Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
File: aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft (raw, json)
Hash identifier: TYgj9EwuGy7nvcpJVmdgrawOB0qSPQ1iohgNbWNQpF0=
Subject key identifier: BD:8A:1A:53:F0:56:B7:AD:A2:28:D1:2D:03:DE:83:0C:4B:5E:F5:16
Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
Certificate issuer: /CN=6868f656805380ca86e79173789d668dc401d5b5
Certificate serial: 019680FD8F7C4A6A2BE8AE37AA8921515A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
Manifest number: 1349
Signing time: Tue 29 Apr 2025 10:00:23 +0000
Manifest this update: Tue 29 Apr 2025 10:00:23 +0000
Manifest next update: Wed 30 Apr 2025 10:00:23 +0000
Files and hashes: 1: HSyzFVthhSBBD96mxsl0scilpJU.roa (hash: q5u2KllVdiR/BqAy2dqAoFzSZ6PBl0fHr1yzfwddNTg=)
2: aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl (hash: 9sNdSOi7P0zDnooB7Fg87l+z5TnLfwtIVQizOwmilDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:8f:7c:4a:6a:2b:e8:ae:37:aa:89:21:51:5a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5
Validity
Not Before: Apr 29 10:00:23 2025 GMT
Not After : Apr 30 10:00:23 2025 GMT
Subject: CN=bd8a1a53f056b7ada228d12d03de830c4b5ef516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:2b:92:bd:9c:cc:d9:96:4e:e0:d6:7c:51:
3e:99:1e:c8:f1:08:a8:70:17:8e:ac:8b:ec:e5:d8:
ec:66:7b:28:e7:99:54:0c:25:ad:95:2b:7b:b5:0b:
ec:d7:4f:2b:85:fb:70:ed:91:e4:4d:92:50:94:44:
6c:0e:13:d1:5a:da:4b:5a:9b:17:4d:92:60:fe:cf:
a4:ce:25:32:3f:16:38:3c:93:90:a8:5b:23:cb:0b:
7e:32:6b:20:0b:30:7b:d9:6f:de:76:03:0f:21:f8:
1a:e6:a2:53:a9:09:80:94:d3:a3:e8:98:a2:10:94:
13:0c:a1:07:71:99:c3:4f:57:e7:42:6c:7e:46:26:
87:7c:a9:bc:89:16:17:6b:8c:70:f3:66:8e:b0:dd:
51:d2:a7:ab:fc:cc:af:ee:8f:ab:45:58:1a:1c:bd:
43:a9:9a:10:71:71:3c:34:af:c2:18:91:10:71:44:
b3:f8:55:0d:8b:59:d2:1b:ed:22:51:fe:d6:32:f5:
d4:ac:78:4b:61:91:72:0b:4e:1c:48:7b:4d:ff:6a:
54:71:bc:c8:d2:5a:28:a4:9e:f4:16:64:2e:a8:0c:
6d:ca:b1:0d:b3:15:7b:d9:08:ca:17:87:79:f7:d3:
30:67:28:48:5a:60:ee:59:e5:f5:de:40:29:58:ea:
59:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8A:1A:53:F0:56:B7:AD:A2:28:D1:2D:03:DE:83:0C:4B:5E:F5:16
X509v3 Authority Key Identifier:
keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ae:85:a3:07:f5:40:80:9f:f7:ff:88:2c:a7:b4:32:3e:e9:
d7:93:2c:50:46:08:f4:26:84:3e:3c:cd:f4:6d:db:4b:8e:65:
61:fb:09:82:1b:64:8e:40:42:8c:a6:b5:7e:cc:51:0b:73:85:
e8:e8:85:38:6a:ea:70:05:43:6c:c3:eb:8c:ab:93:37:20:96:
73:60:ca:0c:a0:d7:66:3c:6b:c8:87:ba:23:1c:b1:03:02:dc:
e3:ba:b4:b5:43:73:56:2c:23:17:a1:39:7d:92:e7:4f:f8:36:
dd:dd:b7:79:e5:f5:d6:6f:3c:9e:e3:3e:21:76:c9:a2:6f:37:
5f:03:96:a0:81:2c:1c:20:35:ca:c9:bc:d7:f9:8f:a6:fc:a9:
b0:0d:c1:95:05:0d:db:47:75:0c:12:ab:86:73:45:13:dd:ec:
ca:7e:d2:98:5c:c1:79:8f:a1:0e:d0:e6:39:36:b2:b4:f3:db:
7d:63:c8:16:20:76:4b:92:a5:9b:34:74:35:ac:c4:f6:6a:a7:
c8:32:b2:4f:be:ab:cf:21:e9:a2:59:b4:a8:ef:38:71:35:bb:
4f:71:f6:0d:c3:7e:57:91:57:a5:71:7b:05:47:bb:55:fb:d9:
26:77:89:a9:05:94:13:00:43:8d:67:a6:d3:53:b0:30:5e:e9:
32:6c:d1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:23:53 2025 by rpki-client