ec:e9:
c7:44:30:3f:d0:0c:eb:42:53:6e:ef:05:1d:a9:f1:
57:6d:cc:fa:bc:76:15:ef:bf:df:00:d6:d0:65:34:
c5:d7:3b:44:5c:8c:44:bb:dc:af:d0:e2:22:ab:9f:
72:e2:b0:f5:24:be:bd:f2:e3:0a:e2:fd:9d:78:27:
3a:1d:d5:02:0a:d6:db:0a:fa:1f:8d:6d:d5:f4:76:
ae:3f:ab:90:1b:45:eb:f0:82:1d:c1:69:2c:89:ea:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CF:22:C2:C8:AD:DB:38:DC:6D:A5:30:2C:A6:3C:84:F8:5D:5E:A4
X509v3 Authority Key Identifier:
keyid:68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:94:bc:4d:a3:cb:85:d7:ac:68:bc:60:ae:14:2a:10:12:a1:
68:c4:87:ec:ad:53:3d:04:38:8d:d0:b4:26:59:c3:9a:0f:53:
e9:0c:ed:46:59:7c:6e:cd:0c:96:45:c1:3a:fd:24:03:8b:fa:
74:a8:5d:34:33:59:f0:97:7a:a7:3d:44:fc:57:72:ff:51:41:
28:6d:e2:b6:8e:23:aa:84:97:72:20:89:0a:3b:39:2a:f5:2e:
58:49:08:e0:44:67:6f:1e:8c:5a:ff:14:98:a6:85:dd:00:f9:
54:ed:0b:ef:db:50:7a:f8:83:93:79:a9:1b:1a:56:20:05:33:
15:2d:f7:8f:90:b2:5c:13:cc:06:00:f6:53:7d:0c:08:31:e4:
83:48:3b:a3:a4:6d:87:65:cc:b4:56:3c:06:9f:09:47:07:6c:
cb:34:90:6a:ec:78:04:52:b9:6c:c1:bc:bb:e2:26:57:4d:6d:
cb:2e:a7:6d:db:83:b3:fb:ac:1f:f3:1b:f1:6a:95:e2:b1:f0:
71:d0:8b:66:b7:3f:1a:ea:77:de:2d:dc:e1:79:82:b6:92:62:
46:91:f5:3c:23:29:2e:de:47:d9:db:97:5d:0d:db:9e:79:99:
eb:1c:5b:e8:cf:75:95:63:63:3e:5d:5b:d5:20:1a:60:56:b2:
bf:a6:2a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:35:42 2025 by rpki-client